Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Target
NEAS.019e30994dab5f5d5c92f7a2bad7a2a0_JC.exe
Size
327KB
MD5
019e30994dab5f5d5c92f7a2bad7a2a0
SHA1
b1e192f3f7c38c370ba69f43589e287f5a6a9818
SHA256
4b254b1137f4faa65302868eb63ccb23e91c34a291dc9304359e39c23074f36a
SHA512
6123e20eb3048d6d8342ce5eb16e47b3fc2622faa3bba574d45e6d24251729b912d24f45c467e54207feb67db9cfe139cb63fac82e99014ceea31c63b7280f9d
SSDEEP
6144:bfdRm3eP3+E4xOVxDs+e3ySRUbiNV4m5LqvvMvHFs4EQaIKj7u8:bfP4q3+JqxcS0cvUsN7u8
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlInitUnicodeString
IoDeleteDevice
PsGetVersion
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwQueryValueKey
ZwClose
ZwOpenKey
wcsncat
RtlEqualUnicodeString
PsCreateSystemThread
IoDeleteSymbolicLink
NtCreateFile
NtClose
RtlAppendUnicodeStringToString
ObReferenceObjectByHandle
KeWaitForSingleObject
RtlCopyUnicodeString
ObfDereferenceObject
NtOpenFile
_wcsnicmp
RtlAppendUnicodeToString
ExAllocatePool
KeBugCheckEx
memcpy
memset
KeGetCurrentIrql
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ