Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
MDE_File_Sample_30abc0cc700fdebc74e62d574addc08f6227f9c7177d9eaa8cbc37d5c017c9bb (1).zip
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
MDE_File_Sample_30abc0cc700fdebc74e62d574addc08f6227f9c7177d9eaa8cbc37d5c017c9bb (1).zip
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
UDD1FD9.sys
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
UDD1FD9.sys
Resource
win10v2004-20231020-en
Target
MDE_File_Sample_30abc0cc700fdebc74e62d574addc08f6227f9c7177d9eaa8cbc37d5c017c9bb (1).zip
Size
8KB
MD5
282d6e9808d3d7028bb02c5c58964e9d
SHA1
288709812b3da78f608ab5c951e2c2e4d9eb8bde
SHA256
48efdce91462fd4efe352d224a495f4718ab1dbc7618f33def171106f6d4223a
SHA512
cfbfb6fd8286f4486ccef271501205b859e43289cf96fc2096fba2aa23819504aea634a041efcb3e859ae1f12e188805ec83a2aa18f13db9a02904e929cf2469
SSDEEP
192:rv+2N20wbf+eUUQnYlrmGgfPe4lTdtkJmTxqznfpJXp/Exn:rv+2wbffWaKpPnTdtkJ+xqjNEZ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
NtBuildNumber
ZwOpenProcess
PsLookupProcessByProcessId
ZwQueryInformationProcess
IoCreateSymbolicLink
RtlInitUnicodeString
MmIsAddressValid
IoDeleteDevice
ObfDereferenceObject
ExGetPreviousMode
IoCreateDevice
MmGetSystemRoutineAddress
ObOpenObjectByPointer
ZwQueryObject
RtlUnicodeStringToAnsiString
SePrivilegeCheck
ZwQuerySystemInformation
ZwOpenProcessToken
SeReleaseSubjectContext
KeDetachProcess
ObQueryNameString
strncpy
ExAllocatePool
SeCaptureSubjectContext
NtClose
ZwClose
IofCompleteRequest
ObReferenceObjectByHandle
IoDeleteSymbolicLink
ZwDuplicateObject
ExFreePoolWithTag
RtlFreeAnsiString
KeAttachProcess
KeBugCheckEx
__C_specific_handler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ