Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
10Static
static
3Warzone 2.....0.exe
windows10-1703-x64
10Warzone 2.....0.exe
windows10-2004-x64
10Warzone 2.....0.exe
windows11-21h2-x64
10Warzone 2....er.sys
windows10-1703-x64
1Warzone 2....er.sys
windows10-2004-x64
1Warzone 2....er.sys
windows11-21h2-x64
1Warzone 2....er.exe
windows10-1703-x64
1Warzone 2....er.exe
windows10-2004-x64
1Warzone 2....er.exe
windows11-21h2-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Warzone 2.0 External/MW2.0.exe
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
Warzone 2.0 External/MW2.0.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Warzone 2.0 External/MW2.0.exe
Resource
win11-20231215-en
Behavioral task
behavioral4
Sample
Warzone 2.0 External/driver.sys
Resource
win10-20231215-en
Behavioral task
behavioral5
Sample
Warzone 2.0 External/driver.sys
Resource
win10v2004-20231215-en
Behavioral task
behavioral6
Sample
Warzone 2.0 External/driver.sys
Resource
win11-20231215-en
Behavioral task
behavioral7
Sample
Warzone 2.0 External/kdmapper.exe
Resource
win10-20231220-en
Behavioral task
behavioral8
Sample
Warzone 2.0 External/kdmapper.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
Warzone 2.0 External/kdmapper.exe
Resource
win11-20231215-en
Target
WZ_2.0_External.rar
Size
10.7MB
MD5
80712ac8dfa740c665ba32ab56d9139e
SHA1
595b9aec98ed4b95d5b7dabeecda7654bc0ccb3e
SHA256
1152cccbe60a544d4896ff3c9ba4f181c4753afe142caf87b727f9e7721b16c3
SHA512
a5ef8b573fab954e2a7d9fd4320dedbb7510142d8c13d1818a7614c32e74b49fd442d5b9081637405ed95738b400c8551dc192f2a245f8fe67dd8102e68d1472
SSDEEP
196608:CTgBhugEfbOAjVaEgqU9XDLCIi+kbQtavqjV6qb6aulyp:ecsfbZaFJDL2znqjBduop
Checks for missing Authenticode signature.
resource |
---|
unpack001/Warzone 2.0 External/kdmapper.exe |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
��x����V�������dR��}�X�|W�q^�VC �Z�����b����� ���tXxU�4���)+�����Th�.��#�Z�,�!��B����x l���\"����R@�N���|��IU�������%RJ�CE�"ݸ�Ǻ��$�o��������4"KO�[���֒�����;�殭+~R�Ќk-������� g|���� ��}��\��琹OΧ��r\�"?�m�w��6I�[���_Rth�NQk�������#��o��!��U�&��6�Ό<ր�|x�֠a���k=��<7t����!�P�#]`�Z�n�R�|�������C��e��������o�uD[C���ݭш"��'~�΄����>��MZ��I�0�Z��L�i@c�6�j��b=�Z�/��[�1��н� �?Z���<5�e�-�U'��S�*���t���ɟ�g��(��,�S��� ¼���\[0��m�p��EvP�R����(!�\��ll�lc���?,���^ !�Y���n��x\��7z�N�*��O~�u¼�|�k��0��1&qӄ-Ƿ�!k�\�R��)�|�߷U�̑�/+���gMp}��D�!�,��,r�t�^ӊS��.|���I�G����z*�M���6J�!u�rf��U3�����⯭<gi��/�FW��ռ6��'f��0�"���_Z�&��[��('�̐f����}����}z�nB<�o��2��%�x���KH�U +J@��G���g���i�<�?S����������*���b㯂�T������Z�� ��[��ã��� O�Uh̼��k�(�OmkdV�v3���`O[3v�9@C�<u���Z�5�Eܨ�I�gg�1}���������7e/�-�8���!�9���7���މ~w<{c�l�t����W0��� �^!��)���g�h��ͨC{P��ߢ�P���zLT�P��*W2J��74X ,=��4I��V�����}ٌ��4rƹ�{"�]����n�O�QD��j�3Py�\�8�^V1��5<<Jx�����{�)�a�!�nv8�_a&�z?Fؓ!�mw��H�E�"qE��jrx�r.�"�+�2�wz5+Sui3:d�7�����9rE�=k�sg�p����U�����EX�n9��3�1xȹe�o�lj�%����'��h�ťD�4.DyscU��L,����Rz�y/�&n;���+��/� ���'X��N��T�?�PW��^�P�衶��ӌVA�D%c���@ym �ͮƲ��G�� �W�X�3�{��dt��/�fو���� ـ��%d��y� �M���H�[z�-�h鉇33į�n{���D��?�U�KBۆw���!@\�p#nj�=#,�rƐ��g+M6�Ƚ[�Lh �;�kC�))`[&��*��9<�Ձs�(먅�_5H�2�����k`�O�K$���w��2t≴�;�ϩ��n�-&� Z�*���MGթ�4��zڍ<�^ThN�B�̕Ձ1��C�a(ֳ�j�5V:6�Y��ȏB��%PD��hҲI�Ꜿ�F�j_��G�:��*]m�!gQ�����9>a=��[!H�;�-���B��>���J�H�\z9��c��g�.Q�#�gw�E� ��d������e!� #�?����1��J�f[C����Ӑ����W��攭��.P�z�:�l_�lD`/ŃZ0��PC�Õ��-����T繞��͜[(�B�����Rs<M�a��"k{riY�q^C�<1E�SS\���;s��w^o-����ݤ, ������퓑��> ۭ�e�#k�ŢmƋ?��4I�J�m��P1�b��8�v"FնU|�J%��Q@ �=����NZf8�KRC$�o��e! Վ%k ���W'�9����)C� q�,��Ē0�&�A�Fɷ�dJm,�))f�~6��;:�3m-x���� '�L7��C��o�!3ʸKpL8��*rɲd��@�,�P�@�f3�͝wA{0Q$YK�g:h��ž��`���٩��-��Sd��^�F��Ap���i���p�qݘ/e��m���ߍx��>��)����N�"��<�y�/��4 4�d���f����놩�p<-��/귳Q�M�fb�ڲ��S݉������{����0=f�䕰�+Brh��?��y"a=�G*�������_#[�(�c�����3�`Lr����N��<�mO�K�|���yn*b��Y6n/�(S��Vo�"��������,�曾�ͦ��h��hA';���P��W4�p��C����Gn.|F�!�@3�LzU u�DD��3C09|����` ��b���@������R���,)��e�;�P�\T�J=U��:)Le�[od���[�(��:��Q�a���O��-����ϻ$��j֛,�u�B�&լ� yW�.c�ѻ�ʓ��~�� bVg�NG���_"��x�O�M}�'��^8&{Y:��K6h�]X3�xg�`6ȝ�==o�_|���naa� �O+�^�nE��?�|�q����/ߠ**��\�t�P�� �yܿC�:CC%��4���p�e' =�;N��s-�?��I����l���TK]�\���P��iQ������j�l|q���#t F�PMxa6i_ ^F��®]6���F�v~�vQ#*�����tC�}{ڡR9z_-�����9��A�ae�����Vp� ������P S���K ��U�+>����#L��Xߡ"��v,����I����� �7����*���l��, g��,�����*�H3��o� �����n�������t����G�0��8J��c�}sɅ07̺֊��N�M�E��5J�\�a�ĸ�!Q5c5�k�)Um�W�H����ñ��#;����/S͎��tڟ[��w��EUK82�`:�;*#���ї�9�nb���cX|@���#�����c�f�5H��;�]����h�gM�W4�@�lmܺ��i݁�4�* ��qa�j�$>�!������ǿ�bsp�������\�Ԏvdé
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageKeyEncipherment
KeyUsageDataEncipherment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\Users\kcxac\Documents\external-warzone-cheat-master\x64\Release\modern_warfare_driver.pdb
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
RtlFreeUnicodeString
DbgPrintEx
ExAllocatePoolWithTag
ExFreePoolWithTag
MmProbeAndLockPages
MmUnlockPages
MmProtectMdlSystemAddress
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
IoAllocateMdl
IoFreeMdl
IoGetCurrentProcess
PsLookupProcessByProcessId
RtlFindExportedRoutineByName
ZwQuerySystemInformation
PsGetProcessPeb
PsGetProcessSectionBaseAddress
MmCopyVirtualMemory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetCurrentThreadId
GetModuleHandleA
GetLastError
CloseHandle
CreateFileW
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTempPathW
FormatMessageA
GetLocaleInfoEx
InitializeCriticalSectionEx
VirtualAlloc
DeviceIoControl
VirtualFree
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
WideCharToMultiByte
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree
RegCloseKey
RegDeleteKeyW
RegCreateKeyW
RegOpenKeyW
RegSetKeyValueW
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
NtQuerySystemInformation
RtlInitUnicodeString
__CxxFrameHandler4
__current_exception
__C_specific_handler
memmove
_CxxThrowException
__std_exception_copy
__std_exception_destroy
memcmp
__current_exception_context
__std_terminate
memset
memcpy
fsetpos
ungetc
__p__commode
fflush
fread
_fseeki64
setvbuf
fgetpos
fwrite
fclose
_set_fmode
fgetc
fputc
_get_stream_buffer_pointers
free
malloc
_callnewh
_set_new_mode
rand
srand
_lock_file
_wremove
_unlock_file
_wcsicmp
_stricmp
_time64
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_initterm
_initterm_e
_set_app_type
_seh_filter_exe
_c_exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_exit
_cexit
terminate
exit
__p___argc
_invalid_parameter_noinfo_noreturn
__p___wargv
___lc_codepage_func
_configthreadlocale
__setusermatherr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ