Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
de7f9fa79544294197514ad85d14a81b10b9226afa23f413ea30a993147be3f4.sys
Resource
win10v2004-20240226-en
Target
de7f9fa79544294197514ad85d14a81b10b9226afa23f413ea30a993147be3f4
Size
122KB
MD5
ff7f8c6567df68bca06d3ce30185aa11
SHA1
cfa71acb1069db5f0cea3fdf436e1cdf9cea99ab
SHA256
de7f9fa79544294197514ad85d14a81b10b9226afa23f413ea30a993147be3f4
SHA512
f87cfcacae68b3139e223ce4bbbadeb90abbc3700233c6c925286c9cbd4c8af5497c5f9cc51efea66c07b3a633525db11511b48a064bd7799f4c139a73a58faf
SSDEEP
1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3k4W:ZvbyRvEbKNF/VbAT+Yr4Gfzqck4fHfG
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
G:\_VSK\PML全套驱动\全套驱动\x64\Debug\驱动外壳.pdb
RtlInitUnicodeString
strstr
ExAllocatePoolWithTag
ExFreePoolWithTag
MmGetSystemRoutineAddress
IoCreateFile
ObReferenceObjectByHandleWithTag
ObCloseHandle
ObfDereferenceObject
ZwQueryInformationFile
ZwReadFile
ZwClose
ZwOpenKey
ZwQueryValueKey
IoCreateFileEx
MmFlushImageSection
ZwDeleteFile
IoFileObjectType
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ