Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
GaBcYOaGEnODBeSMjI.sys
Resource
win10v2004-20240412-en
Target
GaBcYOaGEnODBeSMjI.sys
Size
49KB
MD5
3d4a1e21c092a64cd2c136f60b14f2d1
SHA1
f6ef2dcd9ca7bfa780df4014495ff50e10b0b064
SHA256
b7ca7cda4f0d72feadb13f0ae5d6b98dd2c5e951c4ba6725bc31a8c3d3b1993a
SHA512
6bccea21064ca1c39f8cb77ce04d3ac789ff4ce62f30b1d01911d6d40bb83070757505f71d3aabd1375850acac9971d42a8bc69d8e676cc81fd40ae3225717af
SSDEEP
384:QJpWCBpWCgitUtnJMYXdaX5sPYAq46PziPIkundKUKLVeMDkB9:QJLCHtnJMYXelzwIkQdHB9
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
RtlInitUnicodeString
ExAllocatePool
ExFreePoolWithTag
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
RtlDeleteElementGenericTableAvl
MmIsAddressValid
tolower
_stricmp
KeIpiGenericCall
MmUnmapIoSpace
MmMapIoSpaceEx
IoGetCurrentProcess
KeInvalidateAllCaches
MmGetPhysicalAddress
MmCopyMemory
MmGetVirtualForPhysical
RtlRandomEx
ZwQuerySystemInformation
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ