Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Target
a9cf2c6cb4a83acb3cf58c333879aba0_NEIKI
Size
183KB
MD5
a9cf2c6cb4a83acb3cf58c333879aba0
SHA1
78ad6203b19a6617962cecd32beb079fcee57ecf
SHA256
1f36ad66ca8a05327b223519ee4e9c7c5603e96d67daf5c9a40e252b9718765e
SHA512
42cd0e6d0bb37f28922c5ecc299e88e8ffe676a1e127d825aaf6d77cf03a257f95ba3a4cccd37e3d1ce07e257c641ed33aa11d31ce9cde11ef1f14dde9265a8d
SSDEEP
3072:4Srs/1em8PJpnLsSGvexOBUaHv+oDYikVy2ek53mk:/som8PJpgSJOBUSvNkZR
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\src\Sandbox\Projects\Bin\x64\SbieRelease\SbieDrv.pdb
ProbeForRead
PsGetCurrentProcessId
KeAreApcsDisabled
ExGetPreviousMode
ProbeForWrite
ObfDereferenceObject
LpcRequestPort
ObfReferenceObject
ZwClose
ZwSetEvent
ZwOpenEvent
RtlInitUnicodeString
ObReferenceObjectByHandle
LpcPortObjectType
wcsncpy
ExRaiseStatus
ExFreePoolWithTag
IoDeleteDevice
wcsncmp
IoCreateDevice
ExAllocatePoolWithTag
RtlCompareUnicodeString
wcschr
RtlFreeUnicodeString
_wcsicmp
_wcsnicmp
ExAcquireResourceSharedLite
RtlUnicodeStringToInteger
ZwYieldExecution
swprintf
RtlQueryRegistryValues
_itow
KeWaitForSingleObject
PsDereferencePrimaryToken
RtlConvertSidToUnicodeString
SeQueryInformationToken
PsReferencePrimaryToken
IoGetCurrentProcess
towlower
KeSetEvent
KeInitializeEvent
ZwUnmapViewOfSection
ZwMapViewOfSection
ZwCreateSection
ZwQueryInformationFile
ZwCreateFile
PsGetVersion
RtlSetSaclSecurityDescriptor
RtlAddAce
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAceEx
RtlCreateAcl
wcsrchr
ZwQueryValueKey
ZwOpenKey
MmGetSystemRoutineAddress
KeDelayExecutionThread
ZwWriteFile
ZwSetInformationFile
sprintf
IoFileObjectType
IoCreateFileSpecifyDeviceObjectHint
SeTokenObjectType
ZwOpenThreadToken
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ExWindowStationObjectType
PsGetProcessWin32WindowStation
IoIs32bitProcess
ZwWaitForSingleObject
__C_specific_handler
MmProtectMdlSystemAddress
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
IoAllocateMdl
ExInitializeResourceLite
ExDeleteResourceLite
KeBugCheckEx
IoCreateFile
ZwReadFile
_wcslwr
ZwCreateDirectoryObject
ZwSetSecurityObject
ZwCreateSymbolicLinkObject
NtClose
ZwOpenDirectoryObject
NtDuplicateObject
ObOpenObjectByPointer
SeSinglePrivilegeCheck
PsGetProcessId
PsProcessType
ObReferenceObjectByName
ZwQueryDirectoryObject
PsGetProcessSessionId
PsLookupProcessByProcessId
ZwQuerySystemInformation
CmUnRegisterCallback
ZwLoadKey
ZwOpenProcessTokenEx
ZwCreateKey
ZwSetValueKey
ExLocalTimeToSystemTime
RtlTimeFieldsToTime
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
DbgPrint
ObQueryNameString
PsSetThreadHardErrorsAreDisabled
RtlInt64ToUnicodeString
PsGetProcessCreateTimeQuadPart
PsSetLoadImageNotifyRoutine
PsSetCreateProcessNotifyRoutine
PsRemoveLoadImageNotifyRoutine
PsDereferenceImpersonationToken
SeQuerySessionIdToken
PsReferenceImpersonationToken
KeUnstackDetachProcess
KeStackAttachProcess
PsGetProcessPeb
ZwQueryInformationProcess
ZwOpenProcess
PsGetProcessJob
ObOpenObjectByName
SeTokenIsAdmin
ZwQueryInformationToken
PsImpersonateClient
SeTokenType
PsGetCurrentThreadId
PsGetProcessExitProcessCalled
ZwOpenProcessToken
ZwDuplicateToken
PsRemoveCreateThreadNotifyRoutine
PsGetThreadProcess
PsGetThreadId
SeTokenImpersonationLevel
PsThreadType
PsSetCreateThreadNotifyRoutine
SeFilterToken
RtlEqualSid
ZwSetInformationProcess
RtlAddAccessAllowedAce
IofCompleteRequest
ExReleaseResourceLite
ZwUnloadKey
ExAcquireResourceExclusiveLite
FltStartFiltering
FltUnregisterFilter
FltRegisterFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ