Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Target
732a11ac49780d9ec54c6618b800bee0_NeikiAnalytics.exe
Size
23KB
MD5
732a11ac49780d9ec54c6618b800bee0
SHA1
69edefcb5b8b99671e8ec7362b97cf0b3a9ccd25
SHA256
97da8600a08289c137c093dca0fda716507bbe642025c1ecc913ca13688fafd9
SHA512
6a23c68b772eb22bbb5a02c13e7eefd949d71bd8a7ceb37f699a502a1d2c3a44d36421ac5c958005482358068c8bb8f9fe095ad8ad0d05b990e6c31d651a2632
SSDEEP
384:90hXhbdOy56EW/kxNoqQ+uLh3/DxUsl3SeGa:GIyMbkNut39
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\WACATACC\Projects\Programs\Echo\x64\Release\echo-driver.pdb
BCryptVerifySignature
BCryptCreateHash
BCryptDestroyKey
BCryptFinishHash
BCryptDestroyHash
BCryptImportKeyPair
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptHashData
BCryptOpenAlgorithmProvider
IoGetCurrentProcess
ObRegisterCallbacks
ObUnRegisterCallbacks
ObGetFilterVersion
PsGetProcessId
PsGetThreadProcessId
PsProcessType
PsThreadType
DbgPrint
ExAllocatePoolWithTag
IoDeleteDevice
ProbeForRead
ZwCreateFile
ZwQueryInformationFile
ZwReadFile
ZwClose
SeLocateProcessImageName
RtlGetVersion
IofCompleteRequest
ObReferenceObjectByHandle
ObfDereferenceObject
PsLookupProcessByProcessId
ObOpenObjectByPointer
ZwQueryVirtualMemory
MmCopyVirtualMemory
__C_specific_handler
ZwOpenProcess
ZwQuerySystemInformation
ZwQueryInformationProcess
IoDeleteSymbolicLink
RtlCopyUnicodeString
DbgPrintEx
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
ExFreePoolWithTag
WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ