Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Target
8a81f2eeff432d14d0e5d6b8b20001a8_JaffaCakes118
Size
308KB
MD5
8a81f2eeff432d14d0e5d6b8b20001a8
SHA1
97737e896df21666c9b6acc6c67df9d7c62b1a5c
SHA256
87134138b63cda9147c472bb9564573afcf714e1a0c05315946bd6908a5a04b0
SHA512
c77bea6532a4418055fd3d462e72e741ccdf5867c3bf5f935b40cb87dc4550079e1aee8518756eae05802f2a3f834831c2079617f775b384d63a64ad5ef3566b
SSDEEP
3072:W1wa0JKrynMDL5oVoDJ9PC8xM8QYEzX2EAa636ZeGN:WCJsynMiCxn2sGN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\Users\Administrator\Desktop\CallBack\x64\Release\CallBack.pdb
ObGetFilterVersion
RtlCopyUnicodeString
ObUnRegisterCallbacks
ObRegisterCallbacks
DbgPrint
PsProcessType
RtlInitUnicodeString
WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ