Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
temp.sys
Resource
win10-20240404-en
Target
temp.sys
Size
13KB
MD5
aff9874bcc79ffe905a385c8cf359e15
SHA1
4b1f52d0152900c9647b40dc067a143f9faca2e2
SHA256
a597c95c65007406acf68f93b831c69ff95ec98a4fadadf88618b21d01c0611b
SHA512
cf6fbc0c9e16c4cc1d8ad6c45e1c573b64d495af722704f1bc8e4ddaef3c7cb4320d4a8f2a992ff47210190e6356fbcae926f3f1e7d5f88056ccea03b6f28e96
SSDEEP
192:s2PHeCIM8T4ZaVynlkRJ2N3hquLa5uDm3B7lAr1i8nr9ZCspE+TMDQrjt2:s+eunlkRJ2NxlTm3BKEeMDz
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\Users\mitko\Desktop\temp\driver\x64\Debug\hwid.pdb
ExAllocatePool
ExFreePoolWithTag
ObfDereferenceObject
ObReferenceObjectByName
IoDriverObjectType
__chkstk
DbgPrint
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE