Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Target
c971e9a5c57fcd24419b8a358c6330c9_JaffaCakes118
Size
33KB
MD5
c971e9a5c57fcd24419b8a358c6330c9
SHA1
9380a86ca833c35cc53685d411fd94d72e82cc70
SHA256
c5503b6a443d4a30bb3c7ab7586c10b637d4830f57be0151f3d2be235ba2b694
SHA512
8ace837c243c1f685c5509ed1c6fb28014ca01e5ae794bb1830a6ded43915e679056f273560a05c308ecf5b749b902768edb3bcc033e229520ac38e003c1ce65
SSDEEP
768:rOLkoULRG1NbIb9wbEPaeSKifXxKQ/ycVUcHjCRhdVDA:rOQVG1NUBwCfSz3qNTRhdO
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
e:\projects\cpp\gmer\catchme.sys\objfre_wxp_x86\i386\catchme.pdb
ExFreePoolWithTag
_except_handler3
ExAllocatePoolWithTag
MmMapLockedPages
_wcsicmp
MmIsAddressValid
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
PsLookupProcessByProcessId
KeDetachProcess
KeAttachProcess
ObfDereferenceObject
ObReferenceObjectByHandle
PsGetCurrentProcessId
IofCompleteRequest
wcscpy
IoCreateSymbolicLink
IoCreateDevice
_snwprintf
wcsrchr
PsGetVersion
wcslen
wcsncpy
RtlCompareUnicodeString
_wcsnicmp
ZwClose
IoGetBaseFileSystemDeviceObject
ZwOpenFile
ZwDeleteFile
ZwCreateFile
KeTickCount
ZwReadFile
ZwQueryInformationFile
ZwWriteFile
strncpy
NtClose
ZwSetInformationFile
strncmp
IoGetCurrentProcess
_stricmp
ZwQuerySystemInformation
MmGetSystemRoutineAddress
KeDelayExecutionThread
KeWaitForSingleObject
RtlVolumeDeviceToDosName
ObfReferenceObject
IoGetDeviceObjectPointer
wcschr
wcsncmp
KeGetCurrentThread
KeBugCheckEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ