Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ASLDRSrv.exe
Resource
win7-20240903-en
Target
ASLDRSrv
Size
204KB
MD5
80a7dafa1f9f9bb0cb6bbec1c5cb142c
SHA1
06738ec416b70a48760492b899ee5c42a6e4b0ea
SHA256
2e159ba848e90eba672d38683f9f424ab06fc3e00f64f6c868215204d82a7e20
SHA512
bf89ed6868292bf0d166721e983b1fcd84a5b8723a98cdc1bf41016430c5a8b70c8234b993c711fb36ef3b8d5d4c0033b0f04c5aa71fe7416eaace2068e25df6
SSDEEP
3072:wfIObyL7fOGnt+yslas2lQBV+UdE+rECWp7hKVv2YO+5UlV7hE:wfHbs3npsgKBV+UdvrEFp7hKl9O+d
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\Recent\ATKRelation\ATK Hotkey\AsLdrSrv\Release\AsLdrSrv.pdb
GetSystemDirectoryW
OpenProcess
GetTickCount
GetModuleFileNameW
GetVersionExW
WriteFile
GetWindowsDirectoryW
GetLastError
OpenEventW
LocalAlloc
LocalFree
CreateFileW
DeviceIoControl
GetModuleHandleW
GetProcAddress
GetCurrentProcess
CreateThread
CreateEventW
WaitForMultipleObjects
CloseHandle
WaitForSingleObject
SetEvent
ResetEvent
WTSGetActiveConsoleSessionId
LoadLibraryA
InterlockedExchange
FreeLibrary
InitializeCriticalSection
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointer
RtlUnwind
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
Sleep
HeapSize
GetStringTypeA
PostMessageW
RegisterWindowMessageW
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
GetSystemMetrics
RegQueryValueExW
OpenProcessToken
DuplicateTokenEx
LookupPrivilegeValueW
AdjustTokenPrivileges
SetTokenInformation
CreateProcessAsUserW
RegOpenKeyExW
RegCloseKey
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAce
SetSecurityDescriptorDacl
FreeSid
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegSetValueExW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
DestroyEnvironmentBlock
CreateEnvironmentBlock
WTSQuerySessionInformationW
WTSFreeMemory
WTSQueryUserToken
GetProcessImageFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ