Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20230221-en
Target
Loader.exe
Size
7.2MB
MD5
dd661ccaba2ef04a98a79ad8f1017bce
SHA1
6364be86f15fbb5bcb89108b69a866da1bf6862d
SHA256
947710919b7afab9b7bb70ba1ef38e42ee35d0ec6a1ce1c0562cdeb0b1c78f2f
SHA512
7940a23285026be3edf2a09547bb2886b1d9c3d0501189283504bbc080699255adb3973976a82efedf7bb75a214a25296be8c27387945d4ef176bb933577feca
SSDEEP
98304:k+hmb6THsemES5+OnjtEeXquT/emHKKAjk7Qof+tWsbua7Q4x75eFBp6QW5xKBZO:kkmu7s58cZlVT/eRl6ff+fyD4g0s36f
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
IsWow64Process
VirtualQuery
LocalAlloc
GetModuleFileNameW
LocalFree
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetKeyboardType
CreateWindowExA
MessageBoxTimeoutA
MessageBoxTimeoutA
MessageBoxTimeoutA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
RegQueryValueExA
RegSetValueExA
CryptDestroyHash
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
VerQueryValueA
UnrealizeObject
IsEqualGUID
CreateStreamOnHGlobal
ImageList_SetIconSize
Shell_NotifyIconA
SHGetSpecialFolderPathA
SHOpenFolderAndSelectItems
InternetSetOptionA
CoInternetCreateZoneManager
CreateURLMonikerEx
GetSaveFileNameA
WSACleanup
timeGetTime
LdrShutdownProcess
NtQueryInformationProcess
WTSSendMessageW
�D�r���}���[�/3e�E�w�Cye Q�t���;�@Y��p������f���6��9F/�b �����"MVƍo�� F�2��[�&�����AL�^B!2�KЛ�Gx����8��!�9�T;��*5��vq<�6>�.������ �ۓ�v]`����(��dQ�(������e��6�^N;p����ʍ���0�+�f�.�c��$����/F�i������ @ N'�Ʈq���>j���}���������$l����0a��D*Ǘ�o�zɟL����!w�<f��O�NS��8�x+�����I�l���/ľ�s"��'��9�Ȃ�k<,�e;ʁ�3���z�>N��rO��B=?����m�;F�=Y A��E���)z�p[ZR�����>Hc�r����0��e����ijc���E���I�v|U�u���9����Q Zu��b��{&�>�)�O|��l�#���%�(���`����C��+�Zm���l^?�O^�6��厨O,թ�|!K#�aИ��4З��)Bk�����n�VI-o�LLH�<.A��f�.���N>��$GV?��X�:r��o�GJ��%� #P�b��V�t��4a����#���*\�}�Iy�9�$�q5oO��M�����X���tb�v��X͈4Ҫ�)��p�qVjZ���\� Z ����GI�[�?C�π/���T`mX��g]�� ��r�N��e������QDwJ�����X���K����Z��|����pj��^Ѽ�*)�R�Pn�c��w,�|��9p��+��� M����|����o��C��}`�N����xn_���Y8g��TբJ�0��*Ԝ�2)CC��.�-ot���*�+�j�|�O�cC���d�c$�9��3�0��l��c��Z���g 6�H5���=�ꯥ�-��'��x���arZ��Shx�Ĝ��(V�E�N��A���K͡��� "!��D�Y��l�[�������}�9�ͶsAJ�C���條�#;������͉4�«s�$v�_p�6 �Ϟ.�����3a}36/I��L<�lW(���O =�o�_P��J����<w ��b���C����2�s�G��dž�ǝ�����C�����v}�<��@�-� ��Ze�j����]�J.�;��\m)�-op�|&��$'j߈ؓt93�k�5��7��B*��� � rӕC�p�PfP7O�=|�k�Qt3`��'5(*�� `tq��ò3��|6�=�������j��Q�1I�M�� `��ۙim"��Mr��4���ށ��F��"}�"_��!��*�n2�ɶ#dv��˹�S�k��"��{����<C7� ��!�� ��B��+�$�����@�������l+�C���v>�A��e��<� �)>�ƶ�Y��z�p���pl!�� ,���f���5V��\1=m�����;����dR%J]<6�j����tW�EO \B�-\.����aB��nr}�;�V�~�az���DAW&���c�f/Q����w�[���z���@��.q��3^ۼ�����y�^�T�l�|���^��~��DAO���\��W�"�� ^�����N6�Zu|wO��1�/��� ��B��T:�l^Ư%���(CD�C�n�Y�����IC��9��v�r���4�bpg�ɛ��g��n\�^B� �; �}�kٛjNU ���%�}2ˇZ���}ꣁ���j ŧ妱@�9� 3n']�7�lȘ�A����#/�?�a����vg���: ABB6���P �� 0��+�5j���i��(R�c�m<�zVc�PҞk�!Q��A�F��'�����u:���0�<YQ�B ��J��] �K��v'(4�{��:��,lm��<�ţ�lN�})�"߲u;� k�O,9@��s}�v�c��c�l�Qm������^������y�e7>A2щ7�Z��?DT�V$r%�M�?ű���N= ��|&jY���.�����^���p���d��s�wcݒ�x�/��o�s���|�}�-x<x�)Vi��]F�c�qu( ����i���M�����7%�/+�"��/�e5�]$(�|it��� ��/��9�,�X��V�$��U���܊m���X(\�n��*7p�U��&o�����J�P��R�e {�p�)r#N+����NV`����#��[q��P�]��>+�����jWv�` 5�@�a��/��~1hr}�#����^�\�UJ5[�u�J�e�X���Ӵ=��[������A؞d��T��pTm����;ˣΉ_T����n̜�Al,��@�m,�tz[�==��[R��'��`BT�Ot��hl`=�*=_��!7�z�ޗ5�е2��iĈ��+%�t�f���ω�:�\]����D�H|���U��hK�-�FGgזKM>�*���xf*7� �c#�a$o|c���Xf��-��� ��Tr�T2]6r:7���s�يQj-o" �C�.M�����F���%v���4\x���~L�cZxw���R2���J���nQ7窟!����fID�0��b���r'56c�s""�!�t�V�ۘ�]V`c5�"�윎�-zSa���Sy��<Ax��J�ob���cV��3���n���M�y���ip~Y7�U����hLf��w}��~��2G%�S�9{� _$���.�h��6=�Q�h|��M��\C���L�j�]n'�Sd�S��b�xg��FT��f5~�ڄ���":��5bߨL�5�}����7S���N;*W�'�A�����y��r���j\�ަ����% х�n�V؇�Ĺ[�� cPR���p�'i�R�V�pPۺ�����apl�>7��MN��le̽��+b%�i�۰iA~�F�A�2�^�g��րa+���;�8�|��|tȽc�����E���A�%''���C *п�����ư4�ڒ���{)���Up�? <�Ӳ���P��Z�W�(R���&>�kT3EC4Q��<w�Î%���y�0�O@� ,��~��D�[�Nl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ