Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
urloader.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
urloader.exe
Resource
win10v2004-20230221-en
Target
urloader.exe
Size
1.8MB
MD5
0f495ad823206a8803568de7e7b38456
SHA1
5f79862c22e0ef4fe098582a93637a380a3e8136
SHA256
f9980de61af27f98a729a302400a93c0ccf949c74b24ab5a89c3ea187a3eb646
SHA512
55f4e9d595769ce9a352927a7db85e269d0b4b32eaa37905f45a394add6786bd952b075e3f852c5179315e72c2f0bbecd9323e662c1494cbafae69f38f38f3b4
SSDEEP
24576:5ZhXugCJajmfQ4HwcpY+zwsJ8DDhyj6WYfhC1+ubdddLNomCU1g37pUqR:5ZhXugAfLW+8LDDhK84NomCU1C7j
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord5307
ord5714
ord4622
ord3738
ord561
ord941
ord535
ord537
ord2818
ord2621
ord1134
ord1200
ord4853
ord4698
ord5289
ord2642
ord4123
ord6453
ord4220
ord2584
ord3654
ord2438
ord6270
ord1644
ord6779
ord3499
ord858
ord922
ord924
ord6215
ord4476
ord5302
ord5683
ord5651
ord3127
ord3616
ord958
ord1567
ord1979
ord268
ord665
ord5186
ord350
ord354
ord3790
ord860
ord4229
ord5067
ord4635
ord4607
ord4716
ord4750
ord5016
ord4375
ord4852
ord2515
ord4834
ord3615
ord355
ord4608
ord1768
ord4079
ord2725
ord2396
ord5300
ord3346
ord3922
ord5199
ord1089
ord2554
ord5731
ord2512
ord815
ord4486
ord6375
ord2645
ord4274
ord4673
ord755
ord470
ord5785
ord4234
ord4710
ord6199
ord1168
ord2302
ord324
ord616
ord641
ord795
ord3582
ord3721
ord4407
ord4218
ord4398
ord2578
ord3597
ord2023
ord2411
ord1775
ord4425
ord5280
ord4998
ord6052
ord2514
ord2379
ord4376
ord5265
ord6197
ord823
ord1146
ord1641
ord323
ord1640
ord540
ord2405
ord640
ord5875
ord2859
ord3874
ord4275
ord2754
ord800
ord3626
ord2414
ord809
ord926
ord567
ord2575
ord3663
ord825
ord3571
ord556
ord609
ord4627
ord3574
ord4424
ord939
ord5710
ord4080
ord5163
ord6374
ord3259
ord1576
ord3147
ord6055
ord4078
ord4353
ord4396
ord5241
ord1776
ord3798
ord5290
ord2385
ord2985
ord4441
ord2648
ord2055
ord6376
ord3079
ord3825
ord3831
ord3830
ord3402
ord2976
ord3081
ord3749
ord3262
ord3136
ord4465
ord4837
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
_stricmp
fseek
ftell
rand
_ftol
srand
time
_iob
abort
_lseeki64
_locking
qsort
memchr
strcat
mktime
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
fread
rewind
??8type_info@@QBEHABV0@@Z
strlen
strcmp
strncpy
atoi
tolower
isalpha
toupper
?set_new_handler@@YAP6AXXZP6AXXZ@Z
_mbsrchr
memcmp
_setmbcp
_strlwr
_purecall
strncmp
calloc
memmove
memcpy
memset
strcpy
_CxxThrowException
??0exception@@QAE@XZ
??9type_info@@QBEHABV0@@Z
_open
_itoa
_unlink
_close
_lseek
_read
?terminate@@YAXXZ
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
strchr
atol
free
malloc
strstr
sprintf
_strdup
strrchr
fopen
fprintf
vfprintf
fclose
__CxxFrameHandler
_chsize
_write
_sleep
fputc
?name@type_info@@QBEPBDXZ
lstrcmpiA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetComputerNameA
InitializeCriticalSection
DeleteTimerQueueTimer
CreateTimerQueueTimer
QueryPerformanceFrequency
QueryPerformanceCounter
DeviceIoControl
CreateFileA
GetStartupInfoA
GetModuleHandleA
MoveFileA
DeleteFileA
GetTempPathA
InterlockedDecrement
ResetEvent
SetEvent
GetPrivateProfileIntA
GetExitCodeProcess
OpenEventA
OpenMutexA
GetLastError
Sleep
LocalFree
WaitForSingleObject
FormatMessageA
GetCurrentProcessId
GetVersionExA
CloseHandle
lstrcpyA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
LoadLibraryA
GetPrivateProfileStringA
GetProcAddress
FreeLibrary
CreateProcessA
TerminateProcess
lstrlenA
GetCurrentProcess
GetModuleFileNameA
InterlockedCompareExchange
GetLocalTime
ReleaseMutex
GetVolumeInformationA
CreateMutexA
TlsSetValue
TlsGetValue
GetEnvironmentVariableA
SystemTimeToFileTime
GetSystemTime
TlsAlloc
GetCurrentThreadId
TlsFree
FileTimeToSystemTime
GetProcessHeap
HeapFree
HeapAlloc
WriteFile
GetFileSize
ReadFile
GetVersion
SetErrorMode
FindClose
FindNextFileA
InterlockedIncrement
FindFirstFileA
SearchPathA
CreateSemaphoreA
HeapReAlloc
OpenSemaphoreA
ReleaseSemaphore
WindowFromPoint
GetCapture
SendMessageA
GetDC
SetWindowRgn
DrawEdge
LoadBitmapA
InvalidateRect
ReleaseCapture
EnableWindow
DdeConnect
DdeCreateStringHandleA
DdeInitializeA
DdeFreeStringHandle
GetSysColor
DrawFocusRect
CreatePopupMenu
AppendMenuA
GetWindowRect
PeekMessageA
TranslateMessage
DispatchMessageA
SetWindowLongA
MessageBoxA
wsprintfA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
DdeCreateDataHandle
DdeClientTransaction
DdeDisconnect
ClientToScreen
GetCursorPos
DeleteObject
GetPixel
ExtCreateRegion
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
StretchBlt
DeleteDC
GetObjectA
GetStockObject
SelectObject
GetTextMetricsA
ExtTextOutA
RegCreateKeyExA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegSetValueA
RegCloseKey
GetUserNameA
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
ShellExecuteA
_TrackMouseEvent
TransparentBlt
gethostname
recv
send
select
accept
connect
socket
WSAGetLastError
htons
bind
closesocket
listen
inet_addr
gethostbyname
WSACleanup
WSAStartup
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIID@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1_Winit@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
?assign@?$char_traits@D@std@@SAXAADABD@Z
?_Xran@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ