Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20231020-en
Target
Loader.exe
Size
7.3MB
MD5
9454f0102e28c8ba0152c59ac1aa35ea
SHA1
5e9e720b018a6515fd021871c16aec82f0607787
SHA256
e4e930b31557e201555ad308d24abb1778227b90b6f90fe45b8f193d76d82422
SHA512
7f33a5f4f630d964cdadf114b8f08d5d030613b950717b416cd4bffee62638f11b613e52872c5913ace77568d99e3deb3f936ff54b26659e30cf441f3f46db8d
SSDEEP
196608:sXm0LbwdcJ6GSEC7wuMMgGJYR5Gj9ZgANoEs3+c:4LLb31C7wMwGj9ZgANiuc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
IsWow64Process
VirtualQuery
LocalAlloc
GetModuleFileNameW
LocalFree
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetKeyboardType
CreateWindowExA
MessageBoxTimeoutA
MessageBoxTimeoutA
MessageBoxTimeoutA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
RegQueryValueExA
RegSetValueExA
CryptDestroyHash
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
VerQueryValueA
UnrealizeObject
IsEqualGUID
CreateStreamOnHGlobal
ImageList_SetIconSize
Shell_NotifyIconA
SHGetSpecialFolderPathA
SHOpenFolderAndSelectItems
InternetSetOptionA
CoInternetCreateZoneManager
CreateURLMonikerEx
GetSaveFileNameA
WSACleanup
timeGetTime
LdrShutdownProcess
NtQueryInformationProcess
WTSSendMessageW
E�OF��b{{�/'�������!3�a����O$��e$Ov"�1W�L�^��[���~��{��Ӫ�1*� ���t�`���,�QFnw�u[j|����$����1��"X������ᆬ��=2t4��W\|����F\��r9g�Li�xQT� �*�Mzm cf�@���3�u��0J]��P�FoN��T�vTwg���di_-q�݅E)ou�,�_����NahQ��`GzQ�A���*j5�M����6�4K��d�0B^![{uo6�Boho��w�j�1o����ʲ�y��uW4�d���z�N|8^�H�� :���?�t��w7�L���r�]R0��5hi��)ː��uH����c^߶X}��-��8�-�O���o���V�]lRI�/�u� D����ĪL`�"��~v�bN�ݴ_��`�`QY���;.���^������6�[g�덷��V�QEn�+ہ���(�.Y�Rw z����h��NnƗH�����g����#���X��+��$z��6�}L�[< � �+�~V%���9lωOK/JD�0fM[u6f�����S^Q���-C� �I��T��k�5�b|�N�3�LXm-���*XQd�tq� ���NGt,`!_�fl(��P�w!�l�0V��L�����Z����dÚ\����o���W���r6����H�z�$5B��QQ��h6+����«��P; �WAn��U�@�8n�W���/��87ēÑ=$�Y���>�\Ռ{IdH�`��Z� �j�(��[ZDO � E-\o�����M�6m��F��V��PLP�SV8�L� �0�ź�ˆ���5�~�T���x�u�f0픯��<H�K��6��Yxж� �[ɛ�j�唥?��N�ۖ�j Hk�3�i��X.��*�� �ΙZ��?���Ǐ�1��縄�Ͷ��a�X�璤��_$��$�z�f��&tKPu>pNȜ$� �t�%&2�Wj:{��.ŌE4��l7�2P��[ &�"�����%�]�����\0���7��@��L���ÝSB|�d m6�;��bD�j jfL��Jtd��^���C��i�F6��;��/���..C��͢��ŦĊ�?�6�A?����<��,�K�)2�(������i!� �ë��K&�X�����5�xG��ל��zd��襒��Cd�+����Qk�b_����,�Ĵ��� �8�S��85��iJ)f���"�#��B���~5�Ä��"SY kf����NL�2�ڤw^�����)�ڃ����݇�z�������A����$��e.����vhx�p ���{��������������P�F-ۤ[��Ñ�ӏ���$Jg;�����(f@!v�wb����FЊ%���r�7�IUIF�s;��wϦ�=Y�!��r+.�LS���HM|a� �Z�Ib���u� ���By�z�肛��z-�<NV��))�����)��r�8[bI"�Ҡ��J�d�x��Rz%�e��*F��)�{r��g�.�ܮ���@��u����&2m�ӯ^̙L�kX6)���m=�c)m������ u55����+K�&a��!�����gCgKM�Ks A�ť�^Y�*�3�=�����+�]�B�fo ����T�r� D&a�ږ`� ��I0U_PZ!�7��ط����Mb��;��|��� j�m�݁�Pױv�u]�D~�@?υ(�lh��~�q㏍��X�����沈7ė��}0i�!�?O�$q.����W���ۍ�W�O���Sa(Tn~b�WΔ��_�9ki%=[���}^}/�%�G=���%���{�hJ4'�Y> o���� �5��T60s���&f��~��'���7� ���)48|���?�<�������\/F��Wh$�U�6����̕[$^�5B����Z��3gE"�E'Nۓs�`5ힺ`�H�Q<R�aTa�8Q�Y��@Q~�����Gص�YZf��~#�+��ȧ������"�J�Ʉ45�w������Ʋ��4��`�Yyb�u���9n��*d��|��6n��%<����"\F=!�����e�v�쭣}T�����!9�P�*ì�S�y��d�-����W��p��et����_aDTO5�p���dD �$��[<<=�^[����zw�}#}��Mnˍ k��c_6*������It8���A �q#�ܰ.C��sl�C�OVEQ��e�IE,u/�>����Ҏ8��إ���!z,��x����S�� �쮂N�j�;��tK�����BOE�Κ)<í��۶�q<�����e#ERm�v� �_�-�_k� ؝Z\�ϴ-��"�/��~n�껍~"���Q*�־�RS�@F��d��#v��.-��������}x�1 ~��̉ЗY ��>vL"�v�8&�n�.�%�"�ީZs͒(b�!�h�μX����R�֏T�͠6�L��BD�5�[�nB���g��&� ���?UScjkF��&W�k�Ť������Ҽ@�U���9��m��8ɀ�h�V��`�����=fK�d��������9�'�jj�q2��lwѕ��qr��ٸ�*=�l��oS�����1z<��h�+�߭6�C_8�UF�h����X�J��}�z)�Č�JR�`q�L��#'v�^��5��`]�L+�T�N���������3m��W���Um�F9���B��6����������U��)/��O���9Y�K�s���7��gl�Y��6<I>h]�'t�ao���D�$ ��yv8�FF�0:~�x�]_m����N��f*\߬YRE�1C %��4|c�m�b���m���7�%���;�1�mwwc����Oj�Mu� 5ߋ3�����Ϝ�XrT����]\�=�i\�W8%�$ �3�G�#��*ȃl��qn����~"U�-�Y<[�7۴2ɘ���Km@�)�+<���P��0����f �d�w�,�@<\���ee��Z���G�cs�����TW��^@��SK�_=����S>p�m�M3�r�&�o�A&�K�`�~�H��<���X_&F4ѓ���ݭi����7I�Y�h��d
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ