Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Midnight_Loader.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Midnight_Loader.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Midnight_Loader.exe
Resource
macos-20240410-en
Target
Midnight_Loader.exe
Size
18.1MB
MD5
5d0a4ccfdfc1d436fe9a8e8652f7c87c
SHA1
3a470f7e14dcc2d07733b27ac40b85a4cd777a9c
SHA256
f729c8d7e633a711d210f4940234de497ed4793d7a2b8a11038657ae45429723
SHA512
a027acc3d8defc1eea0a01625c9c867fe6303927a19fe5453c8ee819b1379bbd022882f6c7fa32a1efbe13e23ae2bc3a2b6b4611ca12ad3e823c1865bd8edf07
SSDEEP
393216:lhUal8uhyHek1s3RVehYa+4XEPr0/IqfaV+Gzb8NW7VOj5Fz:lhJl89HeGs3ASmEPg/hSI0bwW7VkHz
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WSACleanup
CertAddCertificateContextToStore
CompareStringW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
FindWindowExA
CharUpperBuffW
CryptAcquireContextW
CommandLineToArgvW
CoCreateInstance
SysFreeString
GetAdaptersInfo
RtlInitUnicodeString
CreateDXGIFactory
SnmpUtilMemAlloc
SetupDiGetClassDevsA
Direct3DCreate9
D3DXCreateTextureFromFileInMemory
ImmSetCompositionWindow
BCryptGenRandom
??0Assembler@asmjit@@QAE@PAURuntime@1@@Z
??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z
??0HostRuntime@asmjit@@QAE@XZ
??0JitRuntime@asmjit@@QAE@XZ
??0Runtime@asmjit@@QAE@XZ
??0StaticRuntime@asmjit@@QAE@PAXI@Z
??0VMemMgr@asmjit@@QAE@PAX@Z
??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z
??0Zone@asmjit@@QAE@I@Z
??1Assembler@asmjit@@UAE@XZ
??1CodeGen@asmjit@@UAE@XZ
??1HostRuntime@asmjit@@UAE@XZ
??1JitRuntime@asmjit@@UAE@XZ
??1Runtime@asmjit@@UAE@XZ
??1StaticRuntime@asmjit@@UAE@XZ
??1VMemMgr@asmjit@@QAE@XZ
??1X86Assembler@asmjit@@UAE@XZ
??1Zone@asmjit@@QAE@XZ
??_FVMemMgr@asmjit@@QAEXXZ
?_alloc@Zone@asmjit@@QAEPAXI@Z
?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z
?_grow@Assembler@asmjit@@QAEII@Z
?_grow@PodVectorBase@asmjit@@IAEIII@Z
?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z
?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ
?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z
?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z
?_reserve@Assembler@asmjit@@QAEII@Z
?_reserve@PodVectorBase@asmjit@@IAEIII@Z
?_x86CondToCmovcc@asmjit@@3QBIB
?_x86CondToJcc@asmjit@@3QBIB
?_x86CondToSetcc@asmjit@@3QBIB
?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
?_x86ReverseCond@asmjit@@3QBIB
?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?align@X86Assembler@asmjit@@UAEIII@Z
?alloc@VMemMgr@asmjit@@QAEPAXII@Z
?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z
?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z
?allocZeroed@Zone@asmjit@@QAEPAXI@Z
?bind@Assembler@asmjit@@UAEIABULabel@2@@Z
?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z
?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z
?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
?dup@Zone@asmjit@@QAEPAXPBXI@Z
?embed@Assembler@asmjit@@UAEIPBXI@Z
?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z
?emit@Assembler@asmjit@@QAEII@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z
?emit@Assembler@asmjit@@QAEIIH@Z
?emit@Assembler@asmjit@@QAEII_K@Z
?flush@HostRuntime@asmjit@@UAEXPAXI@Z
?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ
?getHost@CpuInfo@asmjit@@SAPBU12@XZ
?getPageGranularity@VMemUtil@asmjit@@SAIXZ
?getPageSize@VMemUtil@asmjit@@SAIXZ
?getStackAlignment@HostRuntime@asmjit@@UAEIXZ
?make@Assembler@asmjit@@UAEPAXXZ
?noOperand@asmjit@@3UOperand@1@B
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
?release@JitRuntime@asmjit@@UAEIPAX@Z
?release@StaticRuntime@asmjit@@UAEIPAX@Z
?release@VMemMgr@asmjit@@QAEIPAX@Z
?release@VMemUtil@asmjit@@SAIPAXI@Z
?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z
?relocCode@Assembler@asmjit@@QBEIPAX_K@Z
?reset@Assembler@asmjit@@QAEX_N@Z
?reset@PodVectorBase@asmjit@@QAEX_N@Z
?reset@VMemMgr@asmjit@@QAEXXZ
?reset@Zone@asmjit@@QAEX_N@Z
?sdup@Zone@asmjit@@QAEPADPBD@Z
?setArch@X86Assembler@asmjit@@QAEII@Z
?setError@CodeGen@asmjit@@QAEIIPBD@Z
?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z
?sformat@Zone@asmjit@@QAAPADPBDZZ
?shrink@VMemMgr@asmjit@@QAEIPAXI@Z
?x86RegData@asmjit@@3UX86RegData@1@B
�W��+��[��,�%�E,��7��h7��EajwQ&>:;�S!d�����BE������s_��oQ=��J��''g��-���Y�2�$U��]l�P�����%��B9���ͫ@놔���'�m��D��FW*��>sl������UD�>�dp?e����-~���h"�i�U�sw�t���"J�!���o�9wC�S��U�>�? �r?,�~~g�/�؊��%�z��#�o�=��4�x&�-1 ��1�-��6� ���;����a�=�%T�ǿ�e��k�����l=�$���A�w+U�T�<��}�� ��=���l�i��k��c�s�d|���M��]���O�emӊ���%.�,!|p ��i�%�|p�6�6��f�=%y�<wa���.� �F�#�;�s6/�_���� e$Y���.`^��:9�A�eﴸiF����w���f��&ٓM�#s�>��Fiq�� �$���$kTp�[���"5)e_8��YԺ��3���"bf����b\�Cȅ�*�ƲiK����˸O�����e��� }â/�f�y ��uH���VU���/YX�]z#|�(���x���U�/�!��N�Eߞ�k8��ça&�DaH�$� Z��ʂ�`��fG&`���YJ����-D�R��`Q�!0����Q�G=� ܊��5x?_y~f3L�$]80���S7UQ{��p��0�� �K{���`��R�����[�S��;��]�T-��A�ؖ�K���+YY� ;��Ls)d��n�릑T]���!p\�����X�M}�=���>��R�2��:O{x~�m_�(�<�B&�W��)��oZ�ts��"ga�ş f<Bpĩ���1���YCN�hK�����UBr����bU�j0���l��fh�d\ዋ��n1��sw@3\i�0�z-ʢT�93Sw�����K��e������{O�.��蛬���v~��H<Z�u�kL:���<Ú�x�>�j9��i�X��m��l�+�$���E�ې�)� �\�i����, �*'�@Ltb��ڂk"1�����QM]�M�� Q��!�/eŲ9��US�B��7 wrQ��x�A����'؛�j.D �9s�I�r��_����e��H�z���[gWK��ͷ�N� �H8ɨ��M]*�0�� �1;���gS4�B��n`[O���x�X������]R���� ��W�k��4Ca����&8_Ǿ�a �p���$����$R~ � u2�Eo/��u>���?�l�,�ə�p;�C'�I@��FT��1)�P�5���r���5(������f���}V>6�&W���?�eL~\'>���_:�g��?�s��aC�! F���n=70 �� ��<Y� �G�jys^��XP�f&��2�JM��@�#�2�0$o�/����95���q�0h�0����prU�{x�4W��'g�O��A��m���7N� -������F�, �tU�B�b���'�����'g5T�m�/}`�;�C�t}���У�K��vSU���z Db�uKu��-����#7j�|�A����C�!t %��և�Ռ�i&�r��JJ@��;�c%�.ٝV�/�ͳ�ɛ�/Ӌ�v_���9��{@g�dZ>�4mQd����EBIrA��ȍU�$��x�9k���j��\�\�^�)�S� '�<!p0��� ����&i�n%}����*ObĀ�Ԟ������y�_U,:j��R{t �l 5�Pνb���*&��l��g���vf�y�T�{�"���Ĭτ�����NI��i�z�ze��::����I*p��Ѯݩ���g]F�l�g�s���"�L��B4�2��;q-�`Q��\��5F��?�>������͐xɶ�? �G�%��u�=� �d�&���r# �V�h0ziY�d��B2��؉�OB�}=|T^��F���)�VoU$l{3�Hr�'���;���eF����x�P_B+1;�A9�Ғݬ�'����*�$q}*���2��:VHr��� �5�R<�G�� ��e���>뭰�B�Q�u�Pi��c^�`䶶��C�q��:��t��-)^�I���ɼ�����g�j�� �+�ׁ�5ݤ� �Ɋ�<�%B��ջ��߹��-��Fht����[���B"�#`U��+C- U�8�~�F�c���r;�V�g���=ʐ�j�,�Z���u����2<Mn2>۞$��+vA�����(��7�A�q���b��5Z[ }����+d���üxr�8O�cY^�OGVOdh���B_����20��M��G��U���ÁG����^,��iw������h�I�nNxY�i�Q|7�&��~Q�%+f4KE{q�j����T�bJ��3��UQ�����A�d�������1�#����A�RM�[�mf���O5�Z��{c4*G�^$}��Lê>d]U&%2 r`�0�'�O&��Z���cWژ���<r�[��Hul3"�t�^�X����u�Vo�*4@��� W�����]���Л!kj�6�����^z�⡣ӊ��ZGWo�M������ ��v�{jڔ>�7����ADDߙG���|:��}��d�D3���)N�zSE��f���_j�=�z��!���i�=�CG��T�/����z1��,����#!��ߋ�z0�'6\֪� R'���B������{�ȊI��4 㓦�߬+�DDb+���H��@�v�)��&Pbu��V�/p�`O����UwC� �4y��]{��t�-�e�a�'��� #^����:{d�g�#S�%T�;�D�\�9�[��;Z�N��v��\�F��_�J����Y�.�=���ۖ9!V�A���@���It$���s,_�j~@��`M�e������L�����I���ҷ� \��}nn�ekX�h�>`�@�4�h��A�n�+BVy��ԁx䗍X:0������_j��@��������j�� �3y�<[sgӌ�|<��?�:����-�Na��9����$�M8�����y噝G��;�?C
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ