Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win10v2004-20240709-en
Target
Loader.exe
Size
7.2MB
MD5
4f75d8e9c9f1008839eca232bf4887b5
SHA1
736260dd91d955d935c067afc13986e5176eda87
SHA256
a5702dfe645c3195ad2f1edd38115d3a9dc0f5a67cfb5c64bb5e6ffb57e8aa36
SHA512
bb77cc2dcdecb3d8d59dea5923b892c862fdcdc737acef8dce97ebd85efc4aaeec38982cd07d2a6bbf56f010fcacc9d993894f66cea689ad7095f72ba2cafbc1
SSDEEP
196608:N+eg1PSY1xIVhPcstS9yba5+wPcvWcBUrqRWDV2jYgxk:iSY1xIvcs04+5VPgWCUrIWx2jYak
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
IsWow64Process
VirtualQuery
LocalAlloc
GetModuleFileNameW
LocalFree
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetKeyboardType
CreateWindowExA
MessageBoxTimeoutA
MessageBoxTimeoutA
MessageBoxTimeoutA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
RegQueryValueExA
RegSetValueExA
CryptDestroyHash
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
VerQueryValueA
UnrealizeObject
IsEqualGUID
CreateStreamOnHGlobal
ImageList_SetIconSize
Shell_NotifyIconA
SHGetSpecialFolderPathA
SHOpenFolderAndSelectItems
InternetSetOptionA
CoInternetCreateZoneManager
CreateURLMonikerEx
GetSaveFileNameA
WSACleanup
timeGetTime
LdrShutdownProcess
NtQueryInformationProcess
WTSSendMessageW
V;�$�+��!����<zX��O�y���;�����У��kדv�/�I�<b'��VwW�����ɀs���`��b�������f�� � ��q�D��%�����x��������23؝�*m�2д?�PF��g~<�ٱ9�5�ޙ݊�.Y��y�� �i��w@K��s�Q��n�Y�|�.��S�6D+�}c�:����r���<a�D�m�Z�o�w���5�\�V��bjzY��H-!��q4�)��E�%B��䢲f,�&��_�f�Jw/��Q��/��� [�Iv�� ;��A|#M�Z�����;F�͊]�8�� |���y��U���e�-�y9B�`@��`,RP ��8$�N��i�r���s�S��xn���11� �)l�0��a�Y���>�2B@Ģ��iZl��k�wÔ�D?Ir�/���{�h`����~����������H�v,��0,nܡM*�H�T_xN��J���F�x�N�Q����wC��u��%Y��m����i�2�O��M/o+��b|��T�M�MDT�5�E}"��U�y�~�������������MS%�Ѱp�$a}�3چ7��2�)1 .����� ͎J���BW��r~S��(��tx닒�G��F�z}�%�E���Ez���$��` ���3m�����p<��"�����,\��"C��-}��r �\�vl���(�U��M����ejG����rR~Y�]e��z8�2;N�w��4z�V���! ec�3!:T���%#r����?���iv&G|H�a �|�ϥ�w�g��nP[i�F���䤮o�,�����30�h���,B�7<y��>.!�������Θ�~x������6Q�����5��"�x���U�N� $�EE O�a�r+�^�@��l�%6n1� �J�FyZZp��f8������B���n�C� p�K�APrU�TD��2��?>2F0a���L�?���?�6���V��cY��[)�����(h�g#���;Q�8�+1))�Q�f�z�|�,�����;W��7�K-�?0������W�C*r�Pδ��ZxAl�b�M���^V���)��A�����Q��ƍ�y�Dӫf#��Ģ���bh���v�Z��J�"e�x��o����B(e�cq���� R��u>%B�)^i@�A�d3��>����A�/f�s�LڻB�}H���'�u|�Et�T_-��?�2m ul���j������Q§Z��}]B����%����ȉ�b��8{����K�u��n#�TiҤ�z��sq��+Q�/�~�!#$!���_�Gn-����C����~�+^��VEG�s�3LJl�S�ܘ8]�k��Ճb�)�@��fU��+B��T�!�n�Ԫ�0ŲOO�?��ޱ� ��l���b�]<X(u@�0Z��*XS���*��0�I�'&��ym`Q���`���装��B �VY~ˌn�W��j`�V&���!�)ş��m�|�S�Hy#S���Ur��'Hr���sX�T?���K��4A���>9�v釒7�\" �Ly D��N��Qb�P+�)�ip�(x��^w�����F����>ZV�k�z�j�+��_����b-v�ͦ�Y���m�j������c�1!5A+>�۞O��+�h`+�پ�����sX����fOB�����FL0��4�8���8M��$y;�xO�TE�D���DU�����R�< ��q��U]h8M3=OG\�E,Ln:�� |�� J�7�����*��>cǿP�-8E!��.�"K�ы���t���"l"����r�^xr�/ �E^��Z�<�(RD�e) dڇ��0�sh���Z��S�V���� #��2�� u�OX^w{���ݔ�xpx~��GfNP�E��e���p�������08V|����+�I@%B�}���7c"������4>��u��Ja٠á���=��?�țxu����K����P�*b�]vO������%4��w��t�x$�"�'�]�dU珆���i�kKa�/�L�5�˅dJ�ЙG{,!���s�OYg� R���o��p����0W>�����%Q�y�dv&����d��t�b9�5H���J�<3H�淈��G��%��@���a2��ͪ���b1��� q�d���e�k�FGm����D�2��S�1�"��vl�%L��~�@h�͍�W��B<&�R[i*Nw �c5L"���>{!��M��p��MN� (�Ҟ0��c�x����}��fRaR��4\S���7}E{3���}4B=��Le�D��ԩƺZ��.p�ԏ��2R�Ƃ�_j^��(������#O�Z��J?_܆��z���v�߈J3�C�k�o��cL��X�8�/*�$&y&���rOl'�ѧc��Uͥ:���0,R/�W�i�#�����ĉ>�(Cd�s��,�KjƟ<bf�s��v� �D���pE��G�u��V�wx0O��ͬ�� �f(&��(��#�'��z�#�� Mu�|���%�{����s�vIg��C�I�ӑ���ܥfi-R%�ł�Gn��� �؈����/a�i�F��ET��{�q�s���i�����kRG9�����`�����#�����W#��/;�wj�2�Q'��F����*���>:x�I��]X ��"�E���:b]�R��'J�6ĖB;�0(y��~����k1�2��V�ـ����E�(Z5g�9�nCj�Ʉ���/���>�{�4���h�Ug�KF.�� �1��=�|�?J�T�Gc����#��s����xI����d�z�k����t��5#�xE-�oԚ��7�47�z\�X��"����{XH��O�� �E��������p�@c���{�U$-#c}*߸oA{���~zC�p���B���mqo�8��7dRmS�7���T�+��q�m�q_ʉ,���>0�3ou.C�rº��~t۬7�1X��`�|��c�� e�sm�K(Ku4�b�[����������P`'=ЩK���&��ع�0o� ¯*�a���O�M��~� p
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ