Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3760544ae0138000334d7dd6c0159a52_mafia_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3760544ae0138000334d7dd6c0159a52_mafia_JC.exe
Resource
win10v2004-20230703-en
Target
3760544ae0138000334d7dd6c0159a52_mafia_JC.exe
Size
508KB
MD5
3760544ae0138000334d7dd6c0159a52
SHA1
1577a13dd08a6d0aeaa4c36437c98af0b2fa38e8
SHA256
3318216b733eee94b7d2606b12f26189276ad3341b2a7cd9d415124f4a8ec424
SHA512
3a7fc8c8f630b4db446caa4933d72d0f9618730d45df945998c16855f507b0f5b8cce9eb723e0ff70aec1ab5aefc8da60832ce642a12e77049fc94a7bcfc6a82
SSDEEP
12288:fv9RGfqZ2Z3NBDYXZ35g6LyCluJCmAgoD:fvifqZ2voZ35g6Lo0gQ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateDirectoryW
WaitForSingleObject
WriteFile
SizeofResource
CreateFileW
GetTempPathW
GetLastError
LockResource
CloseHandle
FindFirstFileW
GetCurrentProcess
GetModuleHandleW
OpenProcess
GetVersionExW
GetFileAttributesW
GetModuleFileNameW
LoadResource
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFilePointer
SystemTimeToFileTime
WideCharToMultiByte
ReadFile
MultiByteToWideChar
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetEndOfFile
CreateFileA
WriteConsoleW
FindResourceW
GetProcAddress
GetFileSize
SetStdHandle
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
GetLocaleInfoW
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCPInfo
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetProcessHeap
MessageBoxW
wsprintfW
RegOpenKeyExW
RegQueryValueExW
ShellExecuteExW
EnumProcessModules
EnumProcesses
GetModuleBaseNameW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
WinHttpSendRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpOpenRequest
WinHttpReceiveResponse
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ