Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e5fef1a23779bac242c4602e8e4056cc_mafia_JC.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
e5fef1a23779bac242c4602e8e4056cc_mafia_JC.exe
Resource
win10v2004-20230703-en
Target
e5fef1a23779bac242c4602e8e4056cc_mafia_JC.exe
Size
293KB
MD5
e5fef1a23779bac242c4602e8e4056cc
SHA1
098775902996d51d75499cc3b16eafbbedca577d
SHA256
242abbe5f73343fe2cfc55526957abe4b44c473a3ac59675e5fcb1ecb5a61186
SHA512
c7849b397ba8cd1cbbf1462096fb4656fe0c0ada400765f1121a12098497f323e4c4bcd2b9cddf9cd8d05bffe1adcfabf01770657aebea68b394a83bdf10f041
SSDEEP
6144:92XZdx5OVpwA6EGAiuuKRpBuQtv3NSjMjtG6aLlYmKZ:92p5OVO5EGAiuuKrzv3N/LaLlYmKZ
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadResource
CreateDirectoryW
WaitForSingleObject
WriteFile
SizeofResource
GetFileAttributesW
CreateFileW
CompareStringW
GetTempPathW
GetLastError
FindClose
LockResource
RemoveDirectoryW
FindNextFileW
CloseHandle
DeleteFileW
FindResourceW
GetModuleHandleW
OpenProcess
GetVersionExW
GetModuleFileNameW
GetProcAddress
SetFilePointer
SystemTimeToFileTime
WideCharToMultiByte
ReadFile
MultiByteToWideChar
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
HeapReAlloc
FindFirstFileW
GetCurrentProcess
GetFileSize
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCPInfo
GetSystemTimeAsFileTime
ExitProcess
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetProcessHeap
wsprintfW
MessageBoxW
RegQueryValueExW
RegOpenKeyExW
ShellExecuteExW
GetModuleBaseNameW
EnumProcesses
EnumProcessModules
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpConnect
WinHttpReceiveResponse
WinHttpOpen
WinHttpSendRequest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ