Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_16e87bc6047490d5a2afb024aaf3c131_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-28_16e87bc6047490d5a2afb024aaf3c131_mafia.exe
Resource
win10v2004-20231215-en
Target
2024-01-28_16e87bc6047490d5a2afb024aaf3c131_mafia
Size
653KB
MD5
16e87bc6047490d5a2afb024aaf3c131
SHA1
afb0d6930510fb9f08ea67735c53daa992c21cb1
SHA256
d8538700423ba52ed9a6e1c38410c397a4a98871e8de2ab3b054c780dd68f763
SHA512
d42b61ce1b198b000e8d1ebebea31885903af0dfc6ee51274c8a294dea0726939d646e02a0d1f12c94197e52f82dc4b9d5009d8e03c488c2433f673fb256d5f9
SSDEEP
12288:Yij0isJD+m3srW+5tEZG1QRw7rZ0n9sLXxGkgXYhfu0tF:lIiG+m8rWwHfR0yXkkxVtF
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\codes\VS2010\SogouDownLoad-NewUI\Src\MiniDownLoad\Release\MiniDownLoad.pdb
CloseHandle
GetCommandLineW
GetTempPathW
CompareStringW
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
lstrlenW
GetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
SizeofResource
WriteFile
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadResource
FindResourceW
GetEnvironmentVariableW
CreateFileA
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapSetInformation
GetStartupInfoW
HeapFree
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateDirectoryW
CreateProcessW
WaitForSingleObject
CreateMutexW
ReleaseMutex
DebugBreak
OutputDebugStringW
lstrlenA
InitializeCriticalSection
GetVersionExW
lstrcpynW
lstrcpyW
GetFileSize
FindFirstFileW
CopyFileW
ReadFile
FindClose
DeleteFileW
DeviceIoControl
GetSystemDirectoryW
GetPrivateProfileStringW
lstrcmpW
SetEnvironmentVariableA
FindWindowW
LoadStringW
wvsprintfW
CharNextW
SendMessageTimeoutW
wsprintfW
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
InternetConnectW
HttpSendRequestW
InternetSetOptionW
InternetOpenW
InternetReadFile
InternetQueryDataAvailable
InternetCrackUrlW
HttpOpenRequestW
HttpQueryInfoW
InternetCloseHandle
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Netbios
NetWkstaTransportEnum
NetApiBufferFree
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CoInitialize
CoUninitialize
CoCreateGuid
SHGetValueW
PathAppendW
PathIsDirectoryW
PathFileExistsW
SHSetValueW
StrCpyW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ