Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_c15433e78c09d8fbab95e7ba8e0bb9bb_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_c15433e78c09d8fbab95e7ba8e0bb9bb_mafia.exe
Resource
win10v2004-20231215-en
Target
2024-02-13_c15433e78c09d8fbab95e7ba8e0bb9bb_mafia
Size
2.9MB
MD5
c15433e78c09d8fbab95e7ba8e0bb9bb
SHA1
c36ac2cdea0496739d1f420f502136ede07bc4bd
SHA256
5d2156bc4897c1806682626dbc67ce3c27e6aae2c001dae5ae363b133f9059fd
SHA512
106dc241a25e3cd9073656152beea41e5eb893cd14e80c8e8e75347482586f1c8232f1f559de6732e9c48302c681ad52d531ee4d4094c67885ed6ecb50c9d9ab
SSDEEP
49152:rlpagwB6nUOAJX3KyPt7gpMJrCanTzF1UXOjOrwvFs53Hd9C0ASVgwEq1Ptpk7Bp:vaaUO2DPt7bloOjO8g3HLMlRGYH
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
F:\ManiacGameTool_V2\trunk\bin\Release\疯子助手2.0.pdb
GetVersion
GetVersionExW
SetUnhandledExceptionFilter
MoveFileExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindFirstFileW
FindNextFileW
GetFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemTime
FindFirstFileA
FindClose
GetTempPathA
WritePrivateProfileStringA
MoveFileW
MultiByteToWideChar
lstrlenA
WaitForMultipleObjects
GetCurrentThreadId
FreeLibrary
LoadLibraryW
GetProcAddress
GetLastError
GetModuleHandleW
WideCharToMultiByte
GetLocalTime
CreateFileW
GetFileSize
VirtualAlloc
ReadFile
VirtualFree
lstrlenW
OutputDebugStringW
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetTickCount
Sleep
ResetEvent
CreateEventW
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
GetFullPathNameA
SetStdHandle
LCMapStringW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
SetHandleCount
InterlockedExchange
HeapCreate
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetFullPathNameW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetFileAttributesW
FindFirstFileExA
GetDriveTypeA
GetFileInformationByHandle
GetFileAttributesA
HeapSize
HeapReAlloc
HeapAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineW
HeapFree
FindFirstFileExW
GetDriveTypeW
CreateThread
ExitThread
DecodePointer
EncodePointer
RtlUnwind
FlushFileBuffers
lstrcpynW
GetSystemTimeAsFileTime
lstrcpyW
GlobalMemoryStatus
GetSystemInfo
VirtualQuery
FileTimeToDosDateTime
RaiseException
GetCurrentProcessId
CopyFileA
GetPrivateProfileStringA
SuspendThread
SetThreadPriority
ResumeThread
GetPrivateProfileStringW
WritePrivateProfileStringW
FileTimeToLocalFileTime
RemoveDirectoryW
DeleteFileW
GetFileSizeEx
GetSystemDirectoryW
SetEvent
WaitForSingleObject
GetVolumeInformationW
ExitProcess
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
GetModuleFileNameW
GetCurrentDirectoryW
GetACP
MulDiv
SetFilePointer
GetFileType
DuplicateHandle
GetCurrentProcess
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
WriteFile
OutputDebugStringA
GetEnvironmentVariableW
SetEnvironmentVariableW
GetComputerNameW
CreateDirectoryA
FindNextFileA
CreateFileA
DeleteFileA
RemoveDirectoryA
SetLastError
SleepEx
FormatMessageA
PeekNamedPipe
GetStdHandle
LoadLibraryA
ExpandEnvironmentStringsA
FormatMessageW
LocalFree
LocalAlloc
GetNativeSystemInfo
CreateProcessW
CreateMutexW
OpenEventW
TerminateProcess
SetWindowLongW
MessageBoxW
GetDC
SystemParametersInfoW
GetWindow
GetParent
DefWindowProcW
SendMessageW
CallNextHookEx
LoadIconW
SetWindowsHookExW
RegisterHotKey
UnregisterHotKey
UnhookWindowsHookEx
SetCursor
RegisterClassExW
DestroyWindow
LoadImageW
GetWindowLongW
DestroyMenu
GetSubMenu
LoadMenuW
CreateWindowExW
SetForegroundWindow
GetCursorPos
RegisterWindowMessageW
MoveWindow
GetClientRect
IsWindow
LoadCursorW
RegisterClassW
IsWindowVisible
ScreenToClient
SetWindowPos
ShowWindow
KillTimer
wsprintfA
GetSysColor
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
PostMessageW
GetMenuItemID
GetWindowRect
SetTimer
IsIconic
GetMonitorInfoW
MonitorFromWindow
IsZoomed
SetWindowRgn
wsprintfW
PostQuitMessage
DispatchMessageW
TranslateMessage
SetFocus
GetMessageW
EnableWindow
GetSystemMetrics
CallWindowProcW
GetPropW
SetPropW
ClientToScreen
GetClassInfoExW
CharNextW
GetKeyState
InvalidateRect
SetCapture
ReleaseCapture
PtInRect
ReleaseDC
GetFocus
MapWindowPoints
UpdateLayeredWindow
IsRectEmpty
EndPaint
BeginPaint
GetUpdateRect
OffsetRect
InflateRect
wvsprintfW
IntersectRect
FillRect
DrawTextW
CharPrevW
SetRect
InvalidateRgn
CreateAcceleratorTableW
CombineRgn
StretchBlt
SetStretchBltMode
ExtTextOutW
SetBkColor
CreateSolidBrush
RestoreDC
MoveToEx
CreatePenIndirect
RoundRect
SetTextColor
SetBkMode
TextOutW
GetClipBox
GetCharABCWidthsW
GetDeviceCaps
BitBlt
SaveDC
CreateRectRgnIndirect
ExtSelectClipRgn
Rectangle
DeleteDC
DeleteObject
CreateDIBSection
CreateCompatibleBitmap
CreateCompatibleDC
SelectClipRgn
GetTextExtentPoint32W
SetWindowOrgEx
CreatePen
GetStockObject
GetObjectW
CreateFontIndirectW
GetTextMetricsW
GetObjectA
CreateRoundRectRgn
LineTo
SelectObject
GetOpenFileNameW
ShellExecuteW
SHFileOperationW
DragFinish
Shell_NotifyIconW
SHGetSpecialFolderPathW
DragQueryFileW
ShellExecuteExW
VariantInit
SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
PathFindExtensionA
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteFont
GdipCreateLineBrushI
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetTextRenderingHint
GdipDrawString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneBrush
sendto
recvfrom
accept
listen
__WSAFDIsSet
select
ioctlsocket
gethostname
getaddrinfo
freeaddrinfo
WSASetLastError
connect
socket
getpeername
getsockopt
bind
ntohs
getsockname
setsockopt
WSAGetLastError
WSAStartup
WSACleanup
recv
send
ntohl
htons
htonl
closesocket
ord118
ord14
ord144
ord215
ord207
ord26
ord132
ord126
ord141
ord79
ord146
ord166
ord301
ord27
ord41
ord46
HttpQueryInfoA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestW
InternetReadFile
InternetOpenW
InternetConnectW
InternetCloseHandle
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestExW
InternetWriteFile
HttpEndRequestW
CoInternetParseUrl
GetAdaptersInfo
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
RegQueryValueExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
CloseServiceHandle
StartServiceW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryValueExA
RegEnumKeyExW
RegOpenKeyExW
FreeSid
GetUserNameW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
SetFileSecurityW
CoInitialize
CLSIDFromProgID
CoUninitialize
CoCreateInstance
OleLockRunning
CLSIDFromString
_TrackMouseEvent
ord17
MiniDumpWriteDump
MakeSureDirectoryPathExists
??4IPhoneData@@QAEAAV0@ABV0@@Z
?CFArrayCount@IPhoneData@@QAEHPBX@Z
?CFArrayGetBool@IPhoneData@@QAE_NPBXHPA_N@Z
?CFArrayGetInt@IPhoneData@@QAE_NPBXHPAH@Z
?CFArrayGetString@IPhoneData@@QAE_NPBXHPADH@Z
?CFDataGetBytePtr@IPhoneData@@QAEPADPBX@Z
?CFDataGetLength@IPhoneData@@QAEHPBX@Z
?CFRelease@IPhoneData@@QAEXPBX@Z
?GetArrayByDictionary@IPhoneData@@QAEPBXPBXPAD@Z
?GetArrayByPlist@IPhoneData@@QAEPBXPBDHPAD@Z
?GetBooleanByDictionary@IPhoneData@@QAE_NPBXPADPA_N@Z
?GetBooleanByDictionaryArray@IPhoneData@@QAE_NPBXPADPA_N@Z
?GetBooleanByPlist@IPhoneData@@QAE_NPBDPADPA_N@Z
?GetDataByDictionary@IPhoneData@@QAE_NPBXPADPAPAX@Z
?GetDataByDictionaryArray@IPhoneData@@QAE_NPBXPADPAPAX@Z
?GetDataByPlist@IPhoneData@@QAE_NPBDIPADPAPAX@Z
?GetDesignationDictionaryByDictionaryArray@IPhoneData@@QAE_NPBXPADHPAPAX@Z
?GetDictionaryArrayByDictionary@IPhoneData@@QAE_NPBXPADPAPAX@Z
?GetDictionaryArrayByDictionaryArray@IPhoneData@@QAE_NPBXPADPAPAX@Z
?GetDictionaryArrayByPlist@IPhoneData@@QAE_NPBDIPADPAPAX@Z
?GetDictionaryArrayByPlist@IPhoneData@@QAE_NPBDPADPAPAX@Z
?GetDictionaryByDictionary@IPhoneData@@QAE_NPBXPADPAPAX@Z
?GetDictionaryByDictionaryArray@IPhoneData@@QAE_NPBXPADPAPAX@Z
?GetDictionaryByPlist@IPhoneData@@QAE_NPBDHPADPAPAX@Z
?GetIndexDictionaryByDictionaryArray@IPhoneData@@QAE_NPBXHPAPAX@Z
?GetIntegerByDictionary@IPhoneData@@QAE_NPBXPADPAH@Z
?GetIntegerByDictionaryArray@IPhoneData@@QAE_NPBXPADPAH@Z
?GetIntegerByPlist@IPhoneData@@QAE_NPBDIPADPAH@Z
?GetStringByDictionary@IPhoneData@@QAE_NPBXPAD1H@Z
?GetStringByDictionary@IPhoneData@@QAE_NPBXPADPA_WH@Z
?GetStringByDictionaryArray@IPhoneData@@QAE_NPBXPADPA_WH@Z
?GetStringByPlist@IPhoneData@@QAE_NPBDHPAD1H@Z
?GetStringByPlist@IPhoneData@@QAE_NPBDHPADPA_WH@Z
GetITunesVersion
Initialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ