Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-25_0749b408a632c02ac03b95d2a11c4920_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-25_0749b408a632c02ac03b95d2a11c4920_mafia.exe
Resource
win10v2004-20240221-en
Target
2024-02-25_0749b408a632c02ac03b95d2a11c4920_mafia
Size
590KB
MD5
0749b408a632c02ac03b95d2a11c4920
SHA1
9da71df7bd2057c4d52b9877ddd4c82e47d7729d
SHA256
ac32e0b57abcfe1f110762e922cfb4cc1498cbd829512035514d47ea5e066126
SHA512
da6fe835de0aad9225d28e268b9512eca2fee109d29c7f974ccefe627fb3e6252077f45213ae53b860e7181065eb52c58f3c8f652e305ffd2b84f200d9119451
SSDEEP
12288:7O/vlcX5VUEH4veEq8/RPxl6Gy6CW+OLdU4yZCrz4nY8R:7OyVmvL5HCT4U4CCf4n/R
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
O:\app\gensoft\pcsuite\code\sprint_code\pcsuite_sprint13\native\app\update_new\project\Release\update_new.pdb
GetProcessImageFileNameA
CreateEnvironmentBlock
HeapAlloc
HeapFree
WaitForSingleObject
Sleep
ExitProcess
Process32First
Process32Next
CreateMutexA
CreateToolhelp32Snapshot
GetCurrentThreadId
TlsGetValue
SetWaitableTimer
GetQueuedCompletionStatus
InterlockedCompareExchange
TlsSetValue
TerminateThread
InitializeCriticalSectionAndSpinCount
SetLastError
QueueUserAPC
WaitForMultipleObjects
GetProcessHeap
SleepEx
GetSystemTimeAsFileTime
CreateWaitableTimerA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
OpenProcess
QueryDosDeviceA
GetVersionExW
GetProcAddress
GetTickCount
SetEndOfFile
SetStdHandle
GetModuleFileNameA
TlsFree
CloseHandle
TlsAlloc
WinExec
DeleteCriticalSection
PostQueuedCompletionStatus
InterlockedExchangeAdd
EnterCriticalSection
GetLastError
HeapSize
InterlockedExchange
TerminateProcess
LeaveCriticalSection
InitializeCriticalSection
SetEvent
CreateEventA
InterlockedDecrement
InterlockedIncrement
CreateFileW
GetModuleHandleW
CreateIoCompletionPort
IsProcessorFeaturePresent
CreateFileA
SetFilePointer
FlushFileBuffers
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
ReadFile
IsValidCodePage
GetOEMCP
GetACP
LoadLibraryW
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
WriteFile
EncodePointer
DecodePointer
LocalFree
FormatMessageA
GetCurrentProcessId
OpenEventA
ResetEvent
ResumeThread
SystemTimeToFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
ExitThread
CreateThread
RaiseException
RtlUnwind
LCMapStringW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
PostThreadMessageA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CreateProcessAsUserA
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
LookupAccountSidA
GetTokenInformation
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ControlService
OpenSCManagerA
CreateServiceA
DeleteService
CloseServiceHandle
OpenServiceA
SHGetSpecialFolderPathW
ShellExecuteA
inet_addr
getaddrinfo
WSARecv
select
getsockname
bind
freeaddrinfo
__WSAFDIsSet
getsockopt
connect
accept
ioctlsocket
WSASend
WSAGetLastError
setsockopt
WSASetLastError
closesocket
WSAStartup
WSACleanup
WSASocketA
listen
GetLogController
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ