Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_aa2885956670d3bdd1f2d244b5ae4bc0_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_aa2885956670d3bdd1f2d244b5ae4bc0_mafia.exe
Resource
win10v2004-20240226-en
Target
2024-03-13_aa2885956670d3bdd1f2d244b5ae4bc0_mafia
Size
1.3MB
MD5
aa2885956670d3bdd1f2d244b5ae4bc0
SHA1
d999f3e6225ea6339f3593cd510eff5b41c282b3
SHA256
87f3f4c7a830f059c6343c0903322d268dc02d689b2fc43c3d0a4e90c66f21db
SHA512
b0674bc1ec7c9171017e34c7af2881e0ece6da315f174d929c1e83c0040d52cf24cfa3b858d2cc1b6970dc9c30a71995d75d0ab876dba2b0081fb1ed6d8c93bb
SSDEEP
24576:yVm2VZQwy9E1Vf3/2xqo49AMKZv1EfTe9LdS2R2VbGRXDt:yVJ9y9E64mM+efTuLdS2IVG/
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
g:\Acro_root_ns\BuildResults\bin\Release\AdobeCollabSync.pdb
StrCmpNA
ord2
ord1
ord3
ord11
ord4
ConnectNamedPipe
CreateNamedPipeA
DisconnectNamedPipe
FlushFileBuffers
GetCurrentProcessId
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
FreeLibrary
InterlockedCompareExchange
InterlockedExchange
GetCurrentThread
GetCurrentProcess
RemoveDirectoryW
CreateDirectoryW
FindNextFileW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetOverlappedResult
PeekNamedPipe
FindNextChangeNotification
ResetEvent
FindFirstChangeNotificationW
LocalAlloc
LocalFree
lstrlenA
GetSystemDirectoryA
lstrcatA
FindCloseChangeNotification
GetVersionExA
LoadLibraryA
CreateEventA
WaitForMultipleObjects
WaitForSingleObject
CloseHandle
SetEvent
GetLastError
GetModuleFileNameW
GetUserDefaultLCID
DeleteCriticalSection
GetStartupInfoA
TlsFree
TlsGetValue
InitializeCriticalSection
TlsAlloc
CreateSemaphoreA
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
CreateThread
SwitchToThread
Sleep
GetSystemTimeAsFileTime
GetLocalTime
GetDriveTypeW
DeleteFileW
MoveFileW
SetFilePointer
FindClose
GetFullPathNameW
FindFirstFileW
GetFileInformationByHandle
SetEndOfFile
WriteFile
ReadFile
IsNetworkAlive
sqlite3_errcode
sqlite3_close
sqlite3_errmsg
sqlite3_result_error
sqlite3_value_int
sqlite3_bind_text
sqlite3_prepare_v2
sqlite3_get_autocommit
sqlite3_exec
sqlite3_free
sqlite3_step
sqlite3_changes
sqlite3_column_type
sqlite3_bind_null
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int64
sqlite3_bind_int
sqlite3_value_type
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_double
sqlite3_column_text
sqlite3_open_v2
sqlite3_busy_handler
sqlite3_create_function
sqlite3_bind_parameter_count
sqlite3_reset
sqlite3_last_insert_rowid
sqlite3_column_bytes
sqlite3_column_blob
sqlite3_finalize
sqlite3_result_value
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xran@_String_base@std@@SAXXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
??0exception@std@@QAE@ABV01@@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_mktime64
_vsnwprintf_s
swscanf_s
iswalpha
_wcslwr_s
free
malloc
_CIpow
toupper
sscanf
sprintf
_strlwr
atoi
memmove_s
wcsrchr
_wcsicmp
wcscat_s
??2@YAPAXI@Z
_invalid_parameter_noinfo
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
strchr
memset
memcpy
_CxxThrowException
_purecall
_controlfp_s
WSAIoctl
WSACreateEvent
WSAEventSelect
WSAGetLastError
WSACleanup
WSASocketA
WSAStartup
HttpEndRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
HttpQueryInfoA
InternetOpenA
HttpAddRequestHeadersA
HttpSendRequestA
InternetSetOptionA
HttpSendRequestExA
InternetReadFile
InternetWriteFile
InternetCloseHandle
WNetCancelConnection2A
WNetAddConnection2A
CryptProtectData
CryptUnprotectData
CreateWindowExW
CreatePopupMenu
GetMessageA
DestroyMenu
RegisterClassW
DispatchMessageA
GetSystemMetrics
PostMessageA
PostQuitMessage
TranslateMessage
GetCursorPos
InsertMenuW
TrackPopupMenu
LoadImageW
DestroyWindow
CallWindowProcA
SetPropW
LoadStringW
DefWindowProcA
SetForegroundWindow
InsertMenuItemW
GetPropW
RegOpenKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorA
ConvertSidToStringSidA
OpenProcessToken
GetTokenInformation
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
OpenThreadToken
RegCloseKey
Shell_NotifyIconW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteA
CoTaskMemFree
CoCreateInstance
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ