Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_b1d569e68f6bd68d3e053621351cd6d1_mafia.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-13_b1d569e68f6bd68d3e053621351cd6d1_mafia.exe
Resource
win10v2004-20240226-en
Target
2024-03-13_b1d569e68f6bd68d3e053621351cd6d1_mafia
Size
528KB
MD5
b1d569e68f6bd68d3e053621351cd6d1
SHA1
fd1f50b5ba9fa363c7748f0a8b38c0cb8b396ec3
SHA256
ca0255238b83cf529da580d094e91a848401f242dbd2d6c42e3f943f400ad880
SHA512
e5777f52963cb89f5f9c0d705fd898620117e59389ae87e69ed0381b9eb2496e955456acbc55c060dceea03344fc036078459dbf86cf8f5d3857a596767d06e0
SSDEEP
12288:6XDlOkSfpuNsHQgzlFjWjJFHYCC5CACCysCDC4s4bUK4WN:6XxOBf/zlJqFHYCC5CACCysCDCCbY
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\WindowsPrj\BaiduGameBox\BaiduGameBoxPC\bin\UnicodeRelease\BaiduGame.pdb
?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z
??1CDialogBuilder@DuiLib@@QAE@XZ
?SetBackgroundTransparent@CPaintManagerUI@DuiLib@@QAEX_N@Z
?AddNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z
?AttachDialog@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPAXI@Z
?GetResourceDll@CPaintManagerUI@DuiLib@@SAPAUHINSTANCE__@@XZ
??YCDuiString@DuiLib@@QAEABV01@PB_W@Z
?GetData@CDuiString@DuiLib@@QBEPB_WXZ
??0CDialogBuilder@DuiLib@@QAE@XZ
?AddPreMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z
?Init@CPaintManagerUI@DuiLib@@QAEXPAUHWND__@@H@Z
?GetHeight@CDuiRect@DuiLib@@QBEHXZ
?GetWidth@CDuiRect@DuiLib@@QBEHXZ
?Offset@CDuiRect@DuiLib@@QAEXHH@Z
??0CDuiRect@DuiLib@@QAE@ABUtagRECT@@@Z
?GetMinInfo@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ
??0CDuiRect@DuiLib@@QAE@XZ
?GetRoundCorner@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ
??1CPaintManagerUI@DuiLib@@QAE@XZ
?GetName@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?SetName@CControlUI@DuiLib@@UAEXPB_W@Z
?GetClass@CControlUI@DuiLib@@UBEPB_WXZ
?GetInterface@CControlUI@DuiLib@@UAEPAXPB_W@Z
?GetControlFlags@CControlUI@DuiLib@@UBEIXZ
?Activate@CControlUI@DuiLib@@UAE_NXZ
?GetManager@CControlUI@DuiLib@@UBEPAVCPaintManagerUI@2@XZ
?SetManager@CControlUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAV12@_N@Z
?GetParent@CControlUI@DuiLib@@UBEPAV12@XZ
?GetText@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?SetText@CControlUI@DuiLib@@UAEXPB_W@Z
?GetPos@CControlUI@DuiLib@@UBEABUtagRECT@@XZ
?GetWidth@CControlUI@DuiLib@@UBEHXZ
?GetHeight@CControlUI@DuiLib@@UBEHXZ
?GetX@CControlUI@DuiLib@@UBEHXZ
?GetY@CControlUI@DuiLib@@UBEHXZ
?GetPadding@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ
?SetPadding@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?GetFixedXY@CControlUI@DuiLib@@UBE?AUtagSIZE@@XZ
?SetFixedXY@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetFixedWidth@CControlUI@DuiLib@@UBEHXZ
?SetFixedWidth@CControlUI@DuiLib@@UAEXH@Z
?GetFixedHeight@CControlUI@DuiLib@@UBEHXZ
?SetFixedHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMinWidth@CControlUI@DuiLib@@UBEHXZ
?SetMinWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMaxWidth@CControlUI@DuiLib@@UBEHXZ
?SetMaxWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMinHeight@CControlUI@DuiLib@@UBEHXZ
?SetMinHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMaxHeight@CControlUI@DuiLib@@UBEHXZ
?SetMaxHeight@CControlUI@DuiLib@@UAEXH@Z
?SetRelativePos@CControlUI@DuiLib@@UAEXUtagSIZE@@0@Z
?SetRelativeParentSize@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetRelativePos@CControlUI@DuiLib@@UBE?AUtagTRelativePosUI@2@XZ
?IsRelativePos@CControlUI@DuiLib@@UBE_NXZ
?GetToolTip@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?SetToolTip@CControlUI@DuiLib@@UAEXPB_W@Z
??0CPaintManagerUI@DuiLib@@QAE@XZ
?GetToolTipWidth@CControlUI@DuiLib@@UAEHXZ
?GetShortcut@CControlUI@DuiLib@@UBE_WXZ
?SetShortcut@CControlUI@DuiLib@@UAEX_W@Z
?IsContextMenuUsed@CControlUI@DuiLib@@UBE_NXZ
?SetContextMenuUsed@CControlUI@DuiLib@@UAEX_N@Z
?GetUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ
?SetUserData@CControlUI@DuiLib@@UAEXPB_W@Z
?GetTag@CControlUI@DuiLib@@UBEIXZ
?SetTag@CControlUI@DuiLib@@UAEXI@Z
?IsVisible@CControlUI@DuiLib@@UBE_NXZ
?SetInternVisible@CControlUI@DuiLib@@UAEX_N@Z
?IsEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsMouseEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetMouseEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsFocused@CControlUI@DuiLib@@UBE_NXZ
?SetFocus@CControlUI@DuiLib@@UAEXXZ
?IsFloat@CControlUI@DuiLib@@UBE_NXZ
?SetFloat@CControlUI@DuiLib@@UAEX_N@Z
?FindControl@CControlUI@DuiLib@@UAEPAV12@P6GPAV12@PAV12@PAX@Z1I@Z
?Init@CControlUI@DuiLib@@UAEXXZ
?DoInit@CControlUI@DuiLib@@UAEXXZ
?Event@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?DoEvent@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?SetAttribute@CControlUI@DuiLib@@UAEXPB_W0@Z
?EstimateSize@CControlUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z
?DoPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?PaintBkColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintStatusImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintText@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBorder@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?DoPostPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?SetDisabledImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?SetPushedImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?SetHotImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?SetNormalImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?GetWebBrowser2@CWebBrowserUI@DuiLib@@QAEPAUIWebBrowser2@@XZ
?NavigateHomePage@CWebBrowserUI@DuiLib@@QAEXXZ
?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?GetControl@CActiveXUI@DuiLib@@QAEJU_GUID@@PAPAX@Z
?CreateControl@CActiveXUI@DuiLib@@QAE_NPB_W@Z
??9CDuiString@DuiLib@@QBE_NPB_W@Z
?Refresh@CWebBrowserUI@DuiLib@@QAEXXZ
?GoBack@CWebBrowserUI@DuiLib@@QAEXXZ
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?GetValue@CProgressUI@DuiLib@@QBEHXZ
?GetMaxValue@CProgressUI@DuiLib@@QBEHXZ
?GetMinValue@CProgressUI@DuiLib@@QBEHXZ
??0CDuiRect@DuiLib@@QAE@HHHH@Z
?SetPos@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?SetVisible@CControlUI@DuiLib@@UAEX_N@Z
??1CControlUI@DuiLib@@UAE@XZ
??0CControlUI@DuiLib@@QAE@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z
?GetCaptionRect@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
??0CDuiString@DuiLib@@QAE@PB_WH@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
??1CDuiString@DuiLib@@QAE@XZ
?SetToolTipWidth@CControlUI@DuiLib@@UAEXH@Z
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPB_W_N@Z
PostUserEvent
GetCurrentThreadId
lstrlenW
GetProcAddress
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
SetLastError
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleFileNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetCommandLineW
LoadLibraryW
ExitProcess
FreeResource
ReadFile
CreateFileW
GetVersionExW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
WriteConsoleW
SetStdHandle
FlushInstructionCache
InterlockedExchange
SetConsoleCtrlHandler
FatalAppExitA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLocaleInfoW
GetStdHandle
WriteFile
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
CreateThread
TerminateProcess
GetCurrentProcess
Sleep
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
FlushFileBuffers
GetStartupInfoW
HeapSetInformation
RtlUnwind
DecodePointer
EncodePointer
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
LocalFree
RaiseException
SetWindowPos
UnregisterClassA
SetWindowLongW
ShowWindow
SetParent
GetClassInfoExW
LoadCursorW
CharNextW
RegisterClassExW
DestroyWindow
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
SendMessageW
PostQuitMessage
IsWindow
KillTimer
SetTimer
ScreenToClient
SetFocus
FindWindowW
MoveWindow
MessageBoxW
GetWindowRect
SetWindowRgn
IsZoomed
MonitorFromWindow
GetMonitorInfoW
IsIconic
GetSystemMetrics
CallWindowProcW
GetWindowLongW
FillRect
EndPaint
BeginPaint
PostMessageW
GetClientRect
DefWindowProcW
CreateRoundRectRgn
BitBlt
DeleteDC
CreateCompatibleBitmap
SetViewportOrgEx
SelectObject
CreateCompatibleDC
DeleteObject
CreateSolidBrush
SetBkMode
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
SHAppBarMessage
CommandLineToArgvW
OleInitialize
OleUninitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CreateErrorInfo
SysFreeString
SetErrorInfo
VariantInit
VariantClear
VariantChangeType
GetErrorInfo
SysAllocString
VarUI4FromStr
GdiplusStartup
GdiplusShutdown
PathFileExistsW
InitCommonControlsEx
mixerClose
mixerGetControlDetailsW
mixerSetControlDetails
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetDevCapsW
mixerOpen
mixerGetNumDevs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ