Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_3c5cb516df7dbad7620ab86185efc5fe_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_3c5cb516df7dbad7620ab86185efc5fe_mafia.exe
Resource
win10v2004-20240226-en
Target
2024-03-27_3c5cb516df7dbad7620ab86185efc5fe_mafia
Size
1.1MB
MD5
3c5cb516df7dbad7620ab86185efc5fe
SHA1
b26cc40384165813e2dc1b4dbc7d1f9894e9789f
SHA256
eccf168d0c1c91146dc129d31a2fd875d5fb750a632870ea04909f73b0c91d95
SHA512
580d9b7bdf8a0952b9c0318aceab7c862b3daca470279bb4be1f1d16442fb834032772750c7df230b8a46f6d294d09c6d7febb9453f8a91086dc882e3c9cc7ce
SSDEEP
24576:MgoAjoIt1qOvAqDHe45e9eQ7WTdQgcv4PSpb+WWrDK1KYD5dKd:qx8AKI9eQ7WTdQpgPSoW8K1KwdKd
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\hudson\jobs\PIP2.0_Installer\workspace\release\AskInstaller_1_.pdb
UuidToStringW
UuidCreate
RpcStringFreeW
Sleep
FormatMessageW
LocalAlloc
CloseHandle
LocalFree
lstrlenA
CreateProcessW
SetWaitableTimer
CreateDirectoryW
WaitForSingleObject
CancelWaitableTimer
GetSystemDefaultLCID
OpenProcess
WideCharToMultiByte
GetExitCodeProcess
GetFileAttributesW
TerminateProcess
CompareStringW
InterlockedExchange
MoveFileW
Process32FirstW
WritePrivateProfileStringA
RemoveDirectoryW
GetPrivateProfileSectionNamesA
Process32NextW
CreateWaitableTimerW
GetPrivateProfileSectionA
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryW
lstrcpyW
DeleteFileA
SuspendThread
ResumeThread
GetCurrentProcessId
GetTickCount
CreateMutexW
SetEvent
TerminateThread
GetExitCodeThread
CreateEventW
WaitForMultipleObjects
ReleaseMutex
FindFirstFileW
FindClose
FindNextFileW
lstrcmpA
GetSystemTimeAsFileTime
WriteFile
CreateFileW
SetEnvironmentVariableA
SetEndOfFile
CreateFileA
OutputDebugStringW
SetStdHandle
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
ReadFile
IsValidCodePage
GetOEMCP
GetACP
GetFileType
SetHandleCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStdHandle
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetDateFormatA
GetTimeFormatA
LCMapStringW
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineW
GetCPInfo
ExitProcess
VirtualQuery
VirtualProtect
InitializeCriticalSection
DecodePointer
EncodePointer
GetStringTypeW
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
FindResourceExW
DeleteFileW
GetVersion
GetDiskFreeSpaceExW
GetUserDefaultUILanguage
GetSystemInfo
SetCurrentDirectoryW
GetLocalTime
GetCurrentDirectoryW
GetTempPathW
GetTimeZoneInformation
GetVersionExW
CopyFileW
GetLocaleInfoW
LoadLibraryW
GetPrivateProfileStringW
GetLogicalDriveStringsW
GetDriveTypeW
lstrcpynW
CreateThread
GetCurrentThreadId
DeleteCriticalSection
lstrcmpiW
GlobalHandle
LockResource
CreateFileMappingW
GlobalFree
EnterCriticalSection
GetProcAddress
SetLastError
GetLastError
FlushInstructionCache
GlobalUnlock
lstrlenW
MultiByteToWideChar
lstrcmpW
GetModuleFileNameW
MulDiv
LeaveCriticalSection
SizeofResource
InitializeCriticalSectionAndSpinCount
GlobalAlloc
GetModuleHandleW
GlobalLock
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
LoadResource
FreeLibrary
FindResourceW
RaiseException
WriteConsoleW
ReleaseCapture
MessageBoxW
CreateWindowExW
IsWindow
GetActiveWindow
LoadStringW
SetWindowPos
GetSysColor
GetDesktopWindow
RedrawWindow
SetWindowLongW
GetDlgItem
DefWindowProcW
GetWindow
SendMessageW
CharLowerBuffW
TranslateMessage
PeekMessageW
DispatchMessageW
LoadBitmapW
GetScrollInfo
SetScrollPos
SetScrollInfo
SetCursor
SetTimer
MapDialogRect
SetWindowTextW
MoveWindow
CallWindowProcW
LoadImageW
PostMessageW
KillTimer
SetForegroundWindow
IsWindowEnabled
FindWindowW
SetRectEmpty
PtInRect
ReleaseDC
GetClassNameW
GetWindowTextW
GetWindowLongW
InvalidateRect
RegisterClassExW
GetDC
GetClassInfoExW
BeginPaint
SetFocus
CreateAcceleratorTableW
GetClientRect
LoadCursorW
InvalidateRgn
GetParent
GetFocus
DialogBoxIndirectParamW
SetCapture
IsChild
FillRect
RegisterWindowMessageW
CharNextW
ScreenToClient
DestroyAcceleratorTable
GetWindowTextLengthW
DestroyWindow
ClientToScreen
EndPaint
GetMonitorInfoW
MapWindowPoints
EndDialog
MonitorFromWindow
GetWindowRect
EnableWindow
SystemParametersInfoW
DrawTextW
ShowWindow
GetSystemMetrics
UnregisterClassA
GetWindowThreadProcessId
GetDlgCtrlID
UpdateWindow
AllowSetForegroundWindow
AdjustWindowRectEx
SetLayeredWindowAttributes
GetCursorPos
SendDlgItemMessageW
OffsetRect
GetMenu
SetWindowContextHelpId
DrawFocusRect
GetCapture
wsprintfW
SetWindowOrgEx
GetClipBox
LPtoDP
CreateDIBSection
CreateSolidBrush
GetStockObject
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
GetDeviceCaps
DeleteDC
BitBlt
StretchBlt
DPtoLP
SetBkMode
SetBkColor
CreateFontIndirectW
SetTextColor
GetTextColor
GetBkColor
SetStretchBltMode
GetDIBColorTable
SetViewportOrgEx
CreateFontW
SetDIBColorTable
RegCreateKeyExW
RegNotifyChangeKeyValue
ConvertSidToStringSidW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
GetTokenInformation
OpenProcessToken
RegEnumValueW
RegQueryValueExW
SHGetFolderPathW
SHGetSpecialFolderPathW
Shell_NotifyIconW
ShellExecuteW
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
ProgIDFromCLSID
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
CoInitialize
OleUninitialize
OleInitialize
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoTaskMemRealloc
CoUninitialize
OleLockRunning
VariantInit
SysAllocStringLen
OleCreateFontIndirect
VarUI4FromStr
LoadRegTypeLi
SetErrorInfo
LoadTypeLi
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringByteLen
DispCallFunc
VariantClear
CreateErrorInfo
VarBstrCmp
SysAllocString
SysStringLen
StrCmpW
PathFileExistsW
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Destroy
AlphaBlend
TransparentBlt
DeleteUrlCacheEntryW
InternetReadFile
InternetCrackUrlW
InternetGetCookieW
InternetSetCookieW
InternetCloseHandle
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
HttpSendRequestW
InternetOpenW
InternetConnectW
URLDownloadToFileW
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImageHeight
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipDrawImageI
GdipAlloc
GdipDisposeImage
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipCloneImage
GdipGetImageWidth
GdiplusStartup
GdipCreateBitmapFromFile
getprotobyname
WSAGetLastError
gethostbyname
recvfrom
gethostbyaddr
sendto
inet_addr
socket
WSAStartup
inet_ntoa
setsockopt
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ord70
CryptMsgClose
CryptDecodeObject
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
WinVerifyTrust
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ