Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_6b8bf5e627b5f01b843382d88c1d82d8_mafia_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_6b8bf5e627b5f01b843382d88c1d82d8_mafia_magniber.exe
Resource
win10v2004-20240226-en
Target
2024-03-27_6b8bf5e627b5f01b843382d88c1d82d8_mafia_magniber
Size
2.9MB
MD5
6b8bf5e627b5f01b843382d88c1d82d8
SHA1
6bdb6e754320c78cdc5dc733789817a41c068b79
SHA256
25e77021f6db2bde94c391874ba2ad8a8871cc492958fb2f6358b5b26677ea04
SHA512
fdcbac56071ed38183bd74f3af2fe82b612beb23e3ea2f3841010f05d6f27462ba2ba5c044bb2c17777da09c76bb4318e78659ab65297ce429b376eb2dded9d0
SSDEEP
49152:HM/bUQOmO/QXsEdCeFc5ewNw1EY4aBiT5zdmrVsJkwAI8Jp++PO/oPorm:HM7OoXdx2tNw1VWOwp8mkO/o/
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\BuildServer\bna-2\work-git\bootstrapper-repository\src\Release\Bootstrapper.pdb
AlphaBlend
UuidCreate
RpcStringFreeA
UuidToStringA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
IsProcessorFeaturePresent
HeapSize
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
SetStdHandle
CreateFileA
CreateFileW
SetEndOfFile
ReleaseSemaphore
GetSystemInfo
OpenEventA
ResetEvent
ResumeThread
SystemTimeToFileTime
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
FormatMessageA
SetFilePointerEx
FindClose
RemoveDirectoryW
DeleteFileW
DeviceIoControl
GetFullPathNameW
FindFirstFileW
FindNextFileW
TlsSetValue
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
GetFileTime
SetFileTime
SetFileAttributesW
GetDiskFreeSpaceExW
CreateDirectoryW
GetModuleHandleA
AreFileApisANSI
GetCommandLineW
WriteConsoleW
InterlockedCompareExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
Sleep
DecodePointer
EncodePointer
WideCharToMultiByte
GetDriveTypeW
SetEnvironmentVariableA
GetTimeZoneInformation
GetFullPathNameA
CompareStringW
GetDateFormatA
GetTimeFormatA
FindFirstFileExA
GetDriveTypeA
ExitThread
GlobalFree
lstrlenW
CreateThread
GetVolumeInformationW
DeleteFileA
SuspendThread
GetTempPathA
SetFileValidData
GetVersion
FileTimeToLocalFileTime
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
LCMapStringW
GetCPInfo
RtlUnwind
RaiseException
ExitProcess
GetModuleFileNameW
GetStdHandle
GetFileAttributesW
GetFileType
InterlockedDecrement
InterlockedIncrement
LockResource
SizeofResource
LoadResource
FindResourceW
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentThread
GetCurrentProcess
SetEvent
WaitForSingleObject
CreateEventA
CloseHandle
OpenProcess
LocalFree
LocalAlloc
GetLastError
GetVersionExW
GetSystemTimeAsFileTime
GetUserDefaultLangID
GetProcAddress
LoadLibraryW
GetTickCount
GetModuleHandleW
FreeLibrary
RtlCaptureContext
GetVersionExA
Module32NextW
SetThreadAffinityMask
OutputDebugStringA
GetShortPathNameW
GetStartupInfoW
MultiByteToWideChar
HeapSetInformation
QueryPerformanceFrequency
CreateToolhelp32Snapshot
GetProcessAffinityMask
GetThreadPriority
GetModuleFileNameA
SetNamedPipeHandleState
Module32FirstW
CreateEventW
Process32Next
OpenThread
GetLocalTime
GetDiskFreeSpaceW
MoveFileW
VirtualAlloc
GetFileSizeEx
DeleteFiber
IsBadStringPtrA
SetThreadPriority
Thread32Next
FileTimeToSystemTime
IsBadWritePtr
GetExitCodeProcess
SwitchToFiber
Thread32First
WaitNamedPipeW
GetCompressedFileSizeW
IsBadReadPtr
VirtualFree
GetComputerNameW
CreateFiberEx
Process32First
lstrcpynA
VirtualQuery
ConvertThreadToFiber
SleepEx
PeekNamedPipe
LoadLibraryA
ExpandEnvironmentStringsA
GetThreadContext
GetFileSize
CreateFiber
GetSystemMetrics
ReleaseCapture
MessageBoxW
AdjustWindowRectEx
CreateWindowExW
SendMessageW
GetCursorPos
SetWindowPos
GetForegroundWindow
GetActiveWindow
GetWindowThreadProcessId
GetShellWindow
AllowSetForegroundWindow
SetWindowLongW
ReleaseDC
PeekMessageW
GetWindowLongW
InvalidateRect
LoadIconW
RegisterClassExW
TranslateMessage
BeginPaint
LoadCursorW
TrackMouseEvent
SetCapture
IsIconic
GetWindowDC
PostQuitMessage
GetWindowRect
SetWindowTextW
DefWindowProcW
DispatchMessageW
ShowWindow
DrawTextW
GetDC
EndPaint
DestroyWindow
UpdateLayeredWindow
SetTimer
DeleteObject
GetObjectW
SetBkColor
CreateFontW
AddFontMemResourceEx
EnumFontFamiliesExW
SetLayout
GetLayout
SetTextColor
DeleteDC
SetBkMode
SelectObject
CreateCompatibleDC
SetMapMode
SetTextAlign
CreateDIBSection
DuplicateToken
ConvertSecurityDescriptorToStringSecurityDescriptorW
SetEntriesInAclW
GetNamedSecurityInfoW
BuildTrusteeWithSidW
SetNamedSecurityInfoW
GetFileSecurityW
AllocateAndInitializeSid
AccessCheck
OpenThreadToken
RegSetValueExA
RegCreateKeyExA
ConvertSidToStringSidA
GetTokenInformation
OpenProcessToken
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
GetUserNameW
LookupPrivilegeValueW
DuplicateTokenEx
ConvertStringSecurityDescriptorToSecurityDescriptorW
AdjustTokenPrivileges
RegQueryValueExW
RegSetValueExW
MapGenericMask
ShellExecuteExW
SHGetFolderPathW
ShellExecuteExA
FindExecutableA
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
CoTaskMemFree
CoCreateInstance
select
accept
listen
ioctlsocket
__WSAFDIsSet
getaddrinfo
gethostname
recvfrom
sendto
send
getpeername
connect
WSAGetLastError
htons
ntohs
getsockname
setsockopt
recv
bind
socket
WSASetLastError
getsockopt
closesocket
WSAStartup
WSACleanup
freeaddrinfo
InternetSetOptionW
InternetCrackUrlA
InternetReadFileExA
InternetSetStatusCallbackA
InternetConnectA
HttpQueryInfoA
InternetSetCookieW
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetSetOptionA
InternetCloseHandle
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ