Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-29_352eed28a4fb1e83365b425387a110b7_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-29_352eed28a4fb1e83365b425387a110b7_mafia.exe
Resource
win10v2004-20240319-en
Target
2024-03-29_352eed28a4fb1e83365b425387a110b7_mafia
Size
274KB
MD5
352eed28a4fb1e83365b425387a110b7
SHA1
a574e720d3ff6f7a5256bf72e9d894cf219fff5d
SHA256
ab0adf0838ee18cef1425ab30253471988410db224b971cfdb9f08518b1f4662
SHA512
849c425eb49781f5f251538dcd9316d65e6d0f09f23978c915c44827df3bccd77c52d437228b23825aac0d3c08d03b323363c60eed57f8cc03225fc26cb55706
SSDEEP
6144:Xi99T6RPdBAKlZ9ab+n3v6muGdWMzU0FfN058D2C4d9KhIfZP:SPgBDlZFn/6muGEMzUqACe1l
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\hudson\workspace\LePlus.Modify_Channel_rar\Packager\cleanup\Release\MagicPlus_Cleanup.pdb
ord17
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipDrawImageRectI
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromStream
GdiplusShutdown
FindFirstFileW
InterlockedDecrement
WaitForSingleObject
GetModuleFileNameW
FreeLibrary
GetCurrentThreadId
GetVersionExW
GetCurrentProcess
GetTempPathW
GetEnvironmentVariableW
Sleep
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentProcessId
OpenProcess
TerminateProcess
GetTickCount
GlobalLock
GlobalUnlock
GetFileAttributesW
FindNextFileW
FindClose
RemoveDirectoryW
OutputDebugStringW
SetThreadUILanguage
GetLocalTime
GetCommandLineW
SetUnhandledExceptionFilter
CreateMutexW
CopyFileW
GetProcessHeap
SetEndOfFile
CreateFileA
WriteConsoleW
FlushFileBuffers
SetStdHandle
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetLocaleInfoW
HeapSize
ReadFile
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
SetFilePointer
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
DeleteFileW
QueryPerformanceCounter
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
WriteFile
GetCPInfo
LCMapStringW
HeapAlloc
RtlUnwind
HeapFree
ExitProcess
GetModuleHandleW
CloseHandle
GetProcAddress
LoadLibraryW
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
GetLastError
WideCharToMultiByte
GlobalFree
GlobalAlloc
CreateThread
ResumeThread
ExitThread
SetFileAttributesW
CreateDirectoryW
GetStartupInfoW
HeapSetInformation
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
EncodePointer
LeaveCriticalSection
GetFileAttributesA
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStringTypeW
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
InterlockedIncrement
LocalFree
GetSystemTimeAsFileTime
CreateFileW
GetMessageW
DispatchMessageW
TranslateMessage
LoadKeyboardLayoutW
ActivateKeyboardLayout
UnloadKeyboardLayout
MessageBoxW
GetWindowThreadProcessId
wsprintfW
EnumWindows
GetClientRect
InvalidateRect
ShowWindow
KillTimer
PostMessageW
GetWindowRgn
GetWindow
GetParent
SetWindowPos
GetWindowRect
EndPaint
SetTimer
DestroyWindow
DefWindowProcW
CallWindowProcW
ReleaseCapture
SetCapture
GetCapture
PtInRect
GetDlgCtrlID
DrawIconEx
DrawTextW
UpdateWindow
MoveWindow
SetLayeredWindowAttributes
SetWindowLongW
GetWindowLongW
CreateWindowExW
GetSystemMetrics
RegisterClassExW
LoadCursorW
LoadIconW
TranslateAcceleratorW
LoadAcceleratorsW
SendMessageW
BeginPaint
PtInRegion
CreateRectRgn
DeleteDC
CreateCompatibleDC
CreateDIBSection
DeleteObject
SetBkMode
SetTextColor
SelectObject
CreateFontW
RegCreateKeyW
RegCreateKeyExW
RegEnumValueW
RegOpenKeyA
RegOpenKeyW
RegSetValueExA
RegQueryValueExA
RegSetValueW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
CommandLineToArgvW
SHGetSpecialFolderPathA
Shell_NotifyIconW
SHChangeNotify
ShellExecuteExW
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize
CoTaskMemFree
CoCreateInstance
SysFreeString
SysAllocString
SHDeleteKeyW
ImmDisableIME
MiniDumpWriteDump
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ