Extended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_5d1a62eb16105ff72f7cfc60b31d9180_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_5d1a62eb16105ff72f7cfc60b31d9180_mafia.exe
Resource
win10v2004-20231215-en
Target
2024-04-10_5d1a62eb16105ff72f7cfc60b31d9180_mafia
Size
2.2MB
MD5
5d1a62eb16105ff72f7cfc60b31d9180
SHA1
adab0acd578cd5de32a78a4e9c996e5b0058b6e2
SHA256
80ee8156078361d28dd04c0bab194b274caff0e74e8015adbf518499348416c4
SHA512
c7e09602923f97c8146168d4eece24cabd274ffcc9b98840a30e67e4929642c255382a98ae295b5a16b8927c17ce411a5599299c6cb0e2e07b31d63237d8f401
SSDEEP
49152:xPrtohQZvw/OJzkiPBRmEw5DozemBPPnDyNWN+oWhl+8wHHt/TjF6ESKKkG60Vas:xzlZI/izki5wTozemBPPDy6Who8wHHtM
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\dvs\p4\build\sw\rel\gfclient\rel\backend\build\bin\Win32\Release\NvBackend.pdb
IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle
accept
WSAWaitForMultipleEvents
listen
send
gethostbyname
WSAResetEvent
closesocket
WSACreateEvent
inet_addr
WSAStartup
WSACleanup
WSACloseEvent
getsockname
setsockopt
__WSAFDIsSet
bind
recv
sendto
WSAEventSelect
htons
WSAEnumNetworkEvents
WSAGetLastError
htonl
connect
ioctlsocket
socket
select
GlobalMemoryStatusEx
GetStdHandle
OpenEventW
CreateProcessW
GetExitCodeProcess
GetCurrentThread
SetThreadAffinityMask
GetSystemPowerStatus
SystemTimeToFileTime
SetHandleInformation
GetProcessTimes
ReadFile
CreatePipe
CreateDirectoryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetVersionExW
GetNativeSystemInfo
GetProcAddress
FreeLibrary
WriteFile
ExpandEnvironmentStringsW
FindNextFileW
IsWow64Process
FindClose
GetFileAttributesW
GetTickCount
GetLogicalDrives
GetCurrentProcess
GetDriveTypeW
FindFirstFileW
DeleteFileW
GetSystemTimeAsFileTime
LocalFree
CloseHandle
LocalAlloc
SetLastError
GetLastError
CreateFileW
GetSystemDirectoryW
GetModuleHandleW
LoadLibraryExW
WaitForSingleObject
GetCommandLineW
ExitProcess
GetUserDefaultUILanguage
Sleep
InterlockedCompareExchange
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
WriteConsoleW
CompareStringW
InterlockedExchange
HeapReAlloc
GetTimeZoneInformation
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentDirectoryW
CreateFileA
GetFullPathNameA
SetFilePointer
GetStringTypeW
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapSize
GetLocaleInfoW
HeapCreate
RaiseException
LCMapStringW
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
FindFirstFileExA
GetDriveTypeA
CreateThread
ExitThread
GetStartupInfoW
HeapSetInformation
GetCommandLineA
MapViewOfFile
UnmapViewOfFile
VirtualQuery
ProcessIdToSessionId
CreateFileMappingW
OpenFileMappingW
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
SetEvent
ReleaseSemaphore
ResetEvent
CreateSemaphoreW
CreateEventW
DeleteCriticalSection
SetEndOfFile
SetFilePointerEx
GetFileAttributesExW
GetFileInformationByHandle
SetEnvironmentVariableW
GetModuleHandleExW
CopyFileW
GetModuleFileNameW
lstrlenW
RemoveDirectoryW
SetFileAttributesW
GetVolumeInformationW
CreateMutexW
PeekNamedPipe
FormatMessageW
FileTimeToSystemTime
SetThreadPriority
FlushFileBuffers
OpenMutexW
WaitForMultipleObjects
ReleaseMutex
FileTimeToLocalFileTime
ResumeThread
GetCurrentThreadId
MoveFileW
lstrlenA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemDirectoryA
lstrcmpiW
GetSystemDefaultLangID
GetWindowsDirectoryW
GetProcessAffinityMask
InterlockedDecrement
DeviceIoControl
GlobalAlloc
GlobalFree
GetDiskFreeSpaceExW
HeapFree
DecodePointer
EncodePointer
TranslateMessage
KillTimer
UnregisterClassW
PostQuitMessage
GetMessageW
SetTimer
RegisterClassExW
MsgWaitForMultipleObjectsEx
SetWindowLongW
PeekMessageW
GetWindowLongW
CreateWindowExW
DefWindowProcW
DispatchMessageW
EnumDisplayDevicesW
EnumDisplaySettingsW
GetSystemMetrics
EnumDisplaySettingsExW
DestroyWindow
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
RegSetValueExW
RegDeleteValueW
ReportEventW
DeregisterEventSource
RegQueryInfoKeyW
RegEnumKeyExW
CryptHashData
CryptDestroyHash
SetEntriesInAclW
SetSecurityDescriptorDacl
ConvertStringSidToSidW
InitializeSecurityDescriptor
RegCreateKeyExW
RegEnumValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegisterEventSourceW
CryptCreateHash
SHFileOperationW
CommandLineToArgvW
SHGetFolderPathW
PathCombineW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiSetDeviceInstallParamsW
SetupDiDestroyDriverInfoList
SetupDiGetDriverInstallParamsW
SetupDiEnumDriverInfoW
SetupDiGetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
GetFileVersionInfoA
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeA
WinHttpConnect
WinHttpSendRequest
WinHttpSetOption
WinHttpCrackUrl
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpCloseHandle
CoCreateInstance
CoInitialize
CoUninitialize
CoCreateGuid
StringFromGUID2
CoSetProxyBlanket
SysFreeString
SafeArrayGetElement
VariantChangeType
VariantCopy
SafeArrayGetLBound
SysAllocString
VariantInit
VariantClear
SysStringLen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ