Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_b16e28f1e1663e38c29d02b9383532b8_mafia.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-24_b16e28f1e1663e38c29d02b9383532b8_mafia.exe
Resource
win10v2004-20240226-en
Target
2024-04-24_b16e28f1e1663e38c29d02b9383532b8_mafia
Size
500KB
MD5
b16e28f1e1663e38c29d02b9383532b8
SHA1
944915c030ca7892517490d6dbb5dbe89b910cd0
SHA256
39a024238794aea66ee477a7b4aabbf0a9aeb22ca75acdd9c7c33e74f710ab72
SHA512
107d3bf945bce804fa17721d7d19bd50fabc826d680a4627969a5512602471814fc6201e638495051dd455c68827a4264541355c011b3f38b360b5e89fd7f33d
SSDEEP
12288:scuA7U+EljXJBh+tli2vklUHM13sfoBjW4i:scuA7U+85BCl/cSHMlsujRi
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateDirectoryW
WaitForSingleObject
WriteFile
SizeofResource
Beep
CreateFileW
GetTempPathW
GetLastError
LockResource
CloseHandle
FindFirstFileW
GetCurrentProcess
GetModuleHandleW
OpenProcess
GetVersionExW
GetFileAttributesW
GetModuleFileNameW
LoadResource
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFilePointer
SystemTimeToFileTime
WideCharToMultiByte
ReadFile
MultiByteToWideChar
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
FindResourceW
GetProcAddress
GetFileSize
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
GetLocaleInfoW
HeapSize
FlushFileBuffers
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCPInfo
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
GetConsoleCP
GetConsoleMode
GetProcessHeap
wsprintfW
MessageBoxW
RegOpenKeyExW
RegQueryValueExW
ShellExecuteExW
GetModuleBaseNameW
EnumProcesses
EnumProcessModules
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
WinHttpConnect
WinHttpOpenRequest
WinHttpOpen
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpSendRequest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ