Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_435a858d52a8633c3ed10acc21737508_backswap_karagany_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-29_435a858d52a8633c3ed10acc21737508_backswap_karagany_mafia.exe
Resource
win10v2004-20240419-en
Target
2024-04-29_435a858d52a8633c3ed10acc21737508_backswap_karagany_mafia
Size
12.9MB
MD5
435a858d52a8633c3ed10acc21737508
SHA1
6ad4a73ea796db52b79d61b192232daf744cab59
SHA256
cb63a484799b725d48bfe92013117e712ed1662b5d932ae0af65683912b93637
SHA512
5c793dd966bf9e557c61c9a04b984c6c3a840bbd6ce3b91815fef5f6537e7c479a30cc4074949a8bf33137c398f946e277bd7e28591e809a5633163d38e86647
SSDEEP
196608:ZvDllSGBfWbmK+z+yzPpCLcmKa/r23/zk7PV:ZvDllzW6K+z+yzPpeHKBzkh
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\jdk7_32P\jdk7\build\windows-i586\tmp\sun\sun.rmi\java-rmi\obj\java-rmi.pdb
JLI_Launch
_unlock
__dllonexit
_lock
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_onexit
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ