Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_61baabd3480b2985f9df8d77a4a5b7f8_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-29_61baabd3480b2985f9df8d77a4a5b7f8_mafia.exe
Resource
win10v2004-20240426-en
Target
2024-04-29_61baabd3480b2985f9df8d77a4a5b7f8_mafia
Size
549KB
MD5
61baabd3480b2985f9df8d77a4a5b7f8
SHA1
42e2a1ee4abc2a975732eb11ccea700f1f0fb46f
SHA256
a65c9ccabb00b7d75c54d16b09fe27dd9cdea8ec00921a423adcd2b23c9c2ff4
SHA512
611fa2eb6a4f8b4c05c6e6656ab35d9c3bf58e615438d2791983e5005fd0235e942fd1d1e62b2fe852c3a689430f3c892ae3eb3b14a00a763d2b015ba0072559
SSDEEP
12288:Z+QhIge+c1e7NR5rq2z9bZBnml/WkjtQhbYjtj:cQIiUehR5rN9FMvsitj
| resource | yara_rule |
|---|---|
| sample | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\codes\VS2010\SogouDownLoad\Src\MiniDownLoad\Release\MiniDownLoad.pdb
WriteFile
SizeofResource
CreateFileW
lstrlenW
CloseHandle
GetCommandLineW
GetTempPathW
CompareStringW
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
GetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadResource
FindResourceW
GetEnvironmentVariableW
CreateFileA
lstrlenA
lstrcmpW
GetPrivateProfileStringW
GetSystemDirectoryW
DeviceIoControl
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapSetInformation
GetStartupInfoW
HeapFree
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateDirectoryW
CreateProcessW
WaitForSingleObject
CreateMutexW
ReleaseMutex
InitializeCriticalSection
GetVersionExW
lstrcpynW
lstrcpyW
GetFileSize
FindFirstFileW
CopyFileW
ReadFile
FindClose
DeleteFileW
SetEnvironmentVariableA
LoadStringW
SendMessageTimeoutW
FindWindowW
wsprintfW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyExW
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
PathFileExistsW
PathIsDirectoryW
PathAppendW
SHGetValueW
StrCpyW
InternetSetOptionW
InternetOpenW
InternetReadFile
InternetCloseHandle
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetQueryDataAvailable
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
NetApiBufferFree
NetWkstaTransportEnum
Netbios
CoInitialize
CoUninitialize
CoCreateGuid
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ