Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-05_6d5c3cfdea1b9e00ba65368fcd4dde1d_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-05_6d5c3cfdea1b9e00ba65368fcd4dde1d_mafia.exe
Resource
win10v2004-20240419-en
Target
2024-05-05_6d5c3cfdea1b9e00ba65368fcd4dde1d_mafia
Size
335KB
MD5
6d5c3cfdea1b9e00ba65368fcd4dde1d
SHA1
d6971bdd2414765be2ddb3412ce095078ee8fbbc
SHA256
0a6d27f20239754eb36bf03463cd33ccaf004a312b6a006e1ffc8fca65b7597e
SHA512
7cbcd02e299d567f8a42d086f07665980813941ae3695271dc5d8fa3066f761b6aff788544b8f7a25a57bb472535560e55acc9f0bc0f7214a82afc3d2754fc9a
SSDEEP
6144:JG6z8OZxHnJbm60SyIB+vHg6t/U5zydydTbfNRqqDLu2OM5cztN9XI4:86hnHl30fIBWA6tOzydyfNsqnuP4czvp
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalFree
Sleep
CloseHandle
WaitForSingleObject
GetSystemInfo
GetProcAddress
HeapFree
GetProcessHeap
TlsFree
HeapAlloc
TlsAlloc
CreateEventA
SetEvent
GetTickCount
CreateProcessA
SetUnhandledExceptionFilter
FormatMessageA
GetLastError
GetSystemTimeAsFileTime
ExitThread
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
ResumeThread
ResetEvent
OpenEventA
ReleaseSemaphore
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
WriteConsoleW
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
InterlockedIncrement
InterlockedExchange
FindResourceExW
FindResourceW
LoadResource
SizeofResource
CreateFileW
LockResource
DeleteFileW
GetFileSize
SetFilePointer
GetModuleHandleW
WriteFile
ReadFile
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
SystemTimeToFileTime
GetVolumeInformationW
GetStringTypeW
InterlockedCompareExchange
InitializeCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
ExitProcess
GetCommandLineA
HeapSetInformation
GetTimeFormatA
GetDateFormatA
HeapReAlloc
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LoadLibraryW
HeapCreate
HeapDestroy
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetModuleFileNameA
CreateThread
SetSecurityDescriptorDacl
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
InitializeSecurityDescriptor
??0server@proxy@af@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@II0ABV?$vector@HV?$allocator@H@std@@@4@_N0H00002102II22@Z
?create_filter@in_direct_filter@proxy@af@@SA?AV?$shared_ptr@Vin_direct_filter@proxy@af@@@boost@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?set_proxy_list_idle_grow@server@proxy@af@@QAEXH@Z
?run@server@proxy@af@@QAEXH@Z
?obfuscate@header@proxy@af@@SAXPAEI@Z
??0http_client@proxy@af@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I_N0I@Z
?add_header@http_client@proxy@af@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?set_follow_redirect@http_client@proxy@af@@QAEX_N@Z
?set_proxy@http_client@proxy@af@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?upload@http_client@proxy@af@@QAEHABVaf_stringW@@_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?download@http_client@proxy@af@@QAEHABVaf_stringW@@_N@Z
?is_running@http_client@proxy@af@@QAE_NXZ
?get_error_code@http_client@proxy@af@@QAEHXZ
?result@http_client@proxy@af@@QAEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?get_error_msg@http_client@proxy@af@@QAEPBDXZ
??1http_client@proxy@af@@QAE@XZ
??0logger@proxy@af@@QAE@PBDW4log_level_enum@012@_N@Z
?add_in_filter@server@proxy@af@@QAEXV?$shared_ptr@Vbasic_in_filter@proxy@af@@@boost@@H@Z
WSACleanup
WSAStartup
gethostname
PathFileExistsW
PathBuildRootW
PathAddBackslashW
GetAdaptersInfo
??0filter@proxy@af@@QAE@XZ
??1filter@proxy@af@@UAE@XZ
??_Flogger@proxy@af@@QAEXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ