Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_129597913a5f61a10373acf55d5ff3c3_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_129597913a5f61a10373acf55d5ff3c3_mafia.exe
Resource
win10v2004-20240508-en
Target
2024-06-01_129597913a5f61a10373acf55d5ff3c3_mafia
Size
3.0MB
MD5
129597913a5f61a10373acf55d5ff3c3
SHA1
a8a44bf6b415d3b55d04560ee31cc915dd51a550
SHA256
fae8b5dd020fe2a54daf247d6f0d0fa752978fc5a41d73379b1b4c17f6d00fdf
SHA512
14df3de26bc3101f7aed2a6012612fd54ee6f63591c1aed29014a88026a3838cf9cb1b73278c801dc00f6439b7754a7ce46dfd208da49e9ee2c9e5c23f4798b6
SSDEEP
49152:G3aBV23zWKwE3rcNwfiWVzx1o499msUn9Jg:G8V48EYN61oQU8
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\bodosoft\project\facilis\bys\stage\build\bysl\bin\RelWithDebInfo\bysl.pdb
GetModuleHandleA
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObjectEx
GetSystemTimeAsFileTime
GetSystemDefaultUILanguage
WaitForSingleObject
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
OpenProcess
Process32Next
Module32First
Process32First
CreateToolhelp32Snapshot
CreateProcessA
DuplicateHandle
GetCurrentThreadId
GetProcAddress
InterlockedExchangeAdd
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
HeapFree
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
HeapReAlloc
HeapQueryInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetTimeZoneInformation
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetTickCount
SetEvent
CloseHandle
CreateEventA
HeapAlloc
InitializeCriticalSection
GetProcessHeap
GetConsoleCP
GetFileType
TlsAlloc
GetLastError
PostQueuedCompletionStatus
TlsFree
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
LoadLibraryW
DeleteCriticalSection
SetHandleCount
HeapDestroy
HeapCreate
FatalAppExitA
ExitProcess
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
GetStdHandle
WriteFile
IsProcessorFeaturePresent
CompareStringW
GetCurrentThread
GetModuleHandleW
GetCPInfo
CreateThread
ExitThread
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetDateFormatA
GetTimeFormatA
SetConsoleCtrlHandler
RtlUnwind
RaiseException
GetLocaleInfoW
DecodePointer
EncodePointer
GetStringTypeW
VirtualFree
InitializeCriticalSectionAndSpinCount
SleepEx
CreateIoCompletionPort
VerifyVersionInfoA
VerSetConditionMask
InterlockedCompareExchange
TlsGetValue
TlsSetValue
QueueUserAPC
TerminateThread
WaitForMultipleObjects
SetWaitableTimer
Sleep
SetFileTime
CreateFileA
GetFileAttributesExA
GetQueuedCompletionStatus
SetLastError
WaitForMultipleObjectsEx
QueryPerformanceFrequency
QueryPerformanceCounter
SetEndOfFile
SetFilePointerEx
CreateFileW
FindClose
RemoveDirectoryW
DeleteFileW
DeviceIoControl
GetFullPathNameW
FindFirstFileW
FindNextFileW
GetFileAttributesW
CreateDirectoryExW
CopyFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
GetFileTime
SetFileAttributesW
MoveFileExW
GetDiskFreeSpaceExW
CreateDirectoryW
GetTempPathW
MultiByteToWideChar
AreFileApisANSI
WideCharToMultiByte
GetUserDefaultLCID
GetStringTypeExA
GetStringTypeExW
FreeLibrary
LCMapStringA
LCMapStringW
LoadLibraryA
LocalFree
FormatMessageA
GetSystemInfo
GetCurrentProcessId
OpenEventA
ResetEvent
ResumeThread
GetLogicalProcessorInformation
SystemTimeToFileTime
CreateWaitableTimerA
VirtualAlloc
InterlockedExchange
LoadStringW
LoadStringA
CreateWindowExA
RegisterClassA
LoadCursorA
GetSysColorBrush
DefWindowProcA
SendMessageA
SetPropA
GetPropA
GetSystemMetrics
DispatchMessageA
GetMessageA
SendNotifyMessageA
PostQuitMessage
SetWindowTextA
ReleaseDC
GetDC
EnableWindow
MessageBoxA
SetWindowPos
TranslateMessage
SetBkColor
CreateSolidBrush
CreateCompatibleBitmap
SetDIBits
CreateFontA
SetTextColor
ShellExecuteExA
CryptAcquireContextW
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CryptReleaseContext
CryptGenRandom
InitCommonControlsEx
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpGetProxyForUrl
WSAStartup
WSACleanup
__WSAFDIsSet
WSASetLastError
freeaddrinfo
ntohl
htonl
accept
WSAGetLastError
bind
connect
setsockopt
getsockopt
getsockname
ioctlsocket
shutdown
listen
WSARecv
WSASend
WSASocketW
select
WSAAddressToStringA
getaddrinfo
WSAIoctl
closesocket
gethostname
??0?$enable_shared_from_this@VIBase@core@bys@@@boost@@IAE@ABV01@@Z
??0?$enable_shared_from_this@VIBase@core@bys@@@boost@@IAE@XZ
??0IBase@core@bys@@QAE@XZ
??0ICollector@garbage@core@bys@@QAE@XZ
??0IHelper@connector@network@bys@@QAE@XZ
??0IInternet@configuration@coreos@bys@@QAE@XZ
??0IPlugin@plugin@core@bys@@QAE@XZ
??0Logger@logger@core@bys@@AAE@XZ
??0Logger@logger@core@bys@@QAE@ABV0123@@Z
??1?$enable_shared_from_this@VIBase@core@bys@@@boost@@IAE@XZ
??1IBase@core@bys@@UAE@XZ
??1ICollector@garbage@core@bys@@UAE@XZ
??1IHelper@connector@network@bys@@UAE@XZ
??1IInternet@configuration@coreos@bys@@UAE@XZ
??1IPlugin@plugin@core@bys@@UAE@XZ
??1Logger@logger@core@bys@@EAE@XZ
??4?$SingletonHolder@VConfiguration@connector@network@bys@@UCreateUsingNew@Loki@@UNoDestroy@6@VSingleThreaded@6@VMutex@6@@Loki@@QAEAAV01@ABV01@@Z
??4?$SingletonHolder@VFactoryBase@core@bys@@UCreateUsingNew@Loki@@UNoDestroy@5@VSingleThreaded@5@VMutex@5@@Loki@@QAEAAV01@ABV01@@Z
??4?$enable_shared_from_this@VIBase@core@bys@@@boost@@IAEAAV01@ABV01@@Z
??4ConfigurationSingleton@connector@network@bys@@QAEAAV0123@ABV0123@@Z
??4Factory@core@bys@@QAEAAV012@ABV012@@Z
??_7IBase@core@bys@@6B@
??_7ICollector@garbage@core@bys@@6B0123@@
??_7ICollector@garbage@core@bys@@6BIBase@23@@
??_7IHelper@connector@network@bys@@6B0123@@
??_7IHelper@connector@network@bys@@6BIBase@core@3@@
??_7IInternet@configuration@coreos@bys@@6B0123@@
??_7IInternet@configuration@coreos@bys@@6BIBase@core@3@@
??_7IPlugin@plugin@core@bys@@6B0123@@
??_7IPlugin@plugin@core@bys@@6BIBase@23@@
??_7Logger@logger@core@bys@@6B@
??_8IBase@core@bys@@7B@
??_8ICollector@garbage@core@bys@@7B0123@@
??_8ICollector@garbage@core@bys@@7BIBase@23@@
??_8IHelper@connector@network@bys@@7B0123@@
??_8IHelper@connector@network@bys@@7BIBase@core@3@@
??_8IInternet@configuration@coreos@bys@@7B0123@@
??_8IInternet@configuration@coreos@bys@@7BIBase@core@3@@
??_8IPlugin@plugin@core@bys@@7B0123@@
??_8IPlugin@plugin@core@bys@@7BIBase@23@@
??_B?1??getLoggerInstance@Logger@logger@core@bys@@CAPAV1234@XZ@51
??_DIBase@core@bys@@QAEXXZ
??_DICollector@garbage@core@bys@@QAEXXZ
??_DIHelper@connector@network@bys@@QAEXXZ
??_DIInternet@configuration@coreos@bys@@QAEXXZ
??_DIPlugin@plugin@core@bys@@QAEXXZ
?DestroySingleton@?$SingletonHolder@VConfiguration@connector@network@bys@@UCreateUsingNew@Loki@@UNoDestroy@6@VSingleThreaded@6@VMutex@6@@Loki@@CAXXZ
?DestroySingleton@?$SingletonHolder@VFactoryBase@core@bys@@UCreateUsingNew@Loki@@UNoDestroy@5@VSingleThreaded@5@VMutex@5@@Loki@@CAXXZ
?Instance@?$SingletonHolder@VConfiguration@connector@network@bys@@UCreateUsingNew@Loki@@UNoDestroy@6@VSingleThreaded@6@VMutex@6@@Loki@@SAAAVConfiguration@connector@network@bys@@XZ
?Instance@?$SingletonHolder@VFactoryBase@core@bys@@UCreateUsingNew@Loki@@UNoDestroy@5@VSingleThreaded@5@VMutex@5@@Loki@@SAAAVFactoryBase@core@bys@@XZ
?MakeInstance@?$SingletonHolder@VConfiguration@connector@network@bys@@UCreateUsingNew@Loki@@UNoDestroy@6@VSingleThreaded@6@VMutex@6@@Loki@@CAXXZ
?MakeInstance@?$SingletonHolder@VFactoryBase@core@bys@@UCreateUsingNew@Loki@@UNoDestroy@5@VSingleThreaded@5@VMutex@5@@Loki@@CAXXZ
?addConnection@IBase@core@bys@@QAEXABV?$shared_ptr@Vscoped_connection@signals2@boost@@@boost@@@Z
?addExternalReference@IBase@core@bys@@QAEXV?$shared_ptr@X@boost@@@Z
?close@Logger@logger@core@bys@@SAXXZ
?destroyed_@?$SingletonHolder@VConfiguration@connector@network@bys@@UCreateUsingNew@Loki@@UNoDestroy@6@VSingleThreaded@6@VMutex@6@@Loki@@0_NA
?destroyed_@?$SingletonHolder@VFactoryBase@core@bys@@UCreateUsingNew@Loki@@UNoDestroy@5@VSingleThreaded@5@VMutex@5@@Loki@@0_NA
?gDevMode@misc@core@bys@@3_NA
?getFullClassName@IBase@core@bys@@UBEPBDXZ
?getFullClassName@ICollector@garbage@core@bys@@UBEPBDXZ
?getFullClassName@IHelper@connector@network@bys@@UBEPBDXZ
?getFullClassName@IInternet@configuration@coreos@bys@@UBEPBDXZ
?getFullClassName@IPlugin@plugin@core@bys@@UBEPBDXZ
?getIdentity@IBase@core@bys@@SAPBDXZ
?getIdentity@ICollector@garbage@core@bys@@SAPBDXZ
?getIdentity@IHelper@connector@network@bys@@SAPBDXZ
?getIdentity@IInternet@configuration@coreos@bys@@SAPBDXZ
?getIdentity@IPlugin@plugin@core@bys@@SAPBDXZ
?getIsMemoryDebugEnabled@IBase@core@bys@@CA_NXZ
?getLogFile@Logger@logger@core@bys@@SA?AVpath@filesystem@boost@@XZ
?getLogFolder@Logger@logger@core@bys@@SA?AVpath@filesystem@boost@@XZ
?getLoggerInstance@Logger@logger@core@bys@@CAPAV1234@XZ
?getLowerLevelLogger@Logger@logger@core@bys@@SAAAV?$severity_logger_mt@W4severity_level@logger@core@bys@@@sources@v2s_mt_nt5@log@boost@@XZ
?getSeverity@Logger@logger@core@bys@@SA?AW4severity_level@234@XZ
?getSeverityActive@Logger@logger@core@bys@@SA_NW4severity_level@234@@Z
?init@Logger@logger@core@bys@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?init@Logger@logger@core@bys@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?initialize@Logger@logger@core@bys@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?isPreparedForCollection@IBase@core@bys@@UBE_NXZ
?isReadyForCollection@IBase@core@bys@@UAE_NXZ
?logObjectConstruction@IBase@core@bys@@AAEXXZ
?logObjectDestruction@IBase@core@bys@@AAEXXZ
?pInstance_@?$SingletonHolder@VConfiguration@connector@network@bys@@UCreateUsingNew@Loki@@UNoDestroy@6@VSingleThreaded@6@VMutex@6@@Loki@@0PAVConfiguration@connector@network@bys@@A
?pInstance_@?$SingletonHolder@VFactoryBase@core@bys@@UCreateUsingNew@Loki@@UNoDestroy@5@VSingleThreaded@5@VMutex@5@@Loki@@0PAVFactoryBase@core@bys@@A
?postFactoryInit@IBase@core@bys@@UAEXXZ
?prepareForCollection@IBase@core@bys@@UAEXXZ
?processMemoryDebug@IBase@core@bys@@QAEXXZ
?sFirstPass@?1??getIsMemoryDebugEnabled@IBase@core@bys@@CA_NXZ@4_NA
?sMemoryDebugEnabled@?1??getIsMemoryDebugEnabled@IBase@core@bys@@CA_NXZ@4_NA
?setBasePath@Logger@logger@core@bys@@SAXABVpath@filesystem@boost@@@Z
?setSeverity@Logger@logger@core@bys@@SAXW4severity_level@234@@Z
?shared_from_this@?$enable_shared_from_this@VIBase@core@bys@@@boost@@QAE?AV?$shared_ptr@VIBase@core@bys@@@2@XZ
?shared_from_this@?$enable_shared_from_this@VIBase@core@bys@@@boost@@QBE?AV?$shared_ptr@$$CBVIBase@core@bys@@@2@XZ
?wLogger@?1??getLoggerInstance@Logger@logger@core@bys@@CAPAV2345@XZ@4PAV2345@A
?wMutex@?1??getLoggerInstance@Logger@logger@core@bys@@CAPAV2345@XZ@4Vmutex@boost@@A
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ