Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-05_36e910c6e230456c98672821d88d3f9f_mafia.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-07-05_36e910c6e230456c98672821d88d3f9f_mafia.exe
Resource
win10v2004-20240704-en
Target
2024-07-05_36e910c6e230456c98672821d88d3f9f_mafia
Size
906KB
MD5
36e910c6e230456c98672821d88d3f9f
SHA1
6f4ed920ed618ce9df5e84823c7547ff0bb30e9f
SHA256
3314851b0925f24ccf7b4bc12d1ef3fa7c308b9a5136727118f1b58474bd134c
SHA512
824507b1f98103101372bc12ce37d66d7ed8918e76b286905bbcd673a17b3d2fb21a9ad250661406996bbc5acae4d9ff5b3f17e0f4f5076c1d779787658ab7f1
SSDEEP
12288:QUHzKufgk0IpzpXxsPsM+80/9OCOaVLR7g1xGkgBaFSkYu8DU0OYhLu0O49gY4B:THVfSIpzpBsGACO0LRs1kk6i6uKVOu4B
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Src\SogouDownLoad\Src\MiniDownLoad\Release\MiniDownLoad.pdb
GetCommandLineW
GetTempPathW
CompareStringW
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
CloseHandle
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateThread
ExitThread
lstrlenW
CreateFileW
SizeofResource
WriteFile
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadResource
FindResourceW
GetCurrentDirectoryW
GetEnvironmentVariableW
CreateFileA
lstrcmpW
GetPrivateProfileStringW
GetSystemDirectoryW
DeviceIoControl
DeleteFileW
FindClose
ReadFile
CopyFileW
FindFirstFileW
GetFileSize
OutputDebugStringA
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapSetInformation
GetStartupInfoW
HeapFree
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateDirectoryW
CreateProcessW
WaitForSingleObject
DebugBreak
OutputDebugStringW
lstrlenA
InitializeCriticalSection
CreateEventW
CreateSemaphoreW
ResetEvent
ReleaseSemaphore
SetEvent
WaitForMultipleObjects
GetVersionExW
lstrcpynW
lstrcpyW
CreateMutexW
OpenMutexW
ReleaseMutex
SetEnvironmentVariableA
wvsprintfW
LoadStringW
wsprintfW
CharNextW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
CoGetClassObject
CoCreateGuid
CoInitialize
CoUninitialize
PathFileExistsW
PathIsDirectoryW
SHSetValueW
SHGetValueW
StrCpyW
PathAppendW
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCrackUrlW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetModuleBaseNameW
NetApiBufferFree
NetWkstaTransportEnum
Netbios
RegCloseKey
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ