Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-08_f17859f1f8621da86d5b0b3d62f026e4_mafia.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-08-08_f17859f1f8621da86d5b0b3d62f026e4_mafia.exe
Resource
win10v2004-20240802-en
Target
2024-08-08_f17859f1f8621da86d5b0b3d62f026e4_mafia
Size
224KB
MD5
f17859f1f8621da86d5b0b3d62f026e4
SHA1
e0857f0c4e8e332be6455a6ea96b51bce0c74871
SHA256
c28c1f0b614f9b3ab50df590d7d262b6fc7db8bda1233b7a34ae1f6e82945023
SHA512
5134438d11808b936b6ccc8ddcf791d97494d7acf0985699faf3198c643536da7341ce6a59898e59051b3ce2ed97e8965f414f21d1b91605b6392dda0c2f2ce3
SSDEEP
6144:CbJLZSoGXENkgE0A/N1ewm4qUjWNqqDLuwFH8:8JLHGXENNW/N1iLU6wqnuec
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
WideCharToMultiByte
TlsFree
CloseHandle
Sleep
GetLastError
TlsAlloc
SetUnhandledExceptionFilter
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
SetEnvironmentVariableA
SizeofResource
SetEndOfFile
WriteConsoleW
SetStdHandle
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetTimeZoneInformation
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetFileType
SetHandleCount
CompareStringW
LeaveCriticalSection
GetFileSize
SetFilePointer
GetModuleHandleW
WriteFile
ReadFile
CreateFileW
GetProcAddress
DeleteFileW
GetVolumeInformationW
GetStringTypeW
InterlockedCompareExchange
InitializeCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LocalFree
FormatMessageA
RaiseException
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
GetCommandLineA
HeapSetInformation
GetTimeFormatA
GetDateFormatA
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
LoadLibraryW
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
InterlockedExchange
?create_filter@in_direct_filter@proxy@af@@SA?AV?$shared_ptr@Vin_direct_filter@proxy@af@@@boost@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?add_in_filter@server@proxy@af@@QAEXV?$shared_ptr@Vbasic_in_filter@proxy@af@@@boost@@@Z
?run@server@proxy@af@@QAEXH@Z
??0server@proxy@af@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@II0AAV?$vector@HV?$allocator@H@std@@@4@_N0H000021@Z
?add_header@http_client@proxy@af@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?set_follow_redirect@http_client@proxy@af@@QAEX_N@Z
?set_proxy@http_client@proxy@af@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?upload@http_client@proxy@af@@QAEHABV?$af_string_temp@V?$af_string_impl_win_temp@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?download@http_client@proxy@af@@QAEHABV?$af_string_temp@V?$af_string_impl_win_temp@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@_N@Z
?is_running@http_client@proxy@af@@QAE_NXZ
?get_error_code@http_client@proxy@af@@QAEHXZ
?result@http_client@proxy@af@@QAEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?get_error_msg@http_client@proxy@af@@QAEPBDXZ
??1http_client@proxy@af@@QAE@XZ
??0logger@proxy@af@@QAE@PBDW4log_level_enum@012@_N@Z
??0http_client@proxy@af@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I_N0I@Z
gethostname
WSACleanup
WSAStartup
PathFileExistsW
PathBuildRootW
PathAddBackslashW
GetAdaptersInfo
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
??0filter@proxy@af@@QAE@XZ
??1filter@proxy@af@@UAE@XZ
??_Flogger@proxy@af@@QAEXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ