Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-06_91113aafb6af707efd81d5406d545a10_hijackloader_mafia.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-06_91113aafb6af707efd81d5406d545a10_hijackloader_mafia.exe
Resource
win10v2004-20240802-en
Target
2024-09-06_91113aafb6af707efd81d5406d545a10_hijackloader_mafia
Size
350KB
MD5
91113aafb6af707efd81d5406d545a10
SHA1
55e944b14b91fb4f66b1d438926b4202e13aad1e
SHA256
47fc944f7f2fb72c9cc85ca37c62bdc4c69970c5e01a62806598ed84afe60f43
SHA512
0692655cdc38ccceac1f6fd4e46da9f5c27bc18af7884ac1f8091afa3bff53aca031ef034d6811f3abf65ce45639e734902472f474db58a328d190423fe5fcc0
SSDEEP
6144:uoIsn3Gv0ozEnfZbo1KMKqeERg0bhAOkVIudKUOrReD:uoIsnW0ozwBbosMKGRgYhstONeD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\remote\workspace\Koscom_release\prj\windows\SKCertServiceForWindows\Release_koscom\SetupPKG.pdb
CopyFileW
GetExitCodeProcess
SetLastError
GetProcAddress
FindClose
Process32FirstW
Process32NextW
FindNextFileW
CreateToolhelp32Snapshot
DuplicateHandle
MoveFileExW
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
LoadLibraryW
WriteConsoleW
SetStdHandle
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
GetSystemDirectoryW
CreateRemoteThread
OpenProcess
GetModuleHandleW
GetCurrentProcess
FindFirstFileW
MulDiv
GetSystemDefaultLangID
GetCurrentProcessId
CloseHandle
CreateFileW
WriteFile
WaitNamedPipeW
GetVersionExA
ReleaseMutex
WaitForSingleObject
GetVersionExW
Sleep
DeleteFileW
GetLastError
MultiByteToWideChar
SetEndOfFile
WideCharToMultiByte
GetTimeZoneInformation
HeapSize
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
SetFileAttributesW
CreateDirectoryW
RemoveDirectoryW
GetCPInfo
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetFilePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
ReadFile
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
ExitProcess
GetModuleFileNameW
FlushFileBuffers
GetSystemMetrics
SetDlgItemTextW
DestroyWindow
EndDialog
MessageBoxW
GetMessageW
TranslateMessage
DispatchMessageW
MoveWindow
GetDC
ReleaseDC
GetDlgItem
CreateDialogParamW
SendMessageW
SetWindowTextW
GetWindowRect
PostQuitMessage
DialogBoxParamW
GetDeviceCaps
CreateFontIndirectW
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
GetAce
LookupPrivilegeValueW
LookupAccountNameW
GetFileSecurityW
RegDeleteKeyW
RegQueryValueExW
RegQueryValueExA
EqualSid
RegCreateKeyExW
GetAclInformation
OpenProcessToken
GetSecurityDescriptorDacl
ShellExecuteW
SHGetSpecialFolderPathW
SHGetFolderPathW
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ