Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2024-12-19_d71cd94043786f9059de8b6df5ad717d_floxif_mafia.exe
Resource
win7-20241010-en
Target
2024-12-19_d71cd94043786f9059de8b6df5ad717d_floxif_mafia
Size
272KB
MD5
d71cd94043786f9059de8b6df5ad717d
SHA1
f0b5003536a30e1cc4cc6d2e61990f17c89a7b58
SHA256
d204a4c02d1155efb6dee2a7c251bddb95ef9fafa7ba41a98918d403b7caebbc
SHA512
d9ed9c489c7b10d46d7376ddd466189b4fdd29afa9b35e637beb8da4eb04200d3e9e50ecc60809c3fd4fc9ca56bdd0910fd9cabf30cb7197db27cb362e19d2a2
SSDEEP
6144:2yOOyIxgMgDqkTEUET+l2AbpLk0cusQvMRlkM4RD/qzMfUD:j3xkT1KG2qk0nMRGM4h/qofm
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\project\SogouFastInstall_SE\branch\SogouFastInstall_SE\MedalLoader\bin\Release\MedalLoader.pdb
HttpSendRequestExA
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetCrackUrlA
HttpEndRequestA
InternetWriteFile
HttpQueryInfoA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
MiniDumpWriteDump
SetFilePointer
GetStringTypeW
RtlUnwind
LocalFree
OutputDebugStringW
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CreateFileW
ReadFile
CloseHandle
GetVersionExW
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
RaiseException
SetLastError
GetCurrentProcess
FlushInstructionCache
InterlockedIncrement
InterlockedDecrement
DeleteFileW
WriteFile
TerminateProcess
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
GetConsoleCP
FindNextFileW
FindClose
GetSystemTime
SystemTimeToFileTime
RemoveDirectoryW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
CreateMutexW
InterlockedExchange
ReleaseMutex
GetModuleHandleW
GetExitCodeProcess
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
HeapSize
Sleep
GetModuleFileNameW
GetStdHandle
ExitProcess
HeapCreate
GetProcAddress
GetFileType
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetCPInfo
LoadLibraryW
SetStdHandle
WriteConsoleW
FlushFileBuffers
FindFirstFileW
GetStartupInfoW
HeapSetInformation
GetCommandLineW
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
ResumeThread
ExitThread
DecodePointer
EncodePointer
HeapReAlloc
InterlockedCompareExchange
InterlockedPushEntrySList
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnregisterClassA
KillTimer
PostQuitMessage
PostMessageW
LoadImageW
FindWindowW
DispatchMessageW
SendMessageW
CallWindowProcW
GetWindowLongW
SetWindowLongW
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
DestroyWindow
SetTimer
DefWindowProcW
PostThreadMessageW
GetMessageW
PeekMessageW
TranslateMessage
CryptSetKeyParam
CryptGetKeyParam
CryptReleaseContext
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptAcquireContextW
Shell_NotifyIconW
CommandLineToArgvW
ShellExecuteExW
ord165
CoCreateInstance
CoInitialize
CLSIDFromProgID
SysFreeString
SysAllocStringByteLen
PathFileExistsW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ