Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-12_39308bdae1bcb97b0c71721cf7954525_mafia.exe
Resource
win7-20241010-en
Target
2025-01-12_39308bdae1bcb97b0c71721cf7954525_mafia
Size
374KB
MD5
39308bdae1bcb97b0c71721cf7954525
SHA1
cfd9fbc1ad512ac691d8b089b1c57680f5f9e06e
SHA256
e70d40bb6262aac50e0e8a7c54c8fb5b0c8ee6b1f78b4456092884b6973a7e60
SHA512
28f100b17c0361d3d17754a4b2ba8c025e158f155065e3dcf2966e90741400d1a40d061fa3514734477aea6d90ca837b31f19fa595d28095d4a8e549a986c0c3
SSDEEP
6144:rA/KDLXQ7rjDb8zPYbU2wbKZhVLgneQZGirnZq/BKo9CUE7ju1x2pClJ:0/6CXUzAbUcZjvQZprnQ/BMujoClJ
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\xejuhefacocig-mujelowefumicinuxol\xayiliyakuhifas.pdb
GetModuleHandleW
GetSystemDirectoryA
ReadConsoleA
WriteProfileSectionA
GetProcAddress
LoadLibraryA
GetTempPathW
IsProcessorFeaturePresent
LocalAlloc
WaitForMultipleObjects
GetTapeParameters
EnumTimeFormatsA
SetComputerNameA
GetFileAttributesExA
SetVolumeMountPointA
SetConsoleCursorInfo
GetConsoleAliasExesLengthW
FindClose
GetTickCount
GetLongPathNameW
GetLastError
HeapFree
HeapAlloc
RtlUnwind
RaiseException
GetCommandLineW
HeapSetInformation
GetStartupInfoW
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
EncodePointer
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
HeapDestroy
ExitProcess
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
HeapSize
CreateFileW
CloseHandle
GetStringTypeW
HeapReAlloc
LCMapStringW
ReadFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreatePrivateObjectSecurity
ReportEventA
InitiateSystemShutdownA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ