Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-29_d62b9c36797da734d233b75dd7650c7a_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-29_d62b9c36797da734d233b75dd7650c7a_mafia.exe
Resource
win10v2004-20240508-en
Target
2024-06-29_d62b9c36797da734d233b75dd7650c7a_mafia
Size
906KB
MD5
d62b9c36797da734d233b75dd7650c7a
SHA1
b0298e5039675ec8203bb1ed5a6c99a01317bd2c
SHA256
ccc98f7f739f1648862357aa39e9e58732d57a660e9d1459ce631e0006a2b475
SHA512
fd541d24b67089224893730b9ccd616eda2296ec4f76800373f76875c7ee3afcc64c4db64b0ea62f24f72e54b3b79aad69486317a7a8e178e2c426f88f9a1165
SSDEEP
12288:MUHzKufgk0IpzpXxsPsM+80/9OCOaVLR7g1xGkgBaFSkYu8DU0OYhLu0O49gY4B:HHVfSIpzpBsGACO0LRs1kk6i6uKVOu4B
Processes:
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Src\SogouDownLoad\Src\MiniDownLoad\Release\MiniDownLoad.pdb
GetCommandLineW
GetTempPathW
CompareStringW
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
CloseHandle
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateThread
ExitThread
lstrlenW
CreateFileW
SizeofResource
WriteFile
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadResource
FindResourceW
GetCurrentDirectoryW
GetEnvironmentVariableW
CreateFileA
lstrcmpW
GetPrivateProfileStringW
GetSystemDirectoryW
DeviceIoControl
DeleteFileW
FindClose
ReadFile
CopyFileW
FindFirstFileW
GetFileSize
OutputDebugStringA
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapSetInformation
GetStartupInfoW
HeapFree
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateDirectoryW
CreateProcessW
WaitForSingleObject
DebugBreak
OutputDebugStringW
lstrlenA
InitializeCriticalSection
CreateEventW
CreateSemaphoreW
ResetEvent
ReleaseSemaphore
SetEvent
WaitForMultipleObjects
GetVersionExW
lstrcpynW
lstrcpyW
CreateMutexW
OpenMutexW
ReleaseMutex
SetEnvironmentVariableA
wvsprintfW
LoadStringW
wsprintfW
CharNextW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
CoGetClassObject
CoCreateGuid
CoInitialize
CoUninitialize
PathFileExistsW
PathIsDirectoryW
SHSetValueW
SHGetValueW
StrCpyW
PathAppendW
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCrackUrlW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetModuleBaseNameW
NetApiBufferFree
NetWkstaTransportEnum
Netbios
RegCloseKey
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ