Static task
static1
Behavioral task
behavioral1
Sample
2024-01-06_663571102698c132733da63f31c700d7_karagany_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-06_663571102698c132733da63f31c700d7_karagany_mafia.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-06_663571102698c132733da63f31c700d7_karagany_mafia
-
Size
265KB
-
MD5
663571102698c132733da63f31c700d7
-
SHA1
bd500b63185de3c3411af213f439d2049277e52a
-
SHA256
4e7b1d0d4b304c78c8cb268a1d2e4ef8b9767c588b4679f26ba846fa59784866
-
SHA512
c7633b4fdaac4145917239a835a295976892d3726e1a2d334aeb7f1ef77a2a0b1a1310c4fe286d9712cd9821cdfefd3fe787308af4b902acf7bb24ad5293ad93
-
SSDEEP
3072:Yv5tt9cXgoEJk/N77w1ixVJgLzhUkNp2fAhz1WLNoXE1e3GcCFK/ksMRRpwzvjDo:YvSgnk/NgSJqzhUU2fa1WKXIOTzjELEG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-06_663571102698c132733da63f31c700d7_karagany_mafia
Files
-
2024-01-06_663571102698c132733da63f31c700d7_karagany_mafia.exe windows:5 windows x86 arch:x86
8789b700fb185b521d8c4230c8ca90ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
FindActCtxSectionStringW
SetVolumeMountPointA
GetProcAddress
LoadLibraryW
GetQueuedCompletionStatus
GlobalDeleteAtom
GetCPInfoExA
lstrlenA
WriteConsoleW
ReadFile
GetProcessHeap
SetEndOfFile
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
RtlUnwind
RaiseException
GetLastError
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
LCMapStringW
GetCPInfo
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
CloseHandle
CreateFileA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
CreateFileW
user32
GetPropW
ole32
CoGetCurrentProcess
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ