20240106d5db483f3745795a233030e73b1c4656karaganymafia[.]exe

General

Target
20240106d5db483f3745795a233030e73b1c4656karaganymafia.exe
Size 327KB
Sample240107-x926nsdee6
SHA256 f2e13c803603af0495f09f634c8c4d796369243a0002f263df7c108156d0841a
MD5 d5db483f3745795a233030e73b1c4656
SHA1 bae457382d70c7c7a3896a6aa65eaae97df2712a
SHA512 470ad1731013832803ce6c483027ec89c77ac99d46656b6a9b2c2d1479a2b6cfd783d6d5e6cbd727450dbb0287e0839b01de931de2b6cbea1b35beae667bfa01
SSDEEP 6144:F7VHzhC5EEKuBkFwbUDGTgtLA8n8tmiu7mxSeOnDvxDwOSa:jThCTKuBtgD3BA0hLeONDFSa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240106d5db483f3745795a233030e73b1c4656karaganymafia.exe

File Explorer

20240106d5db483f3745795a233030e73b1c4656karaganymafia.exe

.exe 327KB

20240106d5db483f3745795a233030e73b1c4656karaganymafia.exe

IMPHASH ca8e12d2853dbd2e4c4573665739699c
SHA256 f2e13c803603af0495f09f634c8c4d796369243a0002f263df7c108156d0841a
MD5 d5db483f3745795a233030e73b1c4656
SHA1 bae457382d70c7c7a3896a6aa65eaae97df2712a
SHA512 470ad1731013832803ce6c483027ec89c77ac99d46656b6a9b2c2d1479a2b6cfd783d6d5e6cbd727450dbb0287e0839b01de931de2b6cbea1b35beae667bfa01
SSDEEP 6144:F7VHzhC5EEKuBkFwbUDGTgtLA8n8tmiu7mxSeOnDvxDwOSa:jThCTKuBtgD3BA0hLeONDFSa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6867

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeW InterlockedCompareExchange WaitNamedPipeA SetLastError VirtualProtect GetThreadSelectorEntry GetProcAddress GetModuleHandleW FreeConsole GetCPInfo GetTickCount GetLastError LocalLock GlobalAlloc FindFirstFileExW BuildCommDCBAndTimeoutsA GetStringTypeExA lstrlenW EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID HeapReAlloc HeapAlloc HeapSize ConvertDefaultLocale GlobalMemoryStatusEx GetPrivateProfileStringW GetPrivateProfileIntW AddAtomA GetCurrencyFormatW GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent SetUnhandledExceptionFilter ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryW GetLocaleInfoW HeapFree Sleep RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar RaiseException IsValidLocale

user32

DrawFrameControl SetWindowWord GetMenuInfo GetDialogBaseUnits ChangeClipboardChain

gdi32

GetTextExtentPoint32W GdiComment PolyBezier DeleteDC SetBitmapBits

Sharing