202401069b51d58437423eb39f382c5190daa282karaganymafia[.]exe

General

Target
202401069b51d58437423eb39f382c5190daa282karaganymafia.exe
Size 257KB
Sample240107-x95a2adef4
SHA256 106c9740c49cbdddf6d14794c5b95adde09720adc34c31de6d5d09ac1db0c931
MD5 9b51d58437423eb39f382c5190daa282
SHA1 d308b00ba546b2ef0a18c280312678ebb411b4de
SHA512 06838fbdd5857a71064245a5949fb37d1aab855462c29858e8d2fa2b6d086197affe6950c43f707a20495306964a4c7ec98131c11018b23fa221a1897524fc6a
SSDEEP 6144:FJvXbVklS/zDiWsg4Ig1ubxq6ckd+QWm5iGgw3Y9:/VklS/qHg4EbVckYBJGT3Y9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
202401069b51d58437423eb39f382c5190daa282karaganymafia.exe

File Explorer

202401069b51d58437423eb39f382c5190daa282karaganymafia.exe

.exe 257KB

202401069b51d58437423eb39f382c5190daa282karaganymafia.exe

IMPHASH add17840a9d693c5cc4caa34e03f66b7
SHA256 106c9740c49cbdddf6d14794c5b95adde09720adc34c31de6d5d09ac1db0c931
MD5 9b51d58437423eb39f382c5190daa282
SHA1 d308b00ba546b2ef0a18c280312678ebb411b4de
SHA512 06838fbdd5857a71064245a5949fb37d1aab855462c29858e8d2fa2b6d086197affe6950c43f707a20495306964a4c7ec98131c11018b23fa221a1897524fc6a
SSDEEP 6144:FJvXbVklS/zDiWsg4Ig1ubxq6ckd+QWm5iGgw3Y9:/VklS/qHg4EbVckYBJGT3Y9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA GetTickCount GetThreadSelectorEntry FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc GetProcessVersion LoadLibraryA GetCPInfo SetProcessShutdownParameters lstrcpyA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP GetNativeSystemInfo GetCurrentDirectoryA ExitProcess HeapSize GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc HeapReAlloc GetModuleHandleW GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount LoadLibraryW GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId FreeEnvironmentStringsW GetStringTypeW

user32

DefDlgProcW GetRegisteredRawInputDevices GetRawInputBuffer GetAltTabInfoA SwitchDesktop EndPaint

shell32

ExtractAssociatedIconW ShellAboutA FindExecutableW DragQueryFileA ExtractIconW

Sharing