20240106773331e23ec169da3027fdbf4a5ecaeekaraganymafia[.]exe

General

Target
20240106773331e23ec169da3027fdbf4a5ecaeekaraganymafia.exe
Size 222KB
Sample240107-ycql2sdfd7
SHA256 3686127495574b47ee897d0472f0f0b974b3123a4b4786402e8575222e13be3a
MD5 773331e23ec169da3027fdbf4a5ecaee
SHA1 94cdbd76473cc97d2ff3b7c8debf498384f86429
SHA512 a29b4ded216127eec4c36b463816026463845d62e03b83340c7ad325d94a9feb2189d4bb93ff50835fb81589c79baee9f87ba73a3d30381175007717a0b82722
SSDEEP 3072:zBbWxYKFDnqvffIj0nStxBN3cwqvcQr3YTfVEPnYbl3/YrDAEioKhAv/:zBkYKZSYYnS1xecmoT2nYbdEKs/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240106773331e23ec169da3027fdbf4a5ecaeekaraganymafia.exe

File Explorer

20240106773331e23ec169da3027fdbf4a5ecaeekaraganymafia.exe

.exe 222KB

20240106773331e23ec169da3027fdbf4a5ecaeekaraganymafia.exe

IMPHASH 55c369dd0f95824b70f2ca3110842832
SHA256 3686127495574b47ee897d0472f0f0b974b3123a4b4786402e8575222e13be3a
MD5 773331e23ec169da3027fdbf4a5ecaee
SHA1 94cdbd76473cc97d2ff3b7c8debf498384f86429
SHA512 a29b4ded216127eec4c36b463816026463845d62e03b83340c7ad325d94a9feb2189d4bb93ff50835fb81589c79baee9f87ba73a3d30381175007717a0b82722
SSDEEP 3072:zBbWxYKFDnqvffIj0nStxBN3cwqvcQr3YTfVEPnYbl3/YrDAEioKhAv/:zBkYKZSYYnS1xecmoT2nYbdEKs/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalMemoryStatus GetTickCount GetSystemTimes LoadLibraryW TerminateThread GetACP FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc GetProcessVersion GetProcessShutdownParameters SetProcessShutdownParameters FindAtomW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP HeapSize GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetStringTypeW

user32

EndPaint SendDlgItemMessageA GetRawInputBuffer GetAltTabInfoA GetAltTabInfoW RegisterRawInputDevices GetRawInputDeviceList GetNextDlgGroupItem

shell32

ShellAboutA FindExecutableA DragQueryFileA

Sharing