Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_d92a7d9d24c36268ce427a2050be12f4_karagany_mafia_magniber.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-18_d92a7d9d24c36268ce427a2050be12f4_karagany_mafia_magniber.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-18_d92a7d9d24c36268ce427a2050be12f4_karagany_mafia_magniber
-
Size
308KB
-
MD5
d92a7d9d24c36268ce427a2050be12f4
-
SHA1
70475fd3f2e2d32437c43037e538be3ea4a4f590
-
SHA256
8299ec0a8b79ffbf7004f121f70e504a81ba47027657472d51101f61264ecc5a
-
SHA512
01cf6c455e23e3fabf4641e5f6d8e90f478bdae5a058c18cd324bfc1dea804d195b2f49582a5a9f22b08d76cc977f4a9a970c83a3d028ce7229a23907bf29d15
-
SSDEEP
3072:TmBr3balBclw29DXaPB2J9ot3nPIGX30caGhDgGCcc4Go0ER5IY0ms41:TmBrrDDX0tXT30vzHF4Go0+Fs41
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-18_d92a7d9d24c36268ce427a2050be12f4_karagany_mafia_magniber
Files
-
2024-01-18_d92a7d9d24c36268ce427a2050be12f4_karagany_mafia_magniber.exe windows:5 windows x86 arch:x86
c8287accd9b611eb70ab510dd26dc890
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetConsoleTitleA
GetNumberFormatA
GlobalMemoryStatus
GetLocaleInfoA
GetCurrencyFormatW
MoveFileW
lstrlenA
EnumResourceNamesA
GetUserDefaultLCID
GetStringTypeW
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
HeapReAlloc
GetLocaleInfoW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
IsValidCodePage
ReadConsoleOutputA
LoadLibraryW
FindFirstFileA
EnumSystemLocalesA
ProcessIdToSessionId
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidLocale
ResetWriteWatch
GetPrivateProfileIntW
user32
CreateMDIWindowW
ShowWindowAsync
LoadCursorA
PeekMessageW
SetWindowRgn
GetKBCodePage
SetClipboardData
DrawTextW
GetKeyboardLayout
SwitchDesktop
DestroyIcon
CharLowerBuffA
SetWindowsHookExW
gdi32
CreateBitmapIndirect
RemoveFontMemResourceEx
ResetDCW
GetNearestPaletteIndex
SelectObject
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ