2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia

General

Target
2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia
Size 2.9MB
Sample240205-srekfachgl
SHA256 2da778e424290eac8d86493433451545f1edf48f0abf9bdb57efccb332708fc1
MD5 09ef3f1729afae68af46f1ef5a11347c
SHA1 4b1fa6d618b0923b55fc15c3cb432af475eae4d3
SHA512 aaa8f7a3ac7f9c79fbf7defa3dfbe41b15a7f109a3fa5e87b3dabab98aa37e421870a3da09c0c322ed66bd959f5a4f6334db03b9ba5205cab98be9a5c7d83961
SSDEEP 49152:otg7ETQsdvQ7ignedJAFoenaQzqhwCdxKKTUqZIt7tTt+YsaGGCj/TeDeJQxHEE3:mtdvtge4bmaKZUga7tMFGNDtNEcJN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia

File Explorer

2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia

.exe 2.9MB

2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia

IMPHASH acbc8f761f4e19d096f011fd86326533
SHA256 2da778e424290eac8d86493433451545f1edf48f0abf9bdb57efccb332708fc1
MD5 09ef3f1729afae68af46f1ef5a11347c
SHA1 4b1fa6d618b0923b55fc15c3cb432af475eae4d3
SHA512 aaa8f7a3ac7f9c79fbf7defa3dfbe41b15a7f109a3fa5e87b3dabab98aa37e421870a3da09c0c322ed66bd959f5a4f6334db03b9ba5205cab98be9a5c7d83961
SSDEEP 49152:otg7ETQsdvQ7ignedJAFoenaQzqhwCdxKKTUqZIt7tTt+YsaGGCj/TeDeJQxHEE3:mtdvtge4bmaKZUga7tMFGNDtNEcJN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

37809

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

MessageBoxA

kernel32

RemoveDirectoryA TlsSetValue GetVersionExA GetProcAddress LoadLibraryA GetModuleFileNameA GetModuleFileNameW GetExitCodeProcess WaitForSingleObject CreateProcessW GetCommandLineW GetStartupInfoW GetTempPathA GetLastError LoadLibraryExA Sleep CreateDirectoryA SetStdHandle EnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetFileType DecodePointer EncodePointer SetConsoleCtrlHandler HeapFree GetModuleHandleW ExitProcess FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA HeapAlloc DeleteFileA FindNextFileA GetCommandLineA HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent RtlUnwind SetHandleCount GetStdHandle DeleteCriticalSection TlsAlloc TlsGetValue SetEnvironmentVariableW TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate WideCharToMultiByte LoadLibraryW WriteFile GetFullPathNameA CloseHandle GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW GetFileAttributesA MultiByteToWideChar ReadFile SetFilePointer GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage CompareStringW SetEnvironmentVariableA HeapSize GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW WriteConsoleW GetStringTypeW CreateFileW

ws2_32

ntohl

Sharing

General

Malware Config

Signatures

File Explorer

2024-02-05_09ef3f1729afae68af46f1ef5a11347c_karagany_mafia

user32

kernel32

ws2_32

generic