2024-02-28_14da8776351018717990d9ece8090325_karagany_mafia_magniber

General

Target
2024-02-28_14da8776351018717990d9ece8090325_karagany_mafia_magniber
Size 308KB
Sample240228-g6de5sdc85
SHA256 bfc854fd82f5796b6bcb23c4f9f76c3a4bed38462201a2eb0229e4fb5ea3e4f4
MD5 14da8776351018717990d9ece8090325
SHA1 a63fb5b0d9cb9d5ee9c37cfc07bc4bf15e90a1d0
SHA512 90246b7e0f9245fe356f15292fc5b8f6668f9fb1ced293b83c798c36480fedf43f9b836ca24ceb106458fcbb2920986ce62ef993fe157b698d685918b03fca87
SSDEEP 3072:RmBr3balBclw29DXaPB2J9ot3nPIGX30caGhDgGCcc4Go0ER5IY0ms41:RmBrrDDX0tXT30vzHF4Go0+Fs41
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_14da8776351018717990d9ece8090325_karagany_mafia_magniber

File Explorer

2024-02-28_14da8776351018717990d9ece8090325_karagany_mafia_magniber

.exe 308KB

2024-02-28_14da8776351018717990d9ece8090325_karagany_mafia_magniber

IMPHASH c8287accd9b611eb70ab510dd26dc890
SHA256 bfc854fd82f5796b6bcb23c4f9f76c3a4bed38462201a2eb0229e4fb5ea3e4f4
MD5 14da8776351018717990d9ece8090325
SHA1 a63fb5b0d9cb9d5ee9c37cfc07bc4bf15e90a1d0
SHA512 90246b7e0f9245fe356f15292fc5b8f6668f9fb1ced293b83c798c36480fedf43f9b836ca24ceb106458fcbb2920986ce62ef993fe157b698d685918b03fca87
SSDEEP 3072:RmBr3balBclw29DXaPB2J9ot3nPIGX30caGhDgGCcc4Go0ER5IY0ms41:RmBrrDDX0tXT30vzHF4Go0+Fs41
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14013

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleA GetConsoleTitleA GetNumberFormatA GlobalMemoryStatus GetLocaleInfoA GetCurrencyFormatW MoveFileW lstrlenA EnumResourceNamesA GetUserDefaultLCID GetStringTypeW MultiByteToWideChar LCMapStringW WideCharToMultiByte HeapReAlloc GetLocaleInfoW InterlockedExchange FreeLibrary SetConsoleCtrlHandler IsValidCodePage ReadConsoleOutputA LoadLibraryW FindFirstFileA EnumSystemLocalesA ProcessIdToSessionId RaiseException RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection FatalAppExitA EnterCriticalSection Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidLocale ResetWriteWatch GetPrivateProfileIntW

user32

CreateMDIWindowW ShowWindowAsync LoadCursorA PeekMessageW SetWindowRgn GetKBCodePage SetClipboardData DrawTextW GetKeyboardLayout SwitchDesktop DestroyIcon CharLowerBuffA SetWindowsHookExW

gdi32

CreateBitmapIndirect RemoveFontMemResourceEx ResetDCW GetNearestPaletteIndex SelectObject

Name

.text

Size

115KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

10.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2024-02-28_14da8776351018717990d9ece8090325_karagany_mafia_magniber

kernel32

user32

gdi32

generic