2024-03-03_08c6339b62de4d34a12b989013e04a14_karagany_mafia_magniber

General

Target
2024-03-03_08c6339b62de4d34a12b989013e04a14_karagany_mafia_magniber
Size 308KB
Sample240303-mfpy5shb2t
SHA256 54edb8e84b1d573e68bbb07dae36fefe7e2bbbac962cdd9f24f66eec7635215a
MD5 08c6339b62de4d34a12b989013e04a14
SHA1 f1e3669a51d5693807b538195c60714995579915
SHA512 769e94ef589c5380a9ca438aecd3bc23bc4ff5550754f0c497dbd345b34e98697a6e0134e180da302b9eed50380b18b590ba09721a322a4a50e4a7ea5b1e70ef
SSDEEP 3072:tmBr3balBclw29DXaPB2J9ot3nPIGX30caGhDgGCcc4Go0ER5IY0ms41:tmBrrDDX0tXT30vzHF4Go0+Fs41
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-03_08c6339b62de4d34a12b989013e04a14_karagany_mafia_magniber

File Explorer

2024-03-03_08c6339b62de4d34a12b989013e04a14_karagany_mafia_magniber

.exe 308KB

2024-03-03_08c6339b62de4d34a12b989013e04a14_karagany_mafia_magniber

IMPHASH c8287accd9b611eb70ab510dd26dc890
SHA256 54edb8e84b1d573e68bbb07dae36fefe7e2bbbac962cdd9f24f66eec7635215a
MD5 08c6339b62de4d34a12b989013e04a14
SHA1 f1e3669a51d5693807b538195c60714995579915
SHA512 769e94ef589c5380a9ca438aecd3bc23bc4ff5550754f0c497dbd345b34e98697a6e0134e180da302b9eed50380b18b590ba09721a322a4a50e4a7ea5b1e70ef
SSDEEP 3072:tmBr3balBclw29DXaPB2J9ot3nPIGX30caGhDgGCcc4Go0ER5IY0ms41:tmBrrDDX0tXT30vzHF4Go0+Fs41
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14013

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleA GetConsoleTitleA GetNumberFormatA GlobalMemoryStatus GetLocaleInfoA GetCurrencyFormatW MoveFileW lstrlenA EnumResourceNamesA GetUserDefaultLCID GetStringTypeW MultiByteToWideChar LCMapStringW WideCharToMultiByte HeapReAlloc GetLocaleInfoW InterlockedExchange FreeLibrary SetConsoleCtrlHandler IsValidCodePage ReadConsoleOutputA LoadLibraryW FindFirstFileA EnumSystemLocalesA ProcessIdToSessionId RaiseException RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection FatalAppExitA EnterCriticalSection Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidLocale ResetWriteWatch GetPrivateProfileIntW

user32

CreateMDIWindowW ShowWindowAsync LoadCursorA PeekMessageW SetWindowRgn GetKBCodePage SetClipboardData DrawTextW GetKeyboardLayout SwitchDesktop DestroyIcon CharLowerBuffA SetWindowsHookExW

gdi32

CreateBitmapIndirect RemoveFontMemResourceEx ResetDCW GetNearestPaletteIndex SelectObject

Name

.text

Size

115KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

10.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2024-03-03_08c6339b62de4d34a12b989013e04a14_karagany_mafia_magniber

kernel32

user32

gdi32

generic