2024-03-09_51857599c89688b67ad43d691bfba33a_karagany_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-09_51857599c89688b67ad43d691bfba33a_karagany_mafia
Size

130KB
MD5

51857599c89688b67ad43d691bfba33a
SHA1

ea2338991b198c59771705f6694e050b263e81b8
SHA256

83cd59c20bb680044732efdd26f94974d011e2388d0ecf3d137a392154a52d1b
SHA512

534a7e79385a16e9fdd4428de25a1e600c2ed61f36e6ac8a51de914778c126155aada37592d719619930e30816e8141bcafd773a345e5457564bb5163971b4a5
SSDEEP

3072:N50nBqBlXJkVCEVEjN7KYplG6+3KDKYUYogehFLLLLN:N50nBqBxJkDVwB0T2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-09_51857599c89688b67ad43d691bfba33a_karagany_mafia

Files

2024-03-09_51857599c89688b67ad43d691bfba33a_karagany_mafia
.exe windows:5 windows x86 arch:x86

eeb7225d2553c64028870a198e859241

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Work\Projects\Set-1\ReSet\_SW_\ReSET_PROG_auto\Release\ReSET_TX_prog_all.pdb

Imports

libusb0

usb_bulk_setup_async
usb_submit_async
usb_free_async
usb_reap_async
usb_init
usb_find_busses
usb_find_devices
usb_set_configuration
usb_close
usb_claim_interface
usb_get_busses
usb_open

kernel32

GetModuleHandleW
PeekConsoleInputA
SetConsoleMode
ReadConsoleInputA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
HeapSize
SetEndOfFile
GetStringTypeW
Sleep
SetConsoleTextAttribute
CreateThread
GetStdHandle
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
RaiseException
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryW
IsProcessorFeaturePresent
GetLastError
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
SetFilePointer
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetNumberOfConsoleInputEvents
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FreeLibrary
HeapFree
HeapAlloc
GetProcessHeap
VirtualQuery
SetStdHandle
FatalAppExitA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
SetConsoleCtrlHandler
InterlockedExchange
GetLocaleInfoW
HeapReAlloc
WriteConsoleW
LCMapStringW

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eeb7225d2553c64028870a198e859241

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libusb0

kernel32

Sections

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 16.0MB

.rsrc Size: 512B - Virtual size: 504B

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 16.0MB

.rsrc
Size: 512B - Virtual size: 504B

.reloc
Size: 22KB - Virtual size: 22KB