2024-04-22_2ec4eec2e3bf611929fafd1870001aa0_karagany_mafia

General

Target
2024-04-22_2ec4eec2e3bf611929fafd1870001aa0_karagany_mafia
Size 268KB
Sample240422-mlnm9sac75
SHA256 e008fb98c08aae4a03ed47f38d3ce717a8131ce7b7fa239705d30c9c0a8e4238
MD5 2ec4eec2e3bf611929fafd1870001aa0
SHA1 9e4c647daf5a152619e3e24f442ee8d772ff5bfd
SHA512 d42b7f9497a89ddce21f15b90cf42f3522237335cf095ae028bb96cdf0d32137681769da0c25d3419f426f43dfa13f00d1cf6cf454a1f11cd39ef19317b6e126
SSDEEP 3072:/91xjsVE6yEmOBPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4Z:/9QVE4XBqYP3MN8IZmfjWWAM4Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-22_2ec4eec2e3bf611929fafd1870001aa0_karagany_mafia

File Explorer

2024-04-22_2ec4eec2e3bf611929fafd1870001aa0_karagany_mafia

.exe 268KB

2024-04-22_2ec4eec2e3bf611929fafd1870001aa0_karagany_mafia

IMPHASH f456e8b8fd5e0768c2e3120e086c8ebc
SHA256 e008fb98c08aae4a03ed47f38d3ce717a8131ce7b7fa239705d30c9c0a8e4238
MD5 2ec4eec2e3bf611929fafd1870001aa0
SHA1 9e4c647daf5a152619e3e24f442ee8d772ff5bfd
SHA512 d42b7f9497a89ddce21f15b90cf42f3522237335cf095ae028bb96cdf0d32137681769da0c25d3419f426f43dfa13f00d1cf6cf454a1f11cd39ef19317b6e126
SSDEEP 3072:/91xjsVE6yEmOBPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4Z:/9QVE4XBqYP3MN8IZmfjWWAM4Z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23203

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomA FindAtomA VirtualProtect GetFileInformationByHandle GetSystemTime LoadLibraryA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP GetProcessVersion GetProcAddress GetCurrentDirectoryW GetLastError GlobalAlloc GetTickCount GetStringTypeW GetCPInfo HeapSize GetLocaleInfoW GetSystemTimeAsFileTime GetCurrentProcessId InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter LoadLibraryW

user32

EndPaint GetNextDlgGroupItem SendDlgItemMessageA GetMonitorInfoA GetUpdateRect LoadIconW LookupIconIdFromDirectoryEx GetMenuState GetDlgCtrlID BeginPaint

gdi32

StretchBlt PlayMetaFileRecord ColorMatchToTarget SetPolyFillMode StretchDIBits SetStretchBltMode BitBlt

shell32

ShellAboutA ExtractIconA ShellExecuteA

Name

.text

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

14.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.htext

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2024-04-22_2ec4eec2e3bf611929fafd1870001aa0_karagany_mafia

kernel32

user32

gdi32

shell32

generic