2024-04-22_83c4a150c72931326c15357634edf675_karagany_mafia

General

Target
2024-04-22_83c4a150c72931326c15357634edf675_karagany_mafia
Size 268KB
Sample240422-mtny1aae2x
SHA256 d6d48e2e1436c2748e0d02c110ecabf96d6392f41362671c21251eeb7cad152d
MD5 83c4a150c72931326c15357634edf675
SHA1 ee0d6def7bdc67d258d32303cbb72997cf97c8a7
SHA512 0d6a216b2c7e0f049a2c97e971fe795aa9fdea5c48bd6fa4222290d48ec97ce72fa8192bc68c2eef587e00e41e233ba24bb36b9e2f8933a0f7518f6f88330fab
SSDEEP 3072:/91xjsVE6yEmOCPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4Z:/9QVE4XCqYP3MN8IZmfjWWAM4Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-22_83c4a150c72931326c15357634edf675_karagany_mafia

File Explorer

2024-04-22_83c4a150c72931326c15357634edf675_karagany_mafia

.exe 268KB

2024-04-22_83c4a150c72931326c15357634edf675_karagany_mafia

IMPHASH f456e8b8fd5e0768c2e3120e086c8ebc
SHA256 d6d48e2e1436c2748e0d02c110ecabf96d6392f41362671c21251eeb7cad152d
MD5 83c4a150c72931326c15357634edf675
SHA1 ee0d6def7bdc67d258d32303cbb72997cf97c8a7
SHA512 0d6a216b2c7e0f049a2c97e971fe795aa9fdea5c48bd6fa4222290d48ec97ce72fa8192bc68c2eef587e00e41e233ba24bb36b9e2f8933a0f7518f6f88330fab
SSDEEP 3072:/91xjsVE6yEmOCPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4Z:/9QVE4XCqYP3MN8IZmfjWWAM4Z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23203

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomA FindAtomA VirtualProtect GetFileInformationByHandle GetSystemTime LoadLibraryA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP GetProcessVersion GetProcAddress GetCurrentDirectoryW GetLastError GlobalAlloc GetTickCount GetStringTypeW GetCPInfo HeapSize GetLocaleInfoW GetSystemTimeAsFileTime GetCurrentProcessId InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter LoadLibraryW

user32

EndPaint GetNextDlgGroupItem SendDlgItemMessageA GetMonitorInfoA GetUpdateRect LoadIconW LookupIconIdFromDirectoryEx GetMenuState GetDlgCtrlID BeginPaint

gdi32

StretchBlt PlayMetaFileRecord ColorMatchToTarget SetPolyFillMode StretchDIBits SetStretchBltMode BitBlt

shell32

ShellAboutA ExtractIconA ShellExecuteA

Name

.text

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

14.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.htext

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2024-04-22_83c4a150c72931326c15357634edf675_karagany_mafia

kernel32

user32

gdi32

shell32

generic