2024-04-25_5a9d4526bb3d2ca0eeeab48ad4880c75_karagany_mafia

General

Target
2024-04-25_5a9d4526bb3d2ca0eeeab48ad4880c75_karagany_mafia
Size 268KB
Sample240425-1mvd4afe52
SHA256 a9e4f07716bea93257685954bc0e1e5136b65b274b1acbf6bb71654f3294ebb2
MD5 5a9d4526bb3d2ca0eeeab48ad4880c75
SHA1 f1c1cad4938264dd7c59439a34cfc64a32cd9b8e
SHA512 967b491f125c0372f9292165774181e0f77049c97e5798af8f42140b4d590af67a2039af710d92c412dabffd226c403ec6c720539a4f7aa34b0f8c7a2d3d22dc
SSDEEP 3072:/91ujsVE6yEmOCPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4p:/9/VE4XCqYP3MN8IZmfjWWAM4p
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-25_5a9d4526bb3d2ca0eeeab48ad4880c75_karagany_mafia

File Explorer

2024-04-25_5a9d4526bb3d2ca0eeeab48ad4880c75_karagany_mafia

.exe 268KB

2024-04-25_5a9d4526bb3d2ca0eeeab48ad4880c75_karagany_mafia

IMPHASH f456e8b8fd5e0768c2e3120e086c8ebc
SHA256 a9e4f07716bea93257685954bc0e1e5136b65b274b1acbf6bb71654f3294ebb2
MD5 5a9d4526bb3d2ca0eeeab48ad4880c75
SHA1 f1c1cad4938264dd7c59439a34cfc64a32cd9b8e
SHA512 967b491f125c0372f9292165774181e0f77049c97e5798af8f42140b4d590af67a2039af710d92c412dabffd226c403ec6c720539a4f7aa34b0f8c7a2d3d22dc
SSDEEP 3072:/91ujsVE6yEmOCPT+wBNJjNvdMKEnv5yZN7nUZmfjWVoqnM4p:/9/VE4XCqYP3MN8IZmfjWWAM4p
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23203

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomA FindAtomA VirtualProtect GetFileInformationByHandle GetSystemTime LoadLibraryA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP GetProcessVersion GetProcAddress GetCurrentDirectoryW GetLastError GlobalAlloc GetTickCount GetStringTypeW GetCPInfo HeapSize GetLocaleInfoW GetSystemTimeAsFileTime GetCurrentProcessId InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter LoadLibraryW

user32

EndPaint GetNextDlgGroupItem SendDlgItemMessageA GetMonitorInfoA GetUpdateRect LoadIconW LookupIconIdFromDirectoryEx GetMenuState GetDlgCtrlID BeginPaint

gdi32

StretchBlt PlayMetaFileRecord ColorMatchToTarget SetPolyFillMode StretchDIBits SetStretchBltMode BitBlt

shell32

ShellAboutA ExtractIconA ShellExecuteA

Name

.text

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

14.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.htext

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2024-04-25_5a9d4526bb3d2ca0eeeab48ad4880c75_karagany_mafia

kernel32

user32

gdi32

shell32

generic