2024-06-03_927aef9dedf177596f8f977627ec722c_karagany_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-03_927aef9dedf177596f8f977627ec722c_karagany_mafia
Size

13.8MB
MD5

927aef9dedf177596f8f977627ec722c
SHA1

42ef427fa4bdb881c24046bce8ebfef072ad4df4
SHA256

e3c7a49c3137dd832144df1106989b62a2094b6f2f634f63e2b55bb80c13b3f2
SHA512

4cf58d40bcfb2a39b27c65556e0af9e8352743e42c642d48ca5881c92dbec1326bd4012149f6d5fc2ad2d9eceb4d58f6daa43d4657e29ef6ab6606fedfa4af33
SSDEEP

393216:9ivM1S14pTMFCszfLtI+yDzWoAHh2blFE3mbW:rkWpwMP717pF5a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-03_927aef9dedf177596f8f977627ec722c_karagany_mafia

Files

2024-06-03_927aef9dedf177596f8f977627ec722c_karagany_mafia
.exe windows:5 windows x86 arch:x86

b3c3daa6f71b957ae92efd846548cce0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
FindFirstFileW
SetFilePointer
EndUpdateResourceW
CreateDirectoryW
WriteFile
ReadFile
GetModuleFileNameW
CreateFileW
GetTempPathW
BeginUpdateResourceW
FindClose
UpdateResourceW
CloseHandle
DeleteFileW
LocalFree
WriteConsoleW
SetStdHandle
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
GetLastError
HeapFree
HeapAlloc
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
HeapCreate
ExitProcess
GetStdHandle
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
Sleep
LoadLibraryW
GetConsoleCP
GetConsoleMode
RtlUnwind
FlushFileBuffers

shell32

CommandLineToArgvW
ShellExecuteW

version

GetFileVersionInfoW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3c3daa6f71b957ae92efd846548cce0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

version

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 173KB - Virtual size: 173KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 173KB - Virtual size: 173KB

.reloc
Size: 4KB - Virtual size: 3KB