2024-09-13_15a9c5654c7e1bbb958b2904943f76df_hijackloader_karagany_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_15a9c5654c7e1bbb958b2904943f76df_hijackloader_karagany_mafia
Size

22.5MB
MD5

15a9c5654c7e1bbb958b2904943f76df
SHA1

d8abfbc0f58a98838d921463fb448311174187b0
SHA256

065cfaa3e1d1dcfb0bdc28bfc592c86e5d989b228f3ac1cc088939f5a64d0c70
SHA512

5cfbb23a1c6970d0d978da3fc0bc1471966069aa53c3c9e96b4db8d8958098d295cc3de85a19b14e46cd80fc0d9f4f72a9bb89a3e926663f8d79d40bb0b8b919
SSDEEP

393216:gTrbJj2ioLXR3T6i1eXzdnuZirMkSB/mWQdtPIqyvpCwxJZXokeX6ozzinxvb:yrbJjdcRWzdnuwSkV3wBCQX2zub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_15a9c5654c7e1bbb958b2904943f76df_hijackloader_karagany_mafia

Files

2024-09-13_15a9c5654c7e1bbb958b2904943f76df_hijackloader_karagany_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SerGreen\Source\Repos\Appacker\UnpackerWindowless\obj\Release\UnpackerWindowless.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ