2024-09-13_38b2eea6d35695b046a86ce127c63674_hijackloader_karagany_mafia | Triage

Sharing

General

Target

2024-09-13_38b2eea6d35695b046a86ce127c63674_hijackloader_karagany_mafia
Size

15.5MB
MD5

38b2eea6d35695b046a86ce127c63674
SHA1

1c33f5af5776074d3e689a61aab34698ba5c527f
SHA256

58ccb49f7fb3315064e7ca8a444c4e907101ca327a6d8f5e43f0d4eda7d25eea
SHA512

dcb6ff876b58ba4197f736547376c809ddd59b3f961b33c13eb6cd7f6ba00f3ce45cbccbc9dbd9b3762308bfbe3aa415087b8e99fee1bc5510f68a33ef244d49
SSDEEP

393216:dTrbJj2ioLXR3T6i1eXz6uZirMkSB/mJozzinxvb:drbJjdcRWz6uwSk8zub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_38b2eea6d35695b046a86ce127c63674_hijackloader_karagany_mafia

Files

2024-09-13_38b2eea6d35695b046a86ce127c63674_hijackloader_karagany_mafia
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SerGreen\Source\Repos\Appacker\UnpackerWindowless\obj\Release\UnpackerWindowless.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ