2024-09-25_f3f33d202d5964f8a2a6215026b49a6d_karagany_mafia | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-25_f3f33d202d5964f8a2a6215026b49a6d_karagany_mafia
Size

367KB
MD5

f3f33d202d5964f8a2a6215026b49a6d
SHA1

fd691c5cf6d61c9d25f1924ad99350f9fa22e197
SHA256

01260fa8769a455a3b3e1160294796d07edf816a877534741a2f0a0eaa851359
SHA512

025a7dcbe82c973284a7f4310f7dac0faa7a51ed9bc06c221f2b99794068b7152af05abf977deeff15dc44c79fe9e86a290e76381340a0658f5e77e4ad32989e
SSDEEP

6144:rpEcAd/Mm5ZkyUneRTnJOmQ4W4/6zA5K0TzJRCp4xRvKUllD/W13+e:rTAOm5eyUnJmCzAXTzJR3RvK6lCwe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-25_f3f33d202d5964f8a2a6215026b49a6d_karagany_mafia

Files

2024-09-25_f3f33d202d5964f8a2a6215026b49a6d_karagany_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ