Static task
static1
Behavioral task
behavioral1
Sample
Magnify.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Magnify.exe
Resource
win10v2004-20230220-en
General
-
Target
Magnify.exe
-
Size
732KB
-
MD5
ff2af01e03ccd707b9dd937e49436f3f
-
SHA1
9bc4a22dc2e8931c21b931875a16ec8a94f5f5b0
-
SHA256
33fcd1363966ab6478fe5b1061fa5a401bb8bf5c0996a837e1b08ff892393ef1
-
SHA512
450aa663c3bf7a772e7c5fcfd6e7748bd7ecbdead23873e57e1b38927b446efb792ca5fe27cdd910f646e222c96a3a66800b870319d95d6ddff3fa760dc4ed88
-
SSDEEP
12288:6jeZBV2/droHDy3hAgNEFTt8XOykpyklYx:rZB8/drojy3hAgNYTzykpykix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Magnify.exe
Files
-
Magnify.exe.exe windows x86
5a38c436f6513fd9b5358a509d9ae21a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyExW
RegGetValueW
RegQueryValueExW
RegDeleteKeyW
RegNotifyChangeKeyValue
RegEnumKeyExW
RegLoadMUIStringW
RegDeleteTreeW
RegEnumValueW
kernel32
LockResource
CreateThread
InitializeCriticalSection
FindResourceExW
LoadResource
GetModuleHandleExW
HeapFree
GetModuleFileNameA
ExpandEnvironmentStringsW
OpenProcess
VirtualQuery
FreeLibrary
GetSystemInfo
ProcessIdToSessionId
ReleaseSRWLockExclusive
LoadLibraryExA
VirtualProtect
InitOnceComplete
InitOnceBeginInitialize
K32GetModuleBaseNameW
K32EnumProcessModules
K32EnumProcesses
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
CreateProcessW
DeleteProcThreadAttributeList
GetFileAttributesW
AcquireSRWLockExclusive
IsProcessInJob
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GlobalDeleteAtom
GlobalAddAtomW
CreateSemaphoreExW
CreateMutexExW
WaitForSingleObjectEx
RaiseException
OpenSemaphoreW
ReleaseSemaphore
WaitForSingleObject
GetUserDefaultLCID
SetEvent
GetCurrentProcessId
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
InitializeCriticalSectionEx
DeleteCriticalSection
CreateEventExW
IsDebuggerPresent
OutputDebugStringW
ReleaseMutex
RegisterApplicationRestart
SetProcessShutdownParameters
GetTickCount64
CreateMutexW
Sleep
HeapSetInformation
CloseHandle
OpenMutexW
SetLastError
CompareStringW
GetLastError
DebugBreak
GetModuleHandleW
GetProcessHeap
GetProcAddress
OpenJobObjectW
SizeofResource
GetStartupInfoW
InitializeSListHead
HeapAlloc
FormatMessageW
GetCurrentThreadId
HeapSize
HeapReAlloc
HeapDestroy
GetSystemTimeAsFileTime
CreateEventW
ResetEvent
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
DeleteFileW
gdi32
CombineRgn
DeleteObject
CreateBitmap
CreateBrushIndirect
SelectObject
GetDeviceCaps
DeleteDC
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
CreateSolidBrush
GetStockObject
MoveToEx
LineTo
CreateRectRgn
user32
CloseDesktop
GetAsyncKeyState
FindWindowW
PostMessageW
CallNextHookEx
LoadStringW
SetWindowsHookExW
UnhookWindowsHookEx
GetSystemMetrics
GetWindowLongW
GetAncestor
PtInRect
EqualRect
GetDesktopWindow
GetWindowRect
IsRectEmpty
OffsetRect
SendInput
MonitorFromPoint
GetMonitorInfoW
CopyRect
GetPointerDevices
ShowWindow
SetTimer
SystemParametersInfoW
KillTimer
EnumDisplayMonitors
ClipCursor
IsWindow
DestroyWindow
GetPhysicalCursorPos
CreateWindowExW
RegisterPointerDeviceNotifications
UnionRect
RegisterClassExW
IntersectRect
MonitorFromRect
UpdateWindow
DefWindowProcW
GetGUIThreadInfo
SetRect
InflateRect
SetWindowLongW
UnhookWinEvent
GetParent
GetPointerDeviceRects
BeginPaint
EndPaint
SetActiveWindow
LoadCursorW
SetLayeredWindowAttributes
SetWinEventHook
GetClientRect
GetSysColor
SetWindowPos
SetWindowRgn
InvalidateRect
GetWindowThreadProcessId
GetWindowTextW
GetPointerInfo
GetPointerFrameInfoHistory
MapWindowPoints
SetPhysicalCursorPos
LoadIconW
SendMessageW
IsWindowVisible
AdjustWindowRectEx
GetWindow
SetRectEmpty
ChangeWindowMessageFilterEx
GetMessageW
TranslateMessage
DispatchMessageW
IsIconic
GetCapture
GetForegroundWindow
SetForegroundWindow
IsWindowEnabled
GetDC
ReleaseDC
UpdateLayeredWindow
GetCursorPos
RegisterHotKey
UnregisterHotKey
OpenInputDesktop
GetClassNameW
SendMessageTimeoutW
GetDoubleClickTime
RealGetWindowClassW
MonitorFromWindow
CreatePopupMenu
InsertMenuItemW
CheckMenuRadioItem
TrackPopupMenu
SetWindowPlacement
SetPropW
RemovePropW
GetMessagePos
PostQuitMessage
SetCursor
FillRect
RegisterClassW
LoadImageW
WindowFromPhysicalPoint
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
UnregisterClassA
GetThreadDesktop
SetDesktopColorTransform
SendNotifyMessageW
GetShellWindow
GetKeyState
GetUserObjectInformationW
msvcp_win
_Mtx_unlock
_Mtx_destroy
_Cnd_destroy
_Cnd_wait
_Thrd_start
_Mtx_init
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Mtx_lock
_Cnd_init
?_Xlength_error@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
api-ms-win-crt-runtime-l1-1-0
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
api-ms-win-crt-string-l1-1-0
memmove_s
wcscspn
memset
wcsspn
api-ms-win-crt-private-l1-1-0
_o__get_wide_winmain_command_line
_o__hypot
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__ltow_s
_o__purecall
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
_o__wcsicmp
_o__wcslwr_s
_o__wtoi
_o_ceil
_o_exit
_o_floor
_o_free
_o_malloc
_o_memcpy_s
_o_realloc
_o_terminate
_o_wcstok
_except_handler4_common
_CxxThrowException
_o__cexit
_o__callnewh
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
__std_terminate
__CxxFrameHandler3
wcschr
wcsrchr
memcpy
_o__exit
_o__errno
_o__crt_atexit
_o__controlfp_s
_o__configure_wide_argv
_o__configthreadlocale
_o__CIsqrt
_o__CIsin
_o__CIpow
_o__CIlog
_o__CIfmod
_o__CIcos
_o__CIatan2
memmove
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitialize
oleacc
AccessibleObjectFromWindow
AccessibleObjectFromEvent
comctl32
InitCommonControlsEx
ord17
oleaut32
VariantClear
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
SysAllocString
VariantInit
gdiplus
GdipDrawString
GdipSetTextRenderingHint
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawLine
GdipDeletePen
GdipCreatePen1
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipFillRectangle
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteGraphics
GdipCreateFromHDC
GdipStringFormatGetGenericTypographic
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdiplusShutdown
shell32
ShellExecuteW
SHAppBarMessage
ntdll
WinSqmSetDWORD
WinSqmAddToStream
NtQueryWnfStateData
WinSqmIncrementDWORD
WinSqmIsOptedIn
shlwapi
ord628
dwmapi
DwmIsCompositionEnabled
DwmSetWindowAttribute
dui70
InitProcessPriv
InitThread
UnInitProcessPriv
UnInitThread
??0NativeHWNDHost@DirectUI@@QAE@XZ
??1NativeHWNDHost@DirectUI@@UAE@XZ
?Initialize@NativeHWNDHost@DirectUI@@QAEJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@I@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
StrToID
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ
?CreateHostWindow@NativeHWNDHost@DirectUI@@UAEPAUHWND__@@KPBG0KHHHHPAU3@PAUHMENU__@@PAUHINSTANCE__@@PAX@Z
?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
??1CritSecLock@DirectUI@@QAE@XZ
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?GetTooltip@Element@DirectUI@@QAE_NXZ
?Initialize@AccessibleButton@DirectUI@@QAEJPAVElement@2@PAK@Z
??1AccessibleButton@DirectUI@@UAE@XZ
?OnPropertyChanged@AccessibleButton@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetClassInfoPtr@AccessibleButton@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@AccessibleButton@DirectUI@@SGJXZ
??0AccessibleButton@DirectUI@@QAE@XZ
??0ClassInfoBase@DirectUI@@QAE@XZ
??1ClassInfoBase@DirectUI@@UAE@XZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
?KeyFocusedProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnLostDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?OnReceivedDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?DefaultAction@Button@DirectUI@@UAEJXZ
?GetClassInfoPtr@CCPushButton@DirectUI@@SGPAUIClassInfo@2@XZ
?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ
?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z
?Click@Button@DirectUI@@SG?AVUID@@XZ
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
??0HWNDElement@DirectUI@@QAE@XZ
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?LoadFromResource@DUIFactory@DirectUI@@QAEJPAUHINSTANCE__@@PBG1PAVElement@2@PAKPAPAV42@1@Z
?Destroy@Layout@DirectUI@@QAEXXZ
?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z
?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z
?DoubleBuffered@Element@DirectUI@@QAEX_N@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?Release@Value@DirectUI@@QAEXXZ
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
?Register@HWNDElement@DirectUI@@SGJXZ
?Destroy@Element@DirectUI@@QAEJ_N@Z
??1DUIFactory@DirectUI@@QAE@XZ
??1HWNDElement@DirectUI@@UAE@XZ
magnification
MagInitialize
MagSetFullscreenTransform
MagSetFullscreenColorEffect
MagSetFullscreenUseBitmapSmoothing
MagUninitialize
MagShowSystemCursor
MagSetWindowSource
MagSetInputTransform
MagSetWindowTransform
MagSetLensUseBitmapSmoothing
uiautomationcore
UiaRaiseStructureChangedEvent
UiaReturnRawElementProvider
UiaClientsAreListening
UiaHostProviderFromHwnd
UiaRaiseAutomationEvent
api-ms-win-crt-math-l1-1-0
_isnan
_finite
Sections
.text Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 406KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ