Static task
static1
Behavioral task
behavioral1
Sample
MagmaTool.exe
Resource
win7-20230712-en
General
-
Target
MagmaTool.exe
-
Size
19.9MB
-
MD5
d52fbbfe1143f8c8b18a3f72f9f18519
-
SHA1
522b8b4cfbb9f2dd80bbac1f9f74851ec2246f45
-
SHA256
5a7f7bf003c2106f9c399b092c5455f95c544248e1b3ac02c1df45245f0f5ee1
-
SHA512
154c297aae02b46dcbaaa272a6570f9c70b21ce9b37b53fe46a7c36dbfb52c5210855c8acbe157d0d49fd5afc5ba493bdca83515b6e8be366c9d0b76b8f8286d
-
SSDEEP
393216:BmsYBoM/sqcgYYMVEH44zD9xh4oh9KK3R4H9Lpgwrnf2Io0I:BVYBybO441xhZh9KK3Rorbel0I
Malware Config
Signatures
Files
-
MagmaTool.exe.exe windows x86
Code Sign
39:04:c6:9d:c0:6f:0e:54:b0:ff:16:6e:45:15:91:cfCertificate
IssuerCN=MagmaTeamEncNot Before05/06/2021, 11:54Not After31/12/2039, 23:59SubjectCN=MagmaTeamEnc79:e8:a9:12:04:a1:10:a2:f0:a2:5a:90:e3:6f:f5:9e:23:bf:97:01Signer
Actual PE Digest79:e8:a9:12:04:a1:10:a2:f0:a2:5a:90:e3:6f:f5:9e:23:bf:97:01Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.0MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2.8MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 318KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 205KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 17.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 11.3MB - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 84B - Virtual size: 4KB
IMAGE_SCN_MEM_READ