8fcef98358108b9751f9a489f378327e_magniber_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8fcef98358108b9751f9a489f378327e_magniber_JC.exe
Size

1.2MB
MD5

8fcef98358108b9751f9a489f378327e
SHA1

159c14c9039cafea0bfc24db652b5907d7bfd85f
SHA256

47be861996de04198a6f3e1582a2bd72562bc840c4dafd82d32bfd968dcbf38d
SHA512

7c0aa7f0b59e511ca09c376d9132ef04c3e3e32746ba6880d9b542e92a14979d855da8d4fe663406aaf775d043fa0d5f0309ed8dfbf059fdb2287b4951e4e330
SSDEEP

24576:AQfScykVotvzzdHhm65MCz0cyCWtLuirr2PaU:pkpzzdGW8CWMVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fcef98358108b9751f9a489f378327e_magniber_JC.exe

Files

8fcef98358108b9751f9a489f378327e_magniber_JC.exe
.exe windows x86

f1e6338c5c2f10891f4af08b4827006f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
LockResource
GetProcAddress
VirtualAlloc
VirtualAllocEx
GetLastError
ReadProcessMemory
WriteProcessMemory
GetThreadContext
SetThreadContext
ResumeThread
LoadResource
SizeofResource
GetModuleFileNameA
GetModuleHandleA
CreateProcessA
FindResourceW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WideCharToMultiByte
LoadLibraryW
OutputDebugStringW
GetCommandLineW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
HeapAlloc
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateSemaphoreW
HeapFree
IsProcessorFeaturePresent
HeapSize
Sleep
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
CreateFileW

user32

LoadStringW
LoadIconW
LoadCursorW
EndPaint
BeginPaint
UpdateWindow
TranslateAcceleratorW
LoadAcceleratorsW
EndDialog
DialogBoxParamW
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1e6338c5c2f10891f4af08b4827006f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 1000KB - Virtual size: 1000KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 1000KB - Virtual size: 1000KB