Static task
static1
Behavioral task
behavioral1
Sample
79a0221504a2e30712aaa78f25dfda11_mafia_magniber_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
79a0221504a2e30712aaa78f25dfda11_mafia_magniber_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
79a0221504a2e30712aaa78f25dfda11_mafia_magniber_JC.exe
-
Size
700KB
-
MD5
79a0221504a2e30712aaa78f25dfda11
-
SHA1
41f1b0ea1fd800e96ccbd8824479b4e3c56cf644
-
SHA256
4bec469d77ab0b67321091bf32855bef7bfb7320dd997ded387665b5bd0683dd
-
SHA512
1664c29561b7dcbe4dac820f135e02e8db4d9c482ac0aa3b4300ef50f3e5d556a7aaa84c330ff23ce23473c7fbdf858c9e486ba3334bca25dde66c145ed6fbbf
-
SSDEEP
12288:3xb12RamL/GD2jRf0WksS60EGiE0OWtYUYBEa0ur4sC7V7+myue:3h1V2f0WksS60xXRBEq3aIZue
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79a0221504a2e30712aaa78f25dfda11_mafia_magniber_JC.exe
Files
-
79a0221504a2e30712aaa78f25dfda11_mafia_magniber_JC.exe.exe windows x86
bacd58ce092719a9322d7dd0da093d94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
GetVersionExW
GetTempPathW
DeleteFileW
GetTickCount
Sleep
GetSystemDirectoryW
CreateFileW
CloseHandle
SetLastError
GlobalHandle
GlobalFree
GlobalAlloc
LockResource
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
GlobalUnlock
GlobalLock
MulDiv
lstrcmpW
InitializeCriticalSectionAndSpinCount
lstrlenA
ExitProcess
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
GetCommandLineW
LocalFree
lstrcpyW
FreeResource
CreateDirectoryW
GetProcessId
RemoveDirectoryW
TerminateProcess
CreateSemaphoreW
ReleaseSemaphore
InitializeCriticalSection
ReadFile
GetPrivateProfileIntW
WriteFile
MoveFileW
WritePrivateProfileStringW
GetPrivateProfileStringW
LoadLibraryW
FindFirstFileW
FindClose
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
SetConsoleCtrlHandler
GetCurrentThreadId
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointer
GetFileType
SetHandleCount
FatalAppExitA
FlushFileBuffers
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetTimeZoneInformation
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapReAlloc
GetConsoleMode
GetConsoleCP
HeapDestroy
HeapCreate
GetStdHandle
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetCPInfo
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
GetProcessAffinityMask
GetLastError
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
lstrlenW
IsValidLocale
user32
GetClientRect
ScreenToClient
PtInRect
GetForegroundWindow
IsWindow
GetWindowThreadProcessId
LoadIconW
KillTimer
MessageBoxW
InvalidateRect
SetActiveWindow
GetDlgItem
CharNextW
UnregisterClassA
GetDC
ReleaseDC
GetDesktopWindow
SendMessageW
IsChild
wsprintfW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
ShowWindow
DestroyWindow
MoveWindow
SetWindowPos
SetWindowLongW
GetWindowLongW
DialogBoxIndirectParamW
RegisterClassExW
LoadCursorW
DefWindowProcW
GetSystemMetrics
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PostThreadMessageW
SendDlgItemMessageW
MapDialogRect
SetWindowContextHelpId
EndDialog
RegisterWindowMessageW
BeginPaint
EndPaint
CallWindowProcW
GetFocus
SetFocus
GetWindow
GetClassNameW
GetSysColor
RedrawWindow
GetClassInfoExW
CreateWindowExW
CreateAcceleratorTableW
ClientToScreen
GetParent
SetCapture
ReleaseCapture
FillRect
InvalidateRgn
DestroyAcceleratorTable
gdi32
CreateFontW
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps
DeleteObject
advapi32
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
shell32
CommandLineToArgvW
Shell_NotifyIconW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
OleUninitialize
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoCreateInstance
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CoReleaseServerProcess
CoAddRefServerProcess
CoUninitialize
CoInitialize
oleaut32
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
UnRegisterTypeLi
RegisterTypeLi
DispCallFunc
SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
VariantInit
SysFreeString
SysAllocString
SafeArrayCreateVector
VariantClear
VariantCopy
VarUI4FromStr
shlwapi
PathFileExistsW
secur32
GetUserNameExW
winhttp
WinHttpReceiveResponse
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpSendRequest
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpOpen
WinHttpCloseHandle
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ