8fa387e24b0528a238aa5374ee6e137c_magniber_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8fa387e24b0528a238aa5374ee6e137c_magniber_JC.exe
Size

2.8MB
MD5

8fa387e24b0528a238aa5374ee6e137c
SHA1

c93db326a04fb6de4a6e49eb9977e09b90ab2206
SHA256

48665055210263364e83477a6b9405c27657c1d683fb2b89dd21ebce1a572919
SHA512

a5cac2c37f5c46e62b1776a90ec10283b23e42d4cc57900defeafdf5bbef138ba4b7261533a3cdf552c8eb0b85c6331ac0464c6873f86e37c1e2a29458264aec
SSDEEP

49152:40g9h2QxqvJmbfBBO0y7vCgDqm15iuehx96S7k0MEfEUbWYjhA:TgPBkqm150MTUbWyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa387e24b0528a238aa5374ee6e137c_magniber_JC.exe

Files

8fa387e24b0528a238aa5374ee6e137c_magniber_JC.exe
.exe windows x86

793defab096adfe6daadb7297f2e72ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetCurrentThread
SetThreadPriority
ResetEvent
WaitForSingleObject
SetEvent
CloseHandle
FindFirstFileA
FindNextFileA
CreateFileMappingA
GetThreadPriority
MapViewOfFile
GetCurrentThreadId
GetProcAddress
UnmapViewOfFile
GetModuleHandleA
GetCurrentProcess
MoveFileExA
QueryPerformanceCounter
VirtualQuery
MulDiv
GetVersionExA
GetTickCount
OpenFileMappingA
SetErrorMode
QueryPerformanceFrequency
FreeLibrary
IsBadWritePtr
CopyFileA
LoadLibraryA
LeaveCriticalSection
SetUnhandledExceptionFilter
GetLastError
GetModuleFileNameA
DeleteFileA
EnterCriticalSection
VirtualProtect
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
FileTimeToSystemTime
CreateFileA
GetSystemDirectoryA
GetFileTime
InterlockedDecrement
GetWindowsDirectoryA
GlobalFree
GlobalAlloc
CreateMutexA
MultiByteToWideChar
FindClose
GetCommandLineA
GlobalUnlock
GetFileSize
InterlockedIncrement
WideCharToMultiByte
InterlockedExchange
InterlockedCompareExchange
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
ExitThread
CreateThread
ResumeThread
HeapAlloc
GetProcessHeap
GetStartupInfoA
CreateDirectoryA
GetDriveTypeA
GetFullPathNameA
HeapReAlloc
ExitProcess
GetLocalTime
LCMapStringA
LCMapStringW
GetCPInfo
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetHandleCount
GetFileType
GetTimeZoneInformation
ReadFile
GetConsoleCP
GetConsoleMode
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
FlushFileBuffers
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
lstrlenA
lstrlenW
MoveFileA
SetFileAttributesA
Sleep
GlobalLock
OutputDebugStringA
RemoveDirectoryA

user32

GetClientRect
DispatchMessageA
ShowWindow
ReleaseDC
CreateWindowExA
DestroyWindow
CreateWindowExW
SetWindowTextA
DefWindowProcA
BeginPaint
GetWindowTextA
MessageBoxA
TranslateMessage
EndPaint
IsDialogMessageA
LoadCursorA
RegisterWindowMessageA
MoveWindow
GetDC
LoadIconA
GetMessageA
OffsetRect
ClientToScreen
AdjustWindowRectEx
GetWindowInfo
DrawTextExA
SetCaretPos
DestroyCaret
HideCaret
ShowCaret
CreateCaret
GetCursor
GetSysColorBrush
ScreenToClient
InvalidateRect
EndDialog
DialogBoxIndirectParamA
PostMessageA
EnumDisplaySettingsA
GetDlgItem
SetCapture
DefWindowProcW
EnumWindows
SetClipboardData
GetActiveWindow
GetWindowPlacement
GetClassNameA
EmptyClipboard
IsIconic
PeekMessageA
CreateCursor
CloseClipboard
IsWindowVisible
ReleaseCapture
EnumChildWindows
OpenClipboard
GetClipboardData
GetCursorPos
SetForegroundWindow
ChangeDisplaySettingsA
WindowFromPoint
MessageBoxW
GetWindowRect
RegisterClassA
SystemParametersInfoA
SetWindowLongA
GetFocus
GetDesktopWindow
GetSysColor
SetFocus
AdjustWindowRect
SetTimer
FillRect
SendMessageA
DrawTextA
GetWindowLongA
DestroyCursor
GetSystemMetrics
SetCursor

winmm

timeEndPeriod
mixerOpen
mixerGetLineControlsA
mixerClose
mixerGetLineInfoA
mixerGetDevCapsA
mixerSetControlDetails
mixerGetControlDetailsA
timeBeginPeriod
timeGetTime
PlaySoundA

wsock32

closesocket
__WSAFDIsSet
WSAGetLastError
socket
connect
select
WSAStartup
htons
ioctlsocket
inet_ntoa
recv
WSACleanup
gethostbyname
send

gdi32

BitBlt
GetTextMetricsA
CreateCompatibleDC
StretchBlt
GdiFlush
Rectangle
IntersectClipRect
SelectObject
CreateFontA
SetBkMode
CreateSolidBrush
TextOutA
SetTextColor
CreateFontIndirectA
DeleteObject
GetTextExtentPoint32A
SelectClipRgn
CreateRectRgn
GetObjectA
DeleteDC
CreateDIBSection
GetStockObject
GetDeviceCaps

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCloseKey

shell32

ShellExecuteA

ole32

CoInitialize
CoCreateInstance

oleaut32

CreateErrorInfo
SysAllocString
SysFreeString
GetErrorInfo
VariantClear
VariantChangeType
VariantInit
SetErrorInfo

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 284KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

793defab096adfe6daadb7297f2e72ab

Headers

File Characteristics

Imports

kernel32

user32

winmm

wsock32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 284KB - Virtual size: 281KB

.data Size: 28KB - Virtual size: 359KB

.rsrc Size: 220KB - Virtual size: 220KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 284KB - Virtual size: 281KB

.data
Size: 28KB - Virtual size: 359KB

.rsrc
Size: 220KB - Virtual size: 220KB