Static task
static1
Behavioral task
behavioral1
Sample
9f7d54c074958329a9f9869424a21863_magniber_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9f7d54c074958329a9f9869424a21863_magniber_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
9f7d54c074958329a9f9869424a21863_magniber_JC.exe
-
Size
277KB
-
MD5
9f7d54c074958329a9f9869424a21863
-
SHA1
1d0747c25d75868e3cc8cc48548d8ce982f719c6
-
SHA256
f711a2a528476f9a4b3104bfb306374629e31ea23ef8a36cddd77127e5dbe893
-
SHA512
f9d9abe0c2e0ef9e2ec96f58a6165afd28fcdbd4c9890d8d7b5b852d30642d01bea90ba0790c2864ca65f68a7cfdc41249c2902dcee5e3fc0d77a3275cc72331
-
SSDEEP
6144:y3nHPDm0jLAu6Y5jEw564aoJxmhuw1AFkHK/:avbjf6YNFehQwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f7d54c074958329a9f9869424a21863_magniber_JC.exe
Files
-
9f7d54c074958329a9f9869424a21863_magniber_JC.exe.exe windows x86
943b550bda838f264a91d1241abb0b14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetModuleFileNameW
GetTimeZoneInformation
lstrcatA
MultiByteToWideChar
lstrlenW
DisconnectNamedPipe
CreateJobObjectA
GetProcAddress
LoadLibraryA
LocalAlloc
SetCalendarInfoW
WriteProfileSectionW
ConvertDefaultLocale
FreeEnvironmentStringsW
RequestWakeupLatency
OutputDebugStringA
_lopen
TransactNamedPipe
GetNumaProcessorNode
lstrcpyA
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetComputerNameExA
GetVersionExW
EnumResourceTypesA
CreateActCtxW
GetCompressedFileSizeW
EnumCalendarInfoExW
GetNumaAvailableMemoryNode
TerminateJobObject
LoadResource
GetStringTypeA
IsValidLocale
TlsFree
lstrlenA
EnumSystemLocalesA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
HeapSize
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
SetEnvironmentVariableA
user32
IsCharAlphaNumericA
GetKeyboardLayoutList
GetUserObjectInformationW
CreateDesktopW
LoadMenuIndirectA
CharUpperBuffW
ImpersonateDdeClientWindow
SetSystemCursor
RegisterClassExA
LoadCursorW
GetClipboardFormatNameA
GetGUIThreadInfo
SetPropA
CharUpperBuffA
PeekMessageA
gdi32
AnimatePalette
GetEnhMetaFileA
CreateDIBSection
EnumFontFamiliesExW
TextOutW
CloseEnhMetaFile
GdiComment
GetMiterLimit
winspool.drv
DeviceCapabilitiesW
advapi32
ReportEventA
ole32
CoInitialize
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ