TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
2023-08-22_70a125dae78e62ef684a10f1770023dc_magniber_pos_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-22_70a125dae78e62ef684a10f1770023dc_magniber_pos_JC.exe
Resource
win10v2004-20230831-en
Target
2023-08-22_70a125dae78e62ef684a10f1770023dc_magniber_pos_JC.exe
Size
26.6MB
MD5
70a125dae78e62ef684a10f1770023dc
SHA1
c5ddf0c931c456dabfa904880b756d0dfc83f40e
SHA256
104dda60ad81d5f980c97ff3a6ec2b5733af60b862173323d0829aaf0ac039b0
SHA512
ba78f44515652a705c49d0d4bc0360c117599fb6f1a1a1cd8e98a5707d29e79f109d3a5c817cee741e93aeb7f510417743e47f991e53eee4b29e84a1acf51f7d
SSDEEP
393216:MzTbO5z8W8U2foOnK70EBKcWYlE9pt6DNcwy:MuttHGxv+OUDNQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2023-08-22_70a125dae78e62ef684a10f1770023dc_magniber_pos_JC.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE