2023-08-22_5c8a2c7b30d8878a245d5e1f438ea0fb_magniber_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_5c8a2c7b30d8878a245d5e1f438ea0fb_magniber_JC.exe
Size

1.8MB
MD5

5c8a2c7b30d8878a245d5e1f438ea0fb
SHA1

cee1ca661fd42d2148fccedadd112fe726afeae0
SHA256

e5ef59c1923665d3a3a6f5c0e93f092f9a8d56bfcf5167aebe66eb84c0cb3365
SHA512

3c1b901b131e2225d4a0b1a39d6b3a590394b323b4b1f291661c831854a406874c9af82ad0d93415c8e53226c0d6b55e6ede7227d3a8f3e4f8088b776f49e23e
SSDEEP

49152:e6yQmcHdgm5dgwzbCYppRNxmHbmwS77777777v777777777725H:/+4hxmmwS77777777v777777777725H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_5c8a2c7b30d8878a245d5e1f438ea0fb_magniber_JC.exe

Files

2023-08-22_5c8a2c7b30d8878a245d5e1f438ea0fb_magniber_JC.exe
.exe windows x86

b25f2fcc6a4c38b0fa68ab28e4c10add

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
CompareStringA
CreateFileA
WriteFile
IsBadStringPtrA
GetShortPathNameA
GetStartupInfoA
GetSystemDefaultLangID
CreateProcessA
GetTempPathA
EnumResourceLanguagesA
FindFirstFileA
lstrcpyA
GetVersionExA
FindNextFileA
FindClose
GetDriveTypeA
GetCurrentDirectoryA
VirtualAlloc
VirtualFree
GetFileSize
ReadFile
WaitForMultipleObjects
OutputDebugStringA
FileTimeToSystemTime
GetDateFormatA
IsBadReadPtr
GetTimeFormatA
CreateDirectoryA
SetFilePointer
SetEvent
ResetEvent
GetFileAttributesA
HeapAlloc
GetProcessHeap
CreateEventA
VirtualQuery
GetSystemTime
WaitForSingleObject
RemoveDirectoryA
DeleteFileA
QueryPerformanceCounter
QueryPerformanceFrequency
InterlockedExchange
HeapFree
GetStdHandle
TlsFree
RtlUnwind
SetEnvironmentVariableA
CreateThread
ExitThread
GetSystemTimeAsFileTime
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemInfo
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
IsProcessorFeaturePresent
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetCPInfo
GetOEMCP
LocalFree
FormatMessageA
GetLastError
GetModuleHandleA
LeaveCriticalSection
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTickCount
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
CreateFileW
GlobalFree
GetProcAddress
GlobalUnlock
FreeLibrary
LoadLibraryExA
GlobalLock
DeleteCriticalSection
lstrcmpA
LoadLibraryA
GetModuleFileNameA
InitializeCriticalSection
lstrlenA
IsDBCSLeadByte
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapCreate
FlushFileBuffers
GetCommandLineA
MulDiv
EnterCriticalSection
SetLastError
MultiByteToWideChar
lstrlenW
InterlockedIncrement
lstrcmpiA
RaiseException
CreateFileMappingA
MapViewOfFile
Sleep
GetCurrentThreadId
CloseHandle
InterlockedDecrement
TlsAlloc
GlobalAlloc
UnmapViewOfFile
TlsGetValue
TlsSetValue
GetCurrentProcessId
FlushInstructionCache
FindResourceA
GetCurrentProcess
LockResource
OpenFileMappingA
WideCharToMultiByte
SizeofResource
LoadResource
IsBadWritePtr
FindResourceExA

user32

SetCursor
UpdateWindow
GetCapture
IsWindowVisible
CreateCursor
CreateDialogParamA
PeekMessageA
GetMessageA
GetDlgCtrlID
TranslateMessage
DispatchMessageA
SetRectEmpty
DrawFocusRect
GetCursorPos
IsDialogMessageA
PtInRect
GetActiveWindow
IsWindowEnabled
DestroyCursor
SetPropA
DialogBoxParamA
MapWindowPoints
GetAsyncKeyState
MessageBoxA
KillTimer
DrawTextA
GetSystemMetrics
ShowWindow
GetWindowRect
GetDesktopWindow
ExitWindowsEx
BeginPaint
CharNextA
CallWindowProcA
FillRect
EndPaint
DestroyAcceleratorTable
RedrawWindow
ClientToScreen
MoveWindow
GetWindowTextLengthA
DestroyWindow
SetTimer
PostQuitMessage
ScrollWindowEx
ShowScrollBar
SetScrollRange
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
InflateRect
EnableWindow
EqualRect
ValidateRect
LoadIconA
GetWindowDC
GetSystemMenu
RemoveMenu
MessageBeep
SendDlgItemMessageA
SetActiveWindow
DrawEdge
LoadStringA
MsgWaitForMultipleObjects
GetTopWindow
GetClassNameA
GetWindowTextA
ScreenToClient
CreateWindowExA
SetCapture
ReleaseCapture
LoadCursorA
DefWindowProcA
SystemParametersInfoA
IsChild
GetFocus
PostMessageA
SetFocus
GetClassInfoExA
GetWindow
IsWindow
InvalidateRgn
RegisterClassExA
InvalidateRect
CreateAcceleratorTableA
GetPropA
SetWindowTextA
GetDlgItem
EndDialog
GetParent
GetWindowLongA
SetWindowLongA
LoadImageA
RegisterWindowMessageA
SetRect
GetClientRect
ReleaseDC
GetDC
SendMessageA
GetSysColor
SetWindowPos
OffsetRect
UnregisterClassA

gdi32

SetViewportOrgEx
GetClipBox
MoveToEx
CreatePen
GetTextExtentPoint32A
LPtoDP
DPtoLP
ExtTextOutA
CreateBitmap
GetTextMetricsA
CreateSolidBrush
GetDeviceCaps
DeleteDC
RealizePalette
SelectPalette
SetTextColor
SetBkMode
SetBkColor
DeleteObject
CreateFontIndirectA
StretchBlt
GetObjectA
GetStockObject
CreateCompatibleBitmap
BitBlt
LineTo
SelectObject
CreateCompatibleDC

advapi32

RegQueryValueExA
InitializeSecurityDescriptor
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
SetSecurityDescriptorDacl
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDataFromIDListA
SHGetFileInfoA
SHGetDesktopFolder
ShellExecuteA

ole32

CreateStreamOnHGlobal
OleUninitialize
OleLockRunning
CoTaskMemFree
CoCreateInstance
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StringFromGUID2
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
OleInitialize

oleaut32

OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysStringByteLen
VarI4FromStr
OleLoadPicture
SysAllocStringByteLen
SysStringLen
SysFreeString

shlwapi

StrStrA
StrStrIA
PathRemoveFileSpecA
PathFindExtensionA
PathCombineA
PathRemoveBackslashA
PathCanonicalizeA
PathAppendW

comctl32

_TrackMouseEvent
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollInfo
InitCommonControlsEx

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b25f2fcc6a4c38b0fa68ab28e4c10add

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

version

Sections

.text Size: 332KB - Virtual size: 331KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 20KB - Virtual size: 30KB

.rsrc Size: 1.3MB - Virtual size: 1.7MB

.text
Size: 332KB - Virtual size: 331KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 20KB - Virtual size: 30KB

.rsrc
Size: 1.3MB - Virtual size: 1.7MB