2023-08-22_60ef1a2f821bd316ce1316bc22471201_magniber_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_60ef1a2f821bd316ce1316bc22471201_magniber_JC.exe
Size

10.6MB
MD5

60ef1a2f821bd316ce1316bc22471201
SHA1

eb78020468d18c3e8ccbf79d4dadefbda0ac16b0
SHA256

78c86d468c09ace1bb1c48b0edb051acf623fae98a5969e8e4c116c4c8157ad3
SHA512

1f6fa661653cff5acd27289c563017f99713b2c585f51820fa5f4ee0873a156d20ca47d3c5f22fddffa91b54b036cff1982a7b14e1ce814c0850f0152651285c
SSDEEP

196608:BITGCwkBmppGPwDNxevjtCz30OMf/gif++m6ugXumz+3tXFTTElU/caK/:BIMkBmnXOWgXumQ2iK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_60ef1a2f821bd316ce1316bc22471201_magniber_JC.exe

Files

2023-08-22_60ef1a2f821bd316ce1316bc22471201_magniber_JC.exe
.exe windows x86

99a59e53df5ebea6fa6940a2eb9cb123

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9d_43

D3DXLoadSurfaceFromSurface
D3DXSaveSurfaceToFileInMemory
D3DXMatrixScaling
D3DXMatrixInverse
D3DXMatrixMultiply
D3DXMatrixLookAtLH
D3DXPlaneFromPoints
D3DXVec3TransformCoord
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixOrthoLH
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateFontA
D3DXGetDeclLength
D3DXVec3TransformArray
D3DXPlaneIntersectLine
D3DXPlaneFromPointNormal
D3DXVec3Normalize
D3DXMatrixTranslation
D3DXVec3TransformNormal
D3DXMatrixTranspose
D3DXVec4Transform
D3DXGetImageInfoFromFileInMemory
D3DXSaveTextureToFileA
D3DXCompileShader
D3DXDisassembleShader
D3DXMatrixRotationYawPitchRoll
D3DXVec3Project
D3DXGetDeclVertexSize
D3DXCreateBox
D3DXCreateTextureFromFileExA
D3DXSaveSurfaceToFileA
D3DXGetImageInfoFromFileA
D3DXMatrixOrthoOffCenterLH
D3DXCreateTextureFromFileInMemory

d3d9

Direct3DCreate9
D3DPERF_EndEvent
D3DPERF_BeginEvent

kernel32

HeapValidate
HeapUnlock
HeapWalk
HeapLock
FindFirstFileW
FindNextFileW
FreeLibrary
CreateFileW
GetFileSize
WriteFile
ReadFile
SetFileTime
GetFileTime
FormatMessageA
GetComputerNameA
CreateProcessA
CreateProcessW
VerSetConditionMask
VerifyVersionInfoW
ExpandEnvironmentStringsW
lstrcmpW
LoadLibraryExW
lstrcmpA
GetSystemDirectoryW
LocalAlloc
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetConsoleOutputCP
WriteConsoleA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetProcessHeaps
LCMapStringW
LCMapStringA
VirtualQuery
GetOEMCP
GetACP
GetTickCount
GetLocalTime
GetSystemTime
CompareFileTime
SystemTimeToFileTime
FileTimeToSystemTime
CreateThread
GetCurrentThreadId
CreateFileA
GetFileAttributesA
CreateDirectoryA
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryW
SetFileAttributesW
SetCurrentDirectoryA
SetCurrentDirectoryW
CreateDirectoryW
GetFileAttributesW
SetFilePointer
DeleteFileW
CopyFileW
MoveFileW
GetModuleFileNameW
GetTempPathA
GetTempPathW
GetCurrentDirectoryW
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFullPathNameW
WideCharToMultiByte
IsDebuggerPresent
QueryPerformanceFrequency
GetTimeZoneInformation
DeleteCriticalSection
LocalFree
GetLastError
InterlockedIncrement
InitializeCriticalSection
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
OutputDebugStringW
FatalAppExitA
IsValidCodePage
GetCPInfo
SetHandleCount
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteConsoleW
GetModuleHandleW
GetProcessHeap
HeapAlloc
HeapFree
GetDriveTypeA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
IsBadReadPtr
lstrlenA
DebugBreak
GetStartupInfoA
GetCommandLineA
RaiseException
UnhandledExceptionFilter
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
GetOverlappedResult
ResetEvent
ReadDirectoryChangesW
QueryPerformanceCounter
GetTimeFormatA
GetDateFormatA
VirtualFree
VirtualAlloc
WritePrivateProfileStringA
Module32First
Module32Next
CreateToolhelp32Snapshot
Thread32First
Thread32Next
OpenThread
SuspendThread
GetThreadContext
SetThreadContext
ResumeThread
GetCurrentProcessId
SetUnhandledExceptionFilter
InterlockedDecrement
CreateFileMappingA
UnmapViewOfFile
MulDiv
TryEnterCriticalSection
LoadLibraryW
DuplicateHandle
GetCurrentThread
InterlockedExchangeAdd
FindResourceA
LoadResource
SetEndOfFile
GetDiskFreeSpaceA
LockResource
SizeofResource
SetFileAttributesA
DeleteFileA
MoveFileA
SetConsoleTitleA
AllocConsole
EnterCriticalSection
LeaveCriticalSection
GlobalLock
GlobalUnlock
Sleep
GlobalAlloc
GetFullPathNameA
GetCurrentDirectoryA
OpenEventA
OutputDebugStringA
SetEvent
CreateEventA
GetCurrentProcess
TerminateProcess
WaitForSingleObject
TerminateThread
CloseHandle
GetVersionExA
GetProcAddress
GlobalMemoryStatusEx
GetModuleFileNameA
CopyFileA
MultiByteToWideChar
LoadLibraryA
GetSystemInfo
MapViewOfFile
RemoveDirectoryA
GetModuleHandleA
ExitProcess
InitializeCriticalSectionAndSpinCount
InterlockedExchange

user32

SetWindowTextA
MessageBoxA
DialogBoxParamA
SetFocus
EnableWindow
GetDlgItem
KillTimer
SetTimer
EndDialog
EmptyClipboard
SetClipboardData
GetDesktopWindow
GetMonitorInfoA
EnumDisplayDevicesA
ScreenToClient
SetCursorPos
ShowCursor
GetSystemMetrics
GetClientRect
ClientToScreen
PostQuitMessage
PeekMessageW
GetMessageW
BeginPaint
EndPaint
SetClipboardViewer
ChangeClipboardChain
RegisterClassA
CreateWindowExA
GetActiveWindow
InvalidateRect
UpdateWindow
SendMessageA
LoadStringW
AdjustWindowRect
GetWindowLongA
SetRect
DefWindowProcA
SetCapture
GetWindowRect
GetCursorPos
ReleaseCapture
DispatchMessageA
TranslateMessage
SetWindowLongA
GetMessageA
PeekMessageA
SwitchToThisWindow
GetKeyState
GetAsyncKeyState
CloseClipboard
GetClipboardData
OpenClipboard
GetFocus
GetCaretBlinkTime
ShowWindow
SetWindowPos
ClipCursor
LoadIconA
LoadCursorA

gdi32

SelectObject
GetTextExtentPoint32A
DeleteObject
SetTextColor
CreateDCA
CreateDIBSection
SetTextAlign
SetBkColor
ExtEscape
CreateICA
GetDeviceCaps
DeleteDC
CreateSolidBrush
GetStockObject
CreateFontA
CreateCompatibleDC
LineTo
MoveToEx
ExtTextOutA
CreatePen
SetMapMode

advapi32

RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegEnumValueA
RegSetValueExW
CryptExportKey
CryptImportKey
CryptDestroyKey
CryptDeriveKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenKey
CryptGetUserKey
CryptEnumProvidersA
CryptGetProvParam
CryptAcquireContextW
RegQueryValueExA

shell32

SHFileOperationA
SHCreateDirectoryExA
ShellExecuteA
SHGetFolderPathA

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

iphlpapi

GetAdaptersInfo

dbghelp

MiniDumpWriteDump
SymFromAddr
MakeSureDirectoryPathExists

winmm

timeGetTime

ws2_32

getsockopt
setsockopt
accept
ioctlsocket
WSAGetLastError
socket
WSAStartup
ntohs
inet_ntoa
getsockname
gethostbyname
getpeername
inet_addr
htons
select
__WSAFDIsSet
bind
listen
gethostname
closesocket
shutdown
recv
send
connect

dinput8

DirectInput8Create

xinput1_3

ord2

crypt32

CertDuplicateStore
CertCreateCertificateContext
CertGetCertificateContextProperty
CertGetIntendedKeyUsage
CryptDecodeObject
CertSetCertificateContextProperty
CertDuplicateCertificateContext
CertNameToStrW
CertEnumCertificatesInStore
CertVerifyRevocation
CryptEncryptMessage
CryptVerifyDetachedMessageSignature
CryptVerifyMessageSignature
CryptEncodeObject
CryptSignMessage
CryptDecryptMessage
CertCloseStore
CertOpenStore
CertFindCertificateInStore
CertAddEncodedCertificateToStore
CertAddCertificateContextToStore
CertSaveStore
CertDeleteCertificateFromStore
CertGetSubjectCertificateFromStore
CryptMsgControl
CryptMsgGetParam
CryptMsgClose
CryptMsgUpdate
CryptMsgOpenToDecode
CertFreeCertificateContext

shlwapi

PathCanonicalizeA
PathSearchAndQualifyA

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 861KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99a59e53df5ebea6fa6940a2eb9cb123

Headers

DLL Characteristics

File Characteristics

Imports

d3dx9d_43

d3d9

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

iphlpapi

dbghelp

winmm

ws2_32

dinput8

xinput1_3

crypt32

shlwapi

Sections

.text Size: 4.9MB - Virtual size: 4.9MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 102KB - Virtual size: 861KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 4.3MB - Virtual size: 4.3MB

.reloc Size: 213KB - Virtual size: 213KB

.text
Size: 4.9MB - Virtual size: 4.9MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 102KB - Virtual size: 861KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

.reloc
Size: 213KB - Virtual size: 213KB