on_avast_dll_unload
onexit_register_connector_avast_2
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-27_3e3d8bf3c3758c47ef335a5bb9d35d4b_magniber_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-27_3e3d8bf3c3758c47ef335a5bb9d35d4b_magniber_JC.exe
Resource
win10v2004-20230915-en
Target
2023-08-27_3e3d8bf3c3758c47ef335a5bb9d35d4b_magniber_JC.exe
Size
10.0MB
MD5
3e3d8bf3c3758c47ef335a5bb9d35d4b
SHA1
50072c25198863dbc83e6135803856aa6279266e
SHA256
91d50675b0fe723169d53568c81f30fe0efb07f61759e46d38010e4bcbaa4a18
SHA512
9b34e573b181f0e6639b8bf2f1843125d72824f1585579c3c65e44d679a16a2214a6332ade6b18b265b33a8ea9f1f4d417ccc1df234bace24319b502d5634d0f
SSDEEP
196608:DrErRXCULnUYuX8UY3sQzaN+UJqLB+2NTTAOe4Z:DrARXdnUYgY3ivQLNdY4Z
Checks for missing Authenticode signature.
resource |
---|
2023-08-27_3e3d8bf3c3758c47ef335a5bb9d35d4b_magniber_JC.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetFileAttributesExW
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
WideCharToMultiByte
GetLastError
FindClose
SetLastError
CloseHandle
GetModuleFileNameW
CreateFileW
SetFileAttributesW
Sleep
GetFileAttributesW
DeleteFileW
MoveFileExW
CreateDirectoryW
FindFirstFileW
FindNextFileW
RemoveDirectoryW
DeviceIoControl
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
GetFileSize
ReadFile
WriteFile
InterlockedIncrement
WaitForSingleObject
CreateProcessW
ResumeThread
HeapAlloc
GetProcessHeap
GetSystemDirectoryW
lstrcatW
GetModuleHandleA
GetEnvironmentVariableW
LocalFree
CreateEventW
GetExitCodeProcess
GetCurrentThread
GetCurrentProcess
FindResourceW
SizeofResource
LockResource
LoadResource
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
SetEvent
CreateThread
TerminateThread
GetLocaleInfoW
FileTimeToSystemTime
GetCommandLineW
GetUserDefaultLangID
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
SetDllDirectoryW
FormatMessageW
SetFilePointerEx
LoadLibraryExW
FreeLibrary
GetCurrentProcessId
TerminateProcess
GetVersionExW
LockFileEx
UnlockFileEx
GetFileSizeEx
SetEndOfFile
MultiByteToWideChar
GetWindowsDirectoryW
QueryDosDeviceW
ExpandEnvironmentStringsW
SetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpiA
WriteProcessMemory
VirtualProtect
RaiseException
DecodePointer
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetVersion
MapViewOfFile
UnmapViewOfFile
SetFileTime
CreateSemaphoreW
CreateFileMappingW
SetFilePointer
GetShortPathNameW
DuplicateHandle
GetOEMCP
GetFullPathNameW
GetCurrentDirectoryW
FindFirstFileExW
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetThreadTimes
ResetEvent
ReleaseSemaphore
TryEnterCriticalSection
GetLongPathNameW
VirtualAlloc
VirtualFree
GlobalMemoryStatusEx
SystemTimeToFileTime
GetCurrentThreadId
SetThreadPriority
WaitForMultipleObjects
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetProcessAffinityMask
FlushFileBuffers
OutputDebugStringA
GetModuleHandleExW
GetDiskFreeSpaceExW
FindFirstVolumeW
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindVolumeClose
GetExitCodeThread
InterlockedDecrement
GetSystemTimes
IsDebuggerPresent
InterlockedCompareExchange
IsValidCodePage
EnumSystemLocalesW
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualQuery
LoadLibraryExA
EncodePointer
WaitForSingleObjectEx
GetStringTypeW
CompareStringW
LCMapStringW
GetCPInfo
FormatMessageA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
GetStartupInfoW
OutputDebugStringW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
TzSpecificLocalTimeToSystemTime
GetFileType
GetACP
ExitThread
GetStdHandle
ExitProcess
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetStdHandle
IsValidLocale
GetUserDefaultLCID
GetCommandLineA
RtlUnwind
on_avast_dll_unload
onexit_register_connector_avast_2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ