2023-08-26_9c873e14d9df36809d7c5fa4ee68dc05_magniber_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-26_9c873e14d9df36809d7c5fa4ee68dc05_magniber_JC.exe
Size

2.5MB
MD5

9c873e14d9df36809d7c5fa4ee68dc05
SHA1

feb966c7634d988f48b04f2f8687ec87eee7e000
SHA256

58f50b5ae25004cdf6495c6847ac88f54bd1b1d06ab09dded1193d755694f4ba
SHA512

754e239c99d7aaae6f430e93916b09c0c2158585289f49f82896c1c8cf26d4dfc752ea29b7da1f735047cda7e6897b4effc30414133cfcf0a5b617e1dadea4fd
SSDEEP

49152:749FyEi33xBEYgwTuvl1dnAUV3cfxPa5aHHW1vo5R8qa2VbnX53cN5oI9ctDNLIV:M+zhBEtsbnX53cN5A+OD071rwv8oWT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-26_9c873e14d9df36809d7c5fa4ee68dc05_magniber_JC.exe

Files

2023-08-26_9c873e14d9df36809d7c5fa4ee68dc05_magniber_JC.exe
.exe windows:4 windows x86

f12e3109bbb0ca758a05c7f44ac5ba69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
recvfrom
sendto
send
getsockopt
socket
shutdown
closesocket
bind
WSAStartup
gethostname
ioctlsocket
setsockopt
htons
select
__WSAFDIsSet
WSACleanup
gethostbyname
WSAGetLastError
WSASetLastError
recv

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

imagehlp

BindImageEx

kernel32

GetShortPathNameW
GetLongPathNameW
CreateDirectoryW
FindNextFileW
FindFirstFileW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetTempFileNameW
DeleteFileA
MoveFileA
CreateFileW
WritePrivateProfileStringW
IsBadReadPtr
GetCommandLineA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ExpandEnvironmentStringsW
GlobalAlloc
GlobalLock
GlobalUnlock
HeapCreate
HeapSize
GetExitCodeProcess
GetCurrentProcess
GetCurrentProcessId
GetLastError
SetLastError
GetWindowsDirectoryW
GetTempPathW
GetVersionExA
GetDiskFreeSpaceA
ExpandEnvironmentStringsA
TerminateProcess
LocalFree
FormatMessageA
GetWindowsDirectoryA
GetTempPathA
CreateProcessA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetACP
GetOEMCP
LocalAlloc
ExitThread
GetCurrentThread
SetThreadPriority
TerminateThread
ResumeThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
ReleaseMutex
CreateSemaphoreA
CreateMutexA
HeapFree
RtlUnwind
HeapReAlloc
HeapAlloc
CreateThread
GetStartupInfoA
GetSystemTimeAsFileTime
GetFileType
UnhandledExceptionFilter
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetConsoleCP
GetConsoleMode
GetFileAttributesA
SetHandleCount
QueryPerformanceCounter
SetStdHandle
LCMapStringA
GetStringTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
GetVersion
GetFileSize
lstrcmpA
lstrlenA
WriteFile
ReadFile
GetVolumeInformationA
CopyFileW
CopyFileA
SetFileAttributesW
GetFileAttributesW
CreateFileA
SetCurrentDirectoryW
GetCurrentDirectoryW
FindClose
UnlockFile
SetFilePointer
GetFileInformationByHandle
FlushFileBuffers
SetFileTime
GetFileTime
SetEndOfFile
UnmapViewOfFile
RaiseException
SetUnhandledExceptionFilter
GetDriveTypeA
WaitForSingleObject
GetSystemDirectoryW
GetSystemDirectoryA
SizeofResource
LoadResource
LockResource
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
GetSystemTime
GetTimeZoneInformation
SystemTimeToFileTime
FileTimeToSystemTime
GetLocalTime
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
ExitProcess
CreateProcessW
CloseHandle
Sleep
GetTickCount

user32

GetSysColor
FindWindowExA
SetActiveWindow
GetSystemMenu
DefWindowProcA
DefWindowProcW
GetWindowTextA
GetWindowTextLengthA
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
ClientToScreen
DestroyWindow
EnableWindow
IsWindow
GetWindowLongA
SetFocus
SetForegroundWindow
InvalidateRect
IsIconic
GetParent
GetWindowThreadProcessId
ShowWindow
IsWindowUnicode
GetClassNameA
GetWindowPlacement
SetWindowPlacement
GetWindowRect
MoveWindow
CharUpperA
CharLowerA
FillRect
LoadImageA
LoadImageW
DestroyIcon
SetClipboardData
EmptyClipboard
OpenClipboard
CloseClipboard
MapDialogRect
GetDialogBaseUnits
SetDlgItemTextW
GetDlgItem
CreateDialogParamW
CreateDialogParamA
DialogBoxParamW
ExitWindowsEx
GetSystemMetrics
SetWindowPos
RegisterClassExW
CreateWindowExW
RegisterClassA
CreateWindowExA
BeginPaint
EndPaint
GetClientRect
MessageBoxA
SetDlgItemTextA
SetWindowTextA
DialogBoxParamA
SetWindowLongA
EnumWindows
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
SendDlgItemMessageA
SendMessageA
EndDialog
PostMessageA
MessageBoxW
ReleaseDC
GetDC
SystemParametersInfoA
SetCursor
LoadCursorA
PeekMessageW
TranslateMessage
DispatchMessageW
EnableMenuItem

gdi32

GetStockObject
TextOutA
TextOutW
CreateDIBSection
EnumFontFamiliesExA
AddFontResourceW
RemoveFontResourceW
GetDeviceCaps
CreateSolidBrush
DeleteObject
SelectObject
SetTextJustification
SetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateFontA
SetBrushOrgEx
SetStretchBltMode
SetBkColor
SetBkMode
StretchDIBits

advapi32

RegSetValueExW
GetUserNameW
RegDeleteKeyA
RegDeleteValueA
RegDeleteValueW
RegQueryValueExW
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
RegCreateKeyExW
RegOpenKeyExW

shell32

SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHFileOperationA
SHFileOperationW
ShellExecuteW
ShellExecuteA

ole32

CoTaskMemFree
CoInitializeSecurity
CoCreateInstance
OleInitialize
OleUninitialize
CoInitialize

Exports

Exports

_CharLowerW@4
_CharUpperW@4
_CoInitializeEx@8
_CompareStringW@24
_GetFileAttributesExA@12
_GetFileAttributesExW@12
_GetFileSizeEx@8
_GetLocaleInfoW@16
_GetMenuBarInfo@16
_GetModuleHandleW@4
_GetStringTypeW@16
_InitializeCriticalSectionAndSpinCount@8
_InterlockedCompareExchange@12
_IsDebuggerPresent@0
_IsProcessorFeaturePresent@4
_LCMapStringW@24
_MultiByteToWideChar@24
_WideCharToMultiByte@32
_lstrcmpW@8
_lstrlenW@4

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.setup
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f12e3109bbb0ca758a05c7f44ac5ba69

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

version

imagehlp

kernel32

user32

gdi32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 475KB - Virtual size: 475KB

.rdata Size: 141KB - Virtual size: 141KB

.data Size: 22KB - Virtual size: 35KB

.rsrc Size: 556KB - Virtual size: 556KB

.reloc Size: 69KB - Virtual size: 69KB

.setup Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 475KB - Virtual size: 475KB

.rdata
Size: 141KB - Virtual size: 141KB

.data
Size: 22KB - Virtual size: 35KB

.rsrc
Size: 556KB - Virtual size: 556KB

.reloc
Size: 69KB - Virtual size: 69KB

.setup
Size: 1.3MB - Virtual size: 1.3MB