Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_7a1fecb471693c58c8aaec76e1e44d86_mafia_magniber_JC.exe
Resource
win7-20230831-en
General
-
Target
2023-08-26_7a1fecb471693c58c8aaec76e1e44d86_mafia_magniber_JC.exe
-
Size
1.5MB
-
MD5
7a1fecb471693c58c8aaec76e1e44d86
-
SHA1
a40711b20217a342871a649a745830315c4cdfe9
-
SHA256
540412d0a44c1769ace56ff89206ebadf5a96eb8e6eed27a56a20340923ab26a
-
SHA512
dc4799d30ab3aa41b3e353c035e8a33423de10cc476a12e0a052cce77729bdd9b9e5d88bd16d560561f34a32790c3239d66420167e8f4614d0e3505d2bd9dae7
-
SSDEEP
24576:50LmbD+J0lTbM0nVeFB/gAEl8l9Pk887iFw8AIpV15vPYF27:50z0V/nVezgblKpk887iwvq3Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_7a1fecb471693c58c8aaec76e1e44d86_mafia_magniber_JC.exe
Files
-
2023-08-26_7a1fecb471693c58c8aaec76e1e44d86_mafia_magniber_JC.exe.exe windows:5 windows x86
820b9bdb0b66659f8f66b12aaa27076a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedCompareExchange
InitializeCriticalSection
LocalFree
lstrlenW
CreateMutexW
GetCommandLineW
GetLastError
GetTickCount
GetACP
ExitProcess
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
GetCurrentDirectoryW
SetCurrentDirectoryW
LoadLibraryW
GetFileType
DuplicateHandle
DosDateTimeToFileTime
SetFileTime
MulDiv
InterlockedIncrement
InterlockedDecrement
HeapFree
HeapAlloc
DecodePointer
EncodePointer
ExitThread
SystemTimeToFileTime
CreateThread
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
HeapReAlloc
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
GetStdHandle
IsProcessorFeaturePresent
GetCPInfo
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringW
GetLocaleInfoW
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
HeapSize
GetStringTypeW
GetConsoleCP
GetConsoleMode
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileA
SetEndOfFile
GetProcessHeap
GetLocalTime
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingW
CreateFileW
ReadFile
SetFilePointer
GetFileSize
GetFileInformationByHandle
FileTimeToSystemTime
GetCurrentProcess
GetProcAddress
GetModuleHandleW
CloseHandle
CreateProcessW
OutputDebugStringA
WideCharToMultiByte
SetEnvironmentVariableW
GetEnvironmentVariableW
MultiByteToWideChar
CreateDirectoryW
ResumeThread
GetModuleFileNameW
user32
GetMessageW
wsprintfW
DefWindowProcW
EnableWindow
LoadImageW
GetSystemMetrics
CallWindowProcW
GetPropW
SetPropW
AdjustWindowRectEx
GetMenu
RegisterClassW
RegisterClassExW
GetClassInfoExW
CharNextW
MoveWindow
IntersectRect
DrawTextW
FillRect
CharPrevW
SetRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
ClientToScreen
GetSysColor
DrawIconEx
InvalidateRgn
CreateAcceleratorTableW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetUpdateRect
BeginPaint
EndPaint
TranslateMessage
UpdateLayeredWindow
MapWindowPoints
CreateWindowExW
GetFocus
SetFocus
DestroyWindow
ReleaseDC
PtInRect
ReleaseCapture
SetCapture
KillTimer
SetTimer
InvalidateRect
GetDC
GetKeyState
SendMessageW
SetWindowLongW
MessageBoxW
IsWindow
GetWindowRect
SetWindowRgn
GetWindowLongW
IsZoomed
GetMonitorInfoW
IsIconic
LoadCursorW
SetCursor
UnionRect
InflateRect
OffsetRect
SetWindowPos
PostMessageW
PostQuitMessage
ScreenToClient
GetClientRect
DispatchMessageW
ShowWindow
GetParent
GetCursorPos
IsRectEmpty
GetWindow
MonitorFromWindow
advapi32
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
shell32
CommandLineToArgvW
ole32
CLSIDFromProgID
OleLockRunning
CoCreateInstance
CoCreateGuid
CoUninitialize
CoInitialize
CLSIDFromString
shlwapi
PathRemoveFileSpecW
PathFileExistsW
wininet
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
msimg32
AlphaBlend
gdi32
StretchBlt
CreateDIBSection
SetBkMode
SetBkColor
SetTextColor
SetStretchBltMode
RestoreDC
ExtTextOutW
CreateSolidBrush
LineTo
MoveToEx
CreatePenIndirect
RoundRect
CombineRgn
BitBlt
Rectangle
SetWindowOrgEx
GetTextExtentPoint32W
GetCharABCWidthsW
GdiFlush
CreateRoundRectRgn
GetTextMetricsW
SelectObject
GetDeviceCaps
GetObjectA
DeleteDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
SaveDC
TextOutW
DeleteObject
CreateFontIndirectW
GetObjectW
GetStockObject
CreatePen
oleaut32
SysAllocString
VariantInit
VariantClear
SysFreeString
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
comctl32
ord17
_TrackMouseEvent
gdiplus
GdiplusShutdown
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFont
GdiplusStartup
GdipCreateLineBrushI
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipSetTextRenderingHint
GdipDrawString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneBrush
Sections
.text Size: 548KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 600KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE