2023-08-26_5cf6a0a5dbbdcac78323d30ca0fd413d_magniber_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-26_5cf6a0a5dbbdcac78323d30ca0fd413d_magniber_JC.exe
Size

1.0MB
MD5

5cf6a0a5dbbdcac78323d30ca0fd413d
SHA1

3a895517ca6b38d610316e86108011638cdc0fbb
SHA256

72f03b4d9b1f1ce7559f743c12d7b349ac6b51b5403a06625182cf5984362ba2
SHA512

43a49b6cac4af2401c65d219fd847a570f08c8ab84a4d96625504c6f21b38a24b4f70dbd9df83a8adaea3294577a07b8279befc6a495b48dfaeda48b3e1d1605
SSDEEP

24576:3bJjS68utp8Tmxlm52j1zjclFqCmUcUkPPY:3VR8QBXwFmEknY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-26_5cf6a0a5dbbdcac78323d30ca0fd413d_magniber_JC.exe

Files

2023-08-26_5cf6a0a5dbbdcac78323d30ca0fd413d_magniber_JC.exe
.exe windows:5 windows x86

ef1355be696c8edbc01c2fd8d83c1ada

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
getsockname
bind
listen
WSAStartup
socket
ioctlsocket
connect
__WSAFDIsSet
getsockopt
recv
send
select
closesocket
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
inet_addr

kernel32

GetACP
FreeLibrary
CreateProcessW
MultiByteToWideChar
GetStdHandle
GetProcAddress
LoadLibraryA
CloseHandle
CreateMutexW
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreW
FindFirstFileW
InitializeCriticalSectionAndSpinCount
RaiseException
FindClose
DecodePointer
FindNextFileW
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
CreateMutexA
ReleaseMutex
InterlockedCompareExchange
GetCurrentThreadId
TlsFree
Sleep
TlsAlloc
InterlockedIncrement
TlsSetValue
TlsGetValue
GetSystemDirectoryA
GetCPInfo
FileTimeToLocalFileTime
GetFileInformationByHandle
GetLastError
lstrlenA
GetFullPathNameA
SetEnvironmentVariableA
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidCodePage
GetModuleHandleW
IsValidLocale
GetLocaleInfoW
CompareStringW
OutputDebugStringW
GetStringTypeW
SwitchToThread
GetCurrentProcessId
FreeEnvironmentStringsW
GetCommandLineW
GetEnvironmentVariableW
GetLocalTime
GetTickCount
GetCurrentThread
GetOverlappedResult
WriteFile
ReadFile
ConnectNamedPipe
VirtualAlloc
VirtualFree
GetCurrentProcess
GetEnvironmentStringsW
SetThreadPriority
GetThreadPriority
SetEvent
ResetEvent
WaitForMultipleObjects
UnlockFile
LockFileEx
GetFileSizeEx
SetStdHandle
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
DuplicateHandle
GetNamedPipeInfo
PeekNamedPipe
SetUnhandledExceptionFilter
CreateEventW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
SetEnvironmentVariableW
GetTempPathW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
CreateFileW
GetFileAttributesExW
CreateNamedPipeW
LocalAlloc
LocalReAlloc
LocalFree
FormatMessageW
LCMapStringW
RtlCaptureStackBackTrace
SetFilePointer
GetSystemTimeAsFileTime
TerminateProcess
GetCommandLineA
EncodePointer
HeapFree
CreateThread
ExitThread
GetTimeZoneInformation
ExitProcess
AreFileApisANSI
WideCharToMultiByte
HeapReAlloc
HeapAlloc
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
RtlUnwind
IsProcessorFeaturePresent
SetLastError
GetProcessHeap
GetFileType
GetStartupInfoW
QueryPerformanceCounter
IsDebuggerPresent
HeapSize
GetConsoleCP
GetConsoleMode
UnhandledExceptionFilter
ReadConsoleW

user32

CreateWindowExW
SetWindowLongW
KillTimer
SetTimer
GetWindowLongW
RegisterClassW
DefWindowProcW
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
PostQuitMessage
DestroyWindow
MsgWaitForMultipleObjectsEx

ole32

CoSetProxyBlanket
CoUninitialize
CoInitializeSecurity
CoInitializeEx
OleRun
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

advapi32

GetUserNameW

shell32

ShellExecuteExW
SHCreateDirectoryExW
CommandLineToArgvW

Sections

.text
Size: 702KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef1355be696c8edbc01c2fd8d83c1ada

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

ole32

oleaut32

advapi32

shell32

Sections

.text Size: 702KB - Virtual size: 702KB

.rdata Size: 186KB - Virtual size: 185KB

.data Size: 20KB - Virtual size: 41KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 46KB - Virtual size: 46KB

.reloc Size: 106KB - Virtual size: 108KB

.text
Size: 702KB - Virtual size: 702KB

.rdata
Size: 186KB - Virtual size: 185KB

.data
Size: 20KB - Virtual size: 41KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 46KB - Virtual size: 46KB

.reloc
Size: 106KB - Virtual size: 108KB