TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
2023-08-26_18232245b150d8e929d40a1fb7860a53_magniber_pos_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_18232245b150d8e929d40a1fb7860a53_magniber_pos_JC.exe
Resource
win10v2004-20230915-en
Target
2023-08-26_18232245b150d8e929d40a1fb7860a53_magniber_pos_JC.exe
Size
26.6MB
MD5
18232245b150d8e929d40a1fb7860a53
SHA1
a2dbf63a00cfcf5b6390b561d8263a1d63c56479
SHA256
dd283a142f3e9bc58e75a223b816bf2330d07ca629ec1026c3e9cb46829b38d0
SHA512
9360fe899f7710732b769c75d987a8706d9fa0b7208551d854eb87801cfed79286d25d2299f204371ced072757f8a96534668af9c9eb2ec0d875ea58c8b9fb43
SSDEEP
393216:MzTbO5z8W8U2foOnK70EBKcWYlY/pt6DNcwy:MuttHGxv+eGDNQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2023-08-26_18232245b150d8e929d40a1fb7860a53_magniber_pos_JC.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE