Static task
static1
Behavioral task
behavioral1
Sample
2023-08-25_89d5576b336c1e28f2ad2fa048debf6c_magniber_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_89d5576b336c1e28f2ad2fa048debf6c_magniber_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_89d5576b336c1e28f2ad2fa048debf6c_magniber_JC.exe
-
Size
1.1MB
-
MD5
89d5576b336c1e28f2ad2fa048debf6c
-
SHA1
f8f873e7bef4b42bb7e44f62f8d88dd077867c34
-
SHA256
2a337e8a52e57308f89cfc71bc88d7f9390e7f014b8144d7f6879d0cf1477cb5
-
SHA512
338a831894ce4aafe8327afa631beaa9fbbb7e80f817226548afac0cf7e4704ae5b4853f1a722eeafd948376fd6ddb271a11d1b49ee54d2a14ccc61dbab6979f
-
SSDEEP
24576:R5FDdp9kLj9QtER+jodE6MRowefCm7UMjg6Ae/TVVvPW1Xk:frog/oxMRowefCm7UMRAwPvPW1Xk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_89d5576b336c1e28f2ad2fa048debf6c_magniber_JC.exe
Files
-
2023-08-25_89d5576b336c1e28f2ad2fa048debf6c_magniber_JC.exe.exe windows:5 windows x86
cf70e995538f4629ea582d3ea36cb4eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
gdiplus
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageWidth
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImageHeight
steam_api
SteamAPI_Init
SteamAPI_Shutdown
SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamAPI_GetHSteamPipe
SteamInternal_CreateInterface
SteamAPI_GetHSteamUser
SteamInternal_ContextInit
shell32
SHGetKnownFolderPath
winmm
timeGetTime
audiow32
ord137
ord136
ord135
ord134
ord133
ord132
ord128
ord127
ord126
ord125
ord124
ord123
ord139
ord121
ord119
ord118
ord117
ord116
ord115
ord110
ord109
ord148
ord107
ord106
ord103
ord102
ord122
ord142
ord143
ord144
ord145
kernel32
FindFirstFileExA
ReadConsoleW
GetStringTypeW
DecodePointer
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetCurrentThread
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
ReadFile
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlUnwind
LocalFree
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
LCMapStringW
MoveFileExW
CopyFileW
GetCurrentProcess
Sleep
CloseHandle
FindFirstFileExW
OpenSemaphoreA
OutputDebugStringA
SetPriorityClass
GetModuleFileNameW
GetVersionExA
GetLastError
CreateDirectoryA
FindClose
FindFirstFileA
FindNextFileA
QueryPerformanceCounter
QueryPerformanceFrequency
CreateDirectoryExW
GetWindowsDirectoryW
DeviceIoControl
SetFileTime
SetFilePointerEx
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
GetFullPathNameW
GetFileTime
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileW
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
GetTimeZoneInformation
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
OutputDebugStringW
CreateThread
SetStdHandle
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
FormatMessageW
GetTickCount
CreateSemaphoreA
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
user32
IsZoomed
OffsetRect
ClientToScreen
ClipCursor
SetCursorPos
ShowCursor
MessageBoxA
EndPaint
BeginPaint
PostQuitMessage
DefWindowProcA
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
FillRect
ScrollDC
ReleaseDC
GetDC
LoadIconA
LoadCursorA
SetWindowLongA
CopyRect
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetSystemMetrics
SetFocus
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassExA
gdi32
SetBrushOrgEx
SetDIBColorTable
CreateDIBSection
SetStretchBltMode
StretchBlt
SetDIBitsToDevice
SelectPalette
SelectObject
RealizePalette
DeleteDC
CreateSolidBrush
CreatePalette
CreateCompatibleDC
BitBlt
GdiFlush
DeleteObject
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
ole32
CoTaskMemFree
Sections
.text Size: 785KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ