TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
2023-08-26_0008a2d7f1ad16743ea33b14345ca7e3_magniber_pos_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_0008a2d7f1ad16743ea33b14345ca7e3_magniber_pos_JC.exe
Resource
win10v2004-20230915-en
Target
2023-08-26_0008a2d7f1ad16743ea33b14345ca7e3_magniber_pos_JC.exe
Size
26.6MB
MD5
0008a2d7f1ad16743ea33b14345ca7e3
SHA1
3663b6b899bb49c544a4e765b1ff67425f5594e1
SHA256
fa71c0f0211e9b0ac8033a5390e704d10155a94666515f8cd61962b49b11f835
SHA512
8ab6862a41ac8c1fe6fb4e7f0bf36684e5eb77237572adee9f26ea6ea79b7356fcd8a429ed2200cc96b42b4af8cf748540adb3a6b0f980bfbe66fb28fdc8dab0
SSDEEP
393216:MzTbO5z8W8U2foOnK70EBKcWYl0cpt6DNcwy:MuttHGxv+qnDNQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2023-08-26_0008a2d7f1ad16743ea33b14345ca7e3_magniber_pos_JC.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE