2023-08-25_bdde243a240c67a746a9cdcb90c5be91_magniber_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-25_bdde243a240c67a746a9cdcb90c5be91_magniber_JC.exe
Size

9.2MB
MD5

bdde243a240c67a746a9cdcb90c5be91
SHA1

d056f68df7767e738d95434178d928f6457f47b8
SHA256

1fb371f7aba2c2adc3d54d916d79434de64bcd8147bf13de38b1f5e3f8cfdbbc
SHA512

afb0e4c5a96a5b115efa3cab530851c1bf8e506c547646f8e014a889ecaf5f3a566af86d22630afaec1e1fe24e1a8a86947bee89da6b7d3f4e9a40d64f73d823
SSDEEP

196608:WFGTqqlUgN7AktVweDO+oPG5eWWi/zio/i:S2O+o+wWrX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-25_bdde243a240c67a746a9cdcb90c5be91_magniber_JC.exe

Files

2023-08-25_bdde243a240c67a746a9cdcb90c5be91_magniber_JC.exe
.exe windows:5 windows x86

935e202c089d1bc72385370e3b3ebdab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

psapi

GetModuleFileNameExW

ws2_32

recvfrom
ioctlsocket
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect
WSACreateEvent
setsockopt
WSAGetLastError
WSAStartup
WSACleanup
htonl
ntohs
ntohl
recv
connect
socket
send
WSAJoinLeaf
getpeername
WSASocketW
sendto
inet_addr
closesocket
htons
bind
gethostname
freeaddrinfo
getaddrinfo
WSASetLastError
getsockopt
getsockname
__WSAFDIsSet
accept
gethostbyname
select
listen

imm32

ImmDisableIME

kernel32

GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
GetPrivateProfileSectionW
GetModuleHandleW
GetFileSize
ReadFile
SetFilePointer
WriteFile
GetVersion
GetExitCodeProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentProcess
OpenProcess
TerminateProcess
GetFileAttributesW
FindFirstFileW
RemoveDirectoryW
MoveFileExW
DeleteFileW
FindNextFileW
FindClose
CopyFileW
GetLocaleInfoW
WriteProcessMemory
GetCurrentProcessId
GetCurrentThreadId
SetErrorMode
InitializeCriticalSection
SearchPathW
WaitForMultipleObjects
SetUnhandledExceptionFilter
VirtualAllocEx
lstrcpynW
ExpandEnvironmentStringsW
GetACP
FormatMessageW
FreeResource
GetTickCount
GetVersionExW
DeviceIoControl
GetDriveTypeW
GetDiskFreeSpaceExW
GetLogicalDrives
OutputDebugStringW
GetWindowsDirectoryW
CreateDirectoryW
CreatePipe
SetHandleInformation
PeekNamedPipe
LoadLibraryExW
RaiseException
DecodePointer
SetLastError
lstrcmpiW
ResetEvent
GetLocalTime
SystemTimeToFileTime
GetLongPathNameW
GetTempFileNameW
lstrlenW
GetComputerNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCommandLineW
GetFileAttributesExW
GetUserDefaultUILanguage
TlsSetValue
GetQueuedCompletionStatus
PostQueuedCompletionStatus
TlsAlloc
TlsGetValue
TlsFree
CreateIoCompletionPort
IsDebuggerPresent
GetSystemDefaultLangID
GetSystemInfo
SwitchToThread
LoadLibraryA
IsBadReadPtr
IsBadWritePtr
GetVersionExA
SetEndOfFile
CreateFileA
CreateDirectoryA
GetPrivateProfileIntA
UnmapViewOfFile
GetStdHandle
GetCPInfo
GetUserDefaultLCID
IsValidLocale
GetConsoleCP
ReadConsoleW
GetConsoleMode
ExitProcess
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
QueryPerformanceCounter
GetStartupInfoW
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
EncodePointer
GetStringTypeW
WriteConsoleW
SetEnvironmentVariableA
GlobalMemoryStatusEx
UnhandledExceptionFilter
WaitForSingleObjectEx
SetEvent
ExpandEnvironmentStringsA
GetFileType
FormatMessageA
SleepEx
GlobalLock
GlobalAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
CreateEventW
DeleteCriticalSection
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
InterlockedExchange
InterlockedCompareExchange
CreateProcessW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
GetLastError
CreateFileW
LocalFree
LocalAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
WideCharToMultiByte
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexW
MultiByteToWideChar
GetPrivateProfileStringA
MapViewOfFile
EnumSystemLocalesW
FlushFileBuffers
GetFullPathNameW
SetStdHandle
GetTimeZoneInformation
FindFirstFileExW
IsDBCSLeadByte

user32

FlashWindow
MessageBoxW
ReleaseCapture
LoadIconW
SetCursor
PtInRect
EqualRect
DrawFrameControl
DrawTextW
DrawIconEx
CopyRect
DispatchMessageW
TranslateMessage
TrackPopupMenu
SendMessageTimeoutW
CopyImage
SetWindowTextW
LoadImageW
GetDlgCtrlID
SetCapture
SetTimer
IsWindowVisible
EndPaint
BeginPaint
GetSystemMenu
PostThreadMessageW
GetKeyState
CallWindowProcW
GetActiveWindow
MsgWaitForMultipleObjects
SetWindowLongW
GetWindowLongW
CreateWindowExW
DestroyWindow
SendMessageW
MoveWindow
SetWindowPos
GetWindowRect
GetClientRect
ClientToScreen
MapWindowPoints
GetDC
GetWindowDC
ReleaseDC
InvalidateRect
ShowWindow
PostMessageW
GetWindowTextW
GetWindowTextLengthW
GetSysColor
GetFocus
PostQuitMessage
KillTimer
GetQueueStatus
MsgWaitForMultipleObjectsEx
WaitMessage
IsWindowEnabled
EnableWindow
SetActiveWindow
GetWindow
GetParent
GetDlgItem
SetWindowRgn
IsWindow
MonitorFromWindow
GetMonitorInfoW
LoadStringW
UnregisterClassW
CharNextW
GetDesktopWindow
DefWindowProcW
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
PeekMessageW
GetMessageW
OffsetRect
InflateRect
SetRect

gdi32

GetStockObject
GetObjectW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
GetTextMetricsW
CreateFontIndirectW
CreateDIBSection
SetBkColor
ExtTextOutW
StretchBlt
CreateRectRgn
CombineRgn
CreateBitmap
SetTextColor
CreatePen
CreateRectRgnIndirect
Rectangle
OffsetRgn
SetRectRgn
MoveToEx
LineTo
GetTextExtentPoint32W
SetBkMode
TextOutW
RoundRect
SelectClipRgn
GetClipRgn
RestoreDC
SaveDC
RectInRegion
DeleteDC
SelectObject
GetCurrentObject

advapi32

CloseServiceHandle
SystemFunction036
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExA
RegEnumKeyW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
QueryServiceStatusEx
RegOpenKeyExW
ControlService
OpenServiceW
OpenSCManagerW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueW
LookupPrivilegeNameW
GetTokenInformation
OpenProcessToken
RegCloseKey
RegQueryValueExW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathA
ShellExecuteW
CommandLineToArgvW

ole32

CoCreateGuid
CoTaskMemRealloc
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysStringLen
SysAllocString
SysFreeString
VarUI4FromStr
OleLoadPicture

shlwapi

SHDeleteKeyW
wnsprintfW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
StrToIntA
PathAddBackslashW
PathAppendW
StrStrIA
StrStrIW

imagehlp

UnMapAndLoad
MapAndLoad

winmm

timeKillEvent
timeSetEvent

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetQueryOptionW
InternetSetOptionW
InternetReadFile
InternetCloseHandle
HttpQueryInfoW
InternetCrackUrlW
InternetCanonicalizeUrlW
DeleteUrlCacheEntryW
InternetCreateUrlW

comctl32

_TrackMouseEvent

gdiplus

GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdiplusStartup
GdipDrawImageI
GdipLoadImageFromStream
GdipFree
GdipDisposeImage
GdipAlloc
GdipCreateBitmapFromStream
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipDeleteGraphics
GdipDrawImageRectRectI
GdipCloneImage
GdipCreateFromHDC

urlmon

URLDownloadToFileW

iphlpapi

GetIpForwardTable

netapi32

NetWkstaTransportEnum
NetApiBufferFree
Netbios

wldap32

ord301
ord200
ord30
ord79
ord35
ord33
ord143
ord46
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord32

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QMGuid
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

935e202c089d1bc72385370e3b3ebdab

Headers

DLL Characteristics

File Characteristics

Imports

version

psapi

ws2_32

imm32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

imagehlp

winmm

wininet

comctl32

gdiplus

urlmon

iphlpapi

netapi32

wldap32

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 360KB - Virtual size: 360KB

.data Size: 17KB - Virtual size: 24KB

.gfids Size: 1024B - Virtual size: 1012B

.tls Size: 512B - Virtual size: 9B

.QMGuid Size: 512B - Virtual size: 20B

.rsrc Size: 7.5MB - Virtual size: 7.5MB

.reloc Size: 72KB - Virtual size: 72KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 360KB - Virtual size: 360KB

.data
Size: 17KB - Virtual size: 24KB

.gfids
Size: 1024B - Virtual size: 1012B

.tls
Size: 512B - Virtual size: 9B

.QMGuid
Size: 512B - Virtual size: 20B

.rsrc
Size: 7.5MB - Virtual size: 7.5MB

.reloc
Size: 72KB - Virtual size: 72KB