TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
2023-08-25_6489eac17d82bb97bcae69ebe2f504bd_magniber_pos_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_6489eac17d82bb97bcae69ebe2f504bd_magniber_pos_JC.exe
Resource
win10v2004-20230915-en
Target
2023-08-25_6489eac17d82bb97bcae69ebe2f504bd_magniber_pos_JC.exe
Size
26.6MB
MD5
6489eac17d82bb97bcae69ebe2f504bd
SHA1
83e3f12c3d15ffe247bbdeb29bf784c80b200617
SHA256
516f9cafd52e0734b8708889f05c494d93d4a4eedffdde58987b02ffe925743a
SHA512
350277d123b4f5f8cb4c6b590c1b9acbe11c9a66b7c1e6ac266207bbde919b14509a8a20187c9278e528bb8fa9833394f38d5175706970c9c2c255a02bbcd34d
SSDEEP
393216:MzTbO5z8W8U2foOnK70EBKcWYlXqpt6DNcwy:MuttHGxv+11DNQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2023-08-25_6489eac17d82bb97bcae69ebe2f504bd_magniber_pos_JC.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE