2024-01-01_02aa1c08fffcda4ce642ecf8f21b2934_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-01_02aa1c08fffcda4ce642ecf8f21b2934_magniber
Size

675KB
MD5

02aa1c08fffcda4ce642ecf8f21b2934
SHA1

70e87fa68f2afec9e4f8a56f62582b8bc8da42b3
SHA256

4cd8708eed16ee62975592882e587022b3358d5a208d25d2abf0b43b67b1724f
SHA512

cb994fa6d26f4c6b6daa713aa78e93145a9e9b23808cd2188876b58ca34576135958e35778fa95a9890da065240d100419c699bf4d038d4c7c5d9921b74e2e28
SSDEEP

12288:TJX6pfyHcdnpKCbBgHTrjXVJrDs9HFhPfskBflSBvWt:TJX6pKHcdnpKC4Trj/cxfsIMWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-01_02aa1c08fffcda4ce642ecf8f21b2934_magniber

Files

2024-01-01_02aa1c08fffcda4ce642ecf8f21b2934_magniber
.exe windows:5 windows x86 arch:x86

a64480b5952c812e93e51c47ffd7d342

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

imm32

ImmAssociateContext

kernel32

GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetModuleHandleA
ExitProcess
SetThreadExecutionState
SetPriorityClass
GetCurrentProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
WriteConsoleW
GetConsoleOutputCP
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
RaiseException
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
CreateFileA
SetHandleCount
ReadFile
SetFilePointer
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStartupInfoA
GetCommandLineA
RtlUnwind
CreateThread
WriteFile
MultiByteToWideChar
GlobalFree
AllocConsole
SetConsoleTitleA
GetConsoleWindow
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleWindowInfo
SetConsoleScreenBufferSize
CreateProcessA
WriteConsoleA
SetConsoleTextAttribute
SetConsoleCtrlHandler
FreeConsole
ReadConsoleInputA
CreateFileW
DeleteFileA
GetCurrentThreadId
ExitThread
HeapFree
HeapAlloc
WideCharToMultiByte
GetLastError
GetConsoleCP
Sleep
GetVersionExA
WaitForSingleObject
GetFileAttributesA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetLocalTime
GetLongPathNameA
GetCurrentDirectoryA
GetModuleFileNameA
GetFullPathNameA
GetFileType
CloseHandle
SetEndOfFile
GetProcessHeap
FreeEnvironmentStringsA

user32

BeginPaint
DefWindowProcA
SetWindowLongA
GetWindowLongA
EnableMenuItem
GetMenu
GetMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
GetAsyncKeyState
FindWindowA
GetForegroundWindow
SetWindowPos
RemoveMenu
GetSystemMenu
EndPaint
ReleaseDC
GetDC
SetRect
UpdateWindow
CheckMenuItem
CheckMenuRadioItem
SetMenuItemInfoA
AppendMenuA
DeleteMenu
DrawMenuBar
GetMenuItemID
GetSubMenu
PostMessageA
MapVirtualKeyA
GetMenuItemCount
SetMenu
ShowWindow
DestroyMenu
IsMenu
InvalidateRect
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
TranslateAcceleratorA
SetWindowTextA
SendInput
DestroyWindow
PostQuitMessage
DialogBoxParamA
CreateWindowExA
SendMessageA
CallWindowProcA
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
OpenClipboard
GetClipboardData
CloseClipboard
AdjustWindowRect
ChangeDisplaySettingsA
GetClientRect
SetCursorPos
EnumDisplaySettingsA
GetWindowRect
LoadMenuA

gdi32

TextOutA
GetDeviceCaps
GetTextMetricsA
SetTextColor
SetBkMode
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
CreateDIBSection
SetStretchBltMode
BitBlt
GetStockObject
SelectObject
DeleteObject

comdlg32

GetOpenFileNameA

shell32

DragQueryFileA
DragAcceptFiles
DragFinish

ole32

CreateStreamOnHGlobal

wsock32

WSAStartup
recv
WSACleanup
closesocket
shutdown
send
inet_ntoa
accept
listen
setsockopt
bind
htons
htonl
socket

comctl32

ord6
ord17

gdiplus

GdiplusStartup
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipCreateFromHDC
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown

avifil32

AVIStreamSetFormat
AVIFileInit
AVIFileOpenA
AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIStreamWrite
AVIMakeCompressedStream
AVISaveOptionsFree
AVISaveOptions
AVIFileCreateStreamA

dsound

ord1

dinput8

DirectInput8Create

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a64480b5952c812e93e51c47ffd7d342

Headers

DLL Characteristics

File Characteristics

Imports

winmm

imm32

kernel32

user32

gdi32

comdlg32

shell32

ole32

wsock32

comctl32

gdiplus

avifil32

dsound

dinput8

Sections

.text Size: 323KB - Virtual size: 323KB

.rdata Size: 85KB - Virtual size: 85KB

.data Size: 10KB - Virtual size: 67KB

.rsrc Size: 255KB - Virtual size: 254KB

.text
Size: 323KB - Virtual size: 323KB

.rdata
Size: 85KB - Virtual size: 85KB

.data
Size: 10KB - Virtual size: 67KB

.rsrc
Size: 255KB - Virtual size: 254KB