2024-01-08_d8ce6b3b137d0bbd2dd9e19b5e9d7174_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-08_d8ce6b3b137d0bbd2dd9e19b5e9d7174_magniber
Size

3.4MB
MD5

d8ce6b3b137d0bbd2dd9e19b5e9d7174
SHA1

8f596eabae5fc5fe79b2d54e7d1283d4c89fdc55
SHA256

7d90c0d6df6f6e14a041dba5f20d955717c964bc96973694f1d4fdb5a80e83d7
SHA512

4b118a1bb1595d71980990ef88e7a4ec6dedc66cbbf705c871098fc146dc0869867595501ce6e492597c096b36326e31d3f6dd5c39b7b7373c20014a42f7018a
SSDEEP

98304:fMsGDCWEBNRkQkzqc5CODylPV9zH/OnOqHs:NGDrEPRkQkzvDUt9bGj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-08_d8ce6b3b137d0bbd2dd9e19b5e9d7174_magniber

Files

2024-01-08_d8ce6b3b137d0bbd2dd9e19b5e9d7174_magniber
.exe windows:6 windows x86 arch:x86

3958e6e38867b26faccb6637ae75f6eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
CreateThread
MoveFileW
GetTempFileNameW
CopyFileW
GetCurrentProcessId
MoveFileExW
GetLocalTime
DeleteFileW
FormatMessageW
WritePrivateProfileStringW
LoadLibraryExW
lstrcmpiW
MultiByteToWideChar
ExitThread
GetCurrentThreadId
CreateMutexW
GetCommandLineW
MapViewOfFile
CreateFileMappingW
ResetEvent
GetSystemInfo
CloseHandle
SetEvent
CreateEventW
UnmapViewOfFile
CreateFileW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
LoadLibraryW
GetModuleFileNameW
lstrcpynW
GetCurrentProcess
FindResourceW
LoadResource
FindResourceExW
LockResource
SizeofResource
GetModuleHandleW
GetProcessHeap
DeleteCriticalSection
LocalFree
lstrcmpA
DeviceIoControl
WriteConsoleW
SetFilePointerEx
ReadConsoleW
SetStdHandle
OutputDebugStringA
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetEnvironmentVariableA
GetProcAddress
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetTempPathW
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetFileType
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
RtlUnwind
WaitForMultipleObjectsEx
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
ReleaseSemaphore
DuplicateHandle
SetProcessAffinityMask
VirtualProtect
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
lstrlenA
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
QueryPerformanceFrequency
QueryPerformanceCounter
TryEnterCriticalSection
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
GetPrivateProfileStringW
GetOEMCP
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
GetLastError
HeapSize
LocalAlloc
InitializeCriticalSectionEx
HeapFree
ResumeThread
Sleep
GetCurrentDirectoryW
SearchPathW
CreateDirectoryW
GetFullPathNameW
GetShortPathNameW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetSystemDirectoryW
GetWindowsDirectoryW
lstrlenW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextFileW
GetLogicalDriveStringsW
CompareFileTime
GetFileInformationByHandle
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GetStdHandle
GetFileAttributesExW
GetFileAttributesW
SetLastError
GetDiskFreeSpaceExW
QueryDosDeviceW
OpenProcess
GetTickCount
WideCharToMultiByte
GetLongPathNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetFileSizeEx
WaitForMultipleObjects
TerminateProcess
GetExitCodeProcess
GetEnvironmentVariableW
GetVersionExW
CreateFileA
DeleteFileA
GetTempPathA
GetTempFileNameA
SetCurrentDirectoryW
MulDiv
FreeResource
GetACP
lstrcmpW
FileTimeToLocalFileTime
GetFileTime
LocalFileTimeToFileTime
GetSystemTime
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
IsBadReadPtr
GetVersion
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
RtlCaptureStackBackTrace

user32

SendMessageW
PostQuitMessage
LoadImageW
GetMessageW
DefWindowProcW
FindWindowExW
SendMessageTimeoutW
DispatchMessageW
PeekMessageW
IsWindowEnabled
InvalidateRgn
CreateAcceleratorTableW
GetMonitorInfoW
GetWindowDC
RedrawWindow
SetLayeredWindowAttributes
SetForegroundWindow
GetSysColor
ClientToScreen
MonitorFromWindow
CharNextW
TranslateMessage
MessageBoxW
GetSystemMetrics
PostMessageW
DestroyWindow
ScreenToClient
IsWindow
UnregisterClassW
wsprintfW
GetShellWindow
GetWindowThreadProcessId
FindWindowW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
GetWindowLongW
SetWindowLongW
LoadCursorW
IsChild
UpdateLayeredWindow
SetWindowPos
IsWindowVisible
IsZoomed
SetFocus
GetFocus
GetKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
GetWindowRect
GetCursorPos
CreateCaret
GetCaretBlinkTime
SetCaretPos
MapWindowPoints
IntersectRect
UnionRect
GetClassNameW
PtInRect
GetParent
IsRectEmpty
GetWindow
IsIconic
EnableWindow
SetWindowRgn
SetPropW
RemovePropW
RegisterClassW
ShowWindow
GetMenu
GetPropW
AdjustWindowRectEx
SystemParametersInfoW
wvsprintfW
SetCursor
InflateRect
OffsetRect
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MonitorFromPoint
CopyRect
CopyImage
CharPrevW
DrawTextW
SetRect
DestroyIcon
DrawIconEx
GetIconInfo
GetMessagePos
MoveWindow
GetDlgCtrlID
DrawFocusRect
FillRect
HideCaret
ShowCaret

advapi32

RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
GetUserNameW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegCreateKeyW
CryptDestroyHash
RegDeleteValueW
GetExplicitEntriesFromAclW
EqualSid
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
DeleteAce
GetTrusteeNameW
LookupAccountSidW
LookupAccountNameW
RegSetValueExW
OpenProcessToken
AdjustTokenPrivileges
DuplicateTokenEx
LookupPrivilegeValueW
RegEnumValueW
RegQueryValueExW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetKeyParam
CryptGetHashParam
CryptImportKey
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptHashData
CheckTokenMembership

shell32

SHChangeNotify
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ShellExecuteExW
ord165
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHFileOperationW

ole32

CoCreateGuid
OleUninitialize
CoInitialize
OleRun
CreateStreamOnHGlobal
StringFromGUID2
CLSIDFromString
OleLockRunning
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
OleInitialize
CoTaskMemRealloc
CLSIDFromProgID

oleaut32

SafeArrayCreate
VarUI4FromStr
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
CreateErrorInfo
SetErrorInfo
GetErrorInfo
SafeArrayPutElement
SysFreeString
VariantChangeType
VariantInit
SysStringLen
VariantCopy

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathAppendW
PathIsRelativeW
PathCombineW
PathIsDirectoryW
PathFindExtensionW
wnsprintfW
AssocQueryStringW
StrStrIW
SHAutoComplete
PathRenameExtensionA
SHSetValueW
SHSetValueA
PathIsRootW
PathFindFileNameA
PathFileExistsW
PathIsPrefixW
StrToIntExW
PathCompactPathW
SHGetValueW

comctl32

ImageList_DrawEx
ImageList_GetIconSize
_TrackMouseEvent
ord17
InitCommonControlsEx

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msimg32

AlphaBlend
GradientFill

gdiplus

GdiplusShutdown
GdiplusStartup
GdipAlloc
GdipFree
GdipCreatePath
GdipDeletePath
GdipAddPathLineI
GdipAddPathArcI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipSetPenDashStyle
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDrawLineI
GdipDrawRectangleI
GdipDrawPath
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromStreamICM
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipFillEllipseI
GdipClosePathFigure
GdipCreateTexture
GdipCloneImage
GdipDisposeImage
GdipDrawEllipseI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipAddPathArc
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSetInterpolationMode
GdipGraphicsClear
GdipFillPath
GdipDrawImagePointsI
GdipDrawImageRectRectI
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToFile

psapi

EnumProcesses
GetProcessImageFileNameW
GetModuleFileNameExW

iphlpapi

GetAdaptersInfo

wininet

InternetGetConnectedState

urlmon

URLDownloadToCacheFileW
URLDownloadToFileW

setupapi

SetupIterateCabinetW

crypt32

CryptStringToBinaryW
CryptBinaryToStringA
CryptBinaryToStringW
CryptStringToBinaryA

netapi32

Netbios

gdi32

CreateDCW
GetTextColor
ExtTextOutW
TextOutW
SetDIBColorTable
CreateDIBSection
SetStretchBltMode
StretchBlt
SetBkColor
ExtSelectClipRgn
SelectClipRgn
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateRectRgnIndirect
CombineRgn
GetDeviceCaps
SetTextColor
SetBkMode
CreateSolidBrush
CreateRoundRectRgn
SetWindowOrgEx
GetObjectW
GetTextMetricsW
SelectObject
SetDIBitsToDevice
GetDIBits
SaveDC
RestoreDC
Rectangle
GetStockObject
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GdiFlush

Exports

Exports

_start@12
start

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 942KB - Virtual size: 941KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3958e6e38867b26faccb6637ae75f6eb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

version

msimg32

gdiplus

psapi

iphlpapi

wininet

urlmon

setupapi

crypt32

netapi32

gdi32

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 378KB - Virtual size: 378KB

.data Size: 24KB - Virtual size: 60KB

.rsrc Size: 942KB - Virtual size: 941KB

.reloc Size: 96KB - Virtual size: 95KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 378KB - Virtual size: 378KB

.data
Size: 24KB - Virtual size: 60KB

.rsrc
Size: 942KB - Virtual size: 941KB

.reloc
Size: 96KB - Virtual size: 95KB