Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_d6693c6474bbb03f46ce3559a86e69db_magniber.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-09_d6693c6474bbb03f46ce3559a86e69db_magniber.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-09_d6693c6474bbb03f46ce3559a86e69db_magniber
-
Size
3.5MB
-
MD5
d6693c6474bbb03f46ce3559a86e69db
-
SHA1
ec8a55988ac6f1fda9ac40eccfe933fa33fd31bc
-
SHA256
092c735fe21d9e09420071b48ebc1879458f4ef295095b7124d019bff725e7da
-
SHA512
d3ca5dbdbe5ca9837405e1e9872cf1e0d94d5e3c4ff4f7715ff6a47265f777a4d3f4a1872169f7263c11658928186fb0d96c9240fd6cbf9d07e6983b6142e485
-
SSDEEP
49152:P5+voFbDBwlrKGpzKnFjvgMBMqTrRpiM:R+6bDBwMSKdgK7niM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-09_d6693c6474bbb03f46ce3559a86e69db_magniber
Files
-
2024-01-09_d6693c6474bbb03f46ce3559a86e69db_magniber.exe windows:5 windows x86 arch:x86
24649fa3a920bfd8b427c7ee0cb891c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
GetSystemTime
SleepEx
GetCurrentProcess
SetProcessWorkingSetSize
LocalFree
FormatMessageW
ExpandEnvironmentStringsA
LoadLibraryExA
SetEndOfFile
WriteConsoleW
GetTimeZoneInformation
DecodePointer
GetConsoleCP
SetStdHandle
OutputDebugStringW
OutputDebugStringA
SetConsoleCtrlHandler
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
HeapQueryInformation
HeapSize
HeapReAlloc
GetStringTypeW
EnumSystemLocalesW
LoadLibraryExW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
VirtualQuery
GetDateFormatW
GetFileType
Sleep
HeapFree
GetACP
GetStdHandle
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
ExitProcess
TerminateProcess
InitializeSListHead
VirtualProtect
RaiseException
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
GetLocalTime
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentThread
SetThreadPriority
FreeLibrary
GetModuleHandleA
SetThreadLocale
GetProcAddress
LoadLibraryW
DeleteFileA
LockResource
LoadResource
GetModuleFileNameW
CreateProcessA
CloseHandle
ReleaseMutex
GetModuleHandleW
GetLastError
CreateMutexW
SetCurrentDirectoryA
GetSystemTimeAsFileTime
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
GetModuleFileNameA
IsDebuggerPresent
GetCurrentDirectoryA
GetVersionExW
VerifyVersionInfoW
SizeofResource
GetTimeFormatW
FindResourceA
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryA
TerminateThread
ResumeThread
SuspendThread
GetCurrentProcessId
GetCurrentThreadId
HeapAlloc
CreateFileW
GetUserDefaultLCID
VerSetConditionMask
ExitThread
WaitForSingleObject
CreateThread
lstrlenA
QueryPerformanceCounter
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FlushFileBuffers
WriteFile
WriteFileEx
SetFilePointer
ReadFileEx
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
ReadFile
GetFileSize
CreateFileA
VirtualFree
VirtualAlloc
GetDriveTypeA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateDirectoryA
GetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetThreadAffinityMask
GetSystemInfo
user32
CreateWindowExW
ShowCursor
GetDesktopWindow
GetWindowRect
AdjustWindowRectEx
FindWindowW
IsIconic
ShowWindow
SetCursorPos
GetCursorPos
SystemParametersInfoW
AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
IsWindow
UnregisterClassW
GetKeyState
MapVirtualKeyW
keybd_event
SetWindowTextW
SetWindowLongW
SetWindowPos
GetAsyncKeyState
SetFocus
DefWindowProcW
MessageBoxW
SetCursor
BeginPaint
EndPaint
PostQuitMessage
PeekMessageW
TranslateMessage
DispatchMessageW
WaitMessage
BringWindowToTop
DestroyWindow
MoveWindow
EndDialog
KillTimer
LoadImageW
RegisterClassExW
GetActiveWindow
GetDC
MessageBoxA
GetWindowLongW
InvalidateRect
LoadIconW
GetDlgItemTextA
SetForegroundWindow
TranslateAcceleratorW
GetMessageW
GetSystemMetrics
ScreenToClient
IsDialogMessageA
GetClientRect
CallWindowProcA
CallWindowProcW
GetSysColor
GetWindowTextW
GetWindowTextA
LoadCursorW
FillRect
SetTimer
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
SetWindowTextA
EnableWindow
GetDlgItem
ClientToScreen
GetParent
IsDialogMessageW
SendMessageA
SendMessageW
UpdateWindow
CreateDialogParamW
PostMessageW
ReleaseDC
gdi32
CreateFontIndirectW
CreateCompatibleDC
GetGlyphOutlineW
DeleteDC
CreateICW
CreateFontW
AddFontResourceW
CreateScalableFontResourceW
TextOutW
SetBkMode
SetTextColor
SetBkColor
GetGlyphOutlineA
LineTo
MoveToEx
SelectObject
DeleteObject
CreatePen
GetDeviceCaps
GetStockObject
GetTextMetricsW
comdlg32
GetSaveFileNameW
advapi32
RegCloseKey
RegDeleteValueA
RegFlushKey
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
shell32
ShellExecuteA
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
comctl32
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
ord17
imm32
ImmAssociateContext
ImmDisableIME
winmm
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeGetTime
timeSetEvent
timeKillEvent
dsound
ord11
ord3
ord2
dinput8
DirectInput8Create
d3d9
Direct3DCreate9
d3dx9_43
D3DXVec3TransformCoord
D3DXPlaneFromPointNormal
D3DXQuaternionMultiply
D3DXMatrixRotationQuaternion
D3DXVec3TransformNormal
D3DXMatrixScaling
D3DXMatrixRotationYawPitchRoll
D3DXMatrixMultiply
D3DXMatrixTranslation
D3DXMatrixRotationY
D3DXMatrixInverse
D3DXMatrixRotationX
D3DXMatrixRotationZ
D3DXCreateCubeTextureFromFileInMemory
D3DXMatrixLookAtLH
D3DXMatrixPerspectiveFovLH
D3DXVec3Transform
D3DXIntersectTri
D3DXVec2Normalize
D3DXVec3Hermite
D3DXQuaternionRotationMatrix
D3DXQuaternionSlerp
D3DXQuaternionRotationYawPitchRoll
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXPlaneNormalize
D3DXMatrixTranspose
D3DXVec4Transform
D3DXVec4Normalize
D3DXQuaternionNormalize
D3DXMatrixMultiplyTranspose
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileExA
D3DXQuaternionRotationAxis
dbghelp
MiniDumpWriteDump
oleaut32
VariantClear
GetErrorInfo
SetErrorInfo
SysFreeString
CreateErrorInfo
VariantChangeType
VariantInit
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 464KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ