Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_160568b7adb8cb9f411ecbb45bd143ba_mafia_magniber.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-10_160568b7adb8cb9f411ecbb45bd143ba_mafia_magniber.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-10_160568b7adb8cb9f411ecbb45bd143ba_mafia_magniber
-
Size
4.0MB
-
MD5
160568b7adb8cb9f411ecbb45bd143ba
-
SHA1
e3f2e3ba4707eb69a2c781034721b847902adeb9
-
SHA256
edf25815a4842dbc446f23ee3e385804857ee08e90f204b61e79e2bfafe95ce0
-
SHA512
01dbf5acb0e80c6018483bc022c001f1e0a8a4e2775d47d8e2c174d015ab41bd85b52041b4a1b349c7a3e326bcb59ed2bc4a4e3aa888cd39754930e9a8d1c824
-
SSDEEP
98304:VHSXSEM1YMe2WvRqsap2z6ppmUZIZtHjSfDQ7qKPF5MyPVOfFACqaYxYPmpv8aDW:JSKe2LwLAycK0aDMx6RiAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-10_160568b7adb8cb9f411ecbb45bd143ba_mafia_magniber
Files
-
2024-01-10_160568b7adb8cb9f411ecbb45bd143ba_mafia_magniber.exe windows:5 windows x86 arch:x86
fc8a92d87e46b35242b658713b675c69
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
SetCurrentDirectoryW
GetStringTypeW
CompareStringW
GetTimeZoneInformation
WriteConsoleW
LCMapStringW
IsValidLocale
SetEnvironmentVariableA
GetDriveTypeW
GetProcessHeap
CreateFileW
QueryPerformanceCounter
GetEnvironmentStringsW
GetLocaleInfoW
FreeEnvironmentStringsW
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleCP
FatalAppExitA
SetHandleCount
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetStdHandle
HeapSize
HeapQueryInformation
VirtualQuery
VirtualAlloc
RtlUnwind
FindFirstFileExA
GetDriveTypeA
GetFileInformationByHandle
CreateThread
ExitThread
GetSystemTimeAsFileTime
HeapReAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
EncodePointer
DecodePointer
ExitProcess
HeapFree
LocalLock
LocalUnlock
FindResourceExW
VirtualProtect
SetErrorMode
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetTempPathA
GetNumberFormatA
GetWindowsDirectoryA
GetFileSizeEx
SetFileAttributesA
GetFileAttributesExA
FileTimeToLocalFileTime
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileA
lstrcmpiA
GetStringTypeExA
FileTimeToSystemTime
GetThreadLocale
GetACP
GetAtomNameA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
CopyFileA
GlobalSize
LocalFree
lstrlenW
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
ReplaceFileA
GetUserDefaultLCID
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalAlloc
GetModuleHandleW
GetCurrentProcessId
GlobalLock
GlobalUnlock
GlobalFree
MulDiv
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
ActivateActCtx
DeactivateActCtx
MultiByteToWideChar
lstrcmpW
FindResourceA
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
WaitForSingleObject
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetTickCount
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
SetFileTime
WriteFile
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrlenA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
WritePrivateProfileStringA
lstrcatA
lstrcpyA
GetModuleFileNameA
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
FlushViewOfFile
FindClose
FindFirstFileA
GetSystemInfo
GlobalMemoryStatusEx
UnmapViewOfFile
MapViewOfFile
CloseHandle
CreateFileMappingA
GetLastError
CreateFileA
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
EnumSystemLocalesA
RaiseException
InterlockedCompareExchange
user32
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
SetRect
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
GetMessageA
TranslateMessage
ValidateRect
LoadCursorA
DestroyCursor
RedrawWindow
SetCursorPos
InflateRect
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetMenuBarInfo
LoadImageA
DestroyIcon
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
IntersectRect
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
DrawStateA
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
GetSystemMetrics
GetCursorPos
ReleaseCapture
SetCursor
LoadCursorW
SetCapture
KillTimer
SetTimer
ClientToScreen
SetWindowRgn
DrawIcon
FillRect
SystemParametersInfoA
OffsetRect
IsRectEmpty
InvalidateRect
IsIconic
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetSystemMenu
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
LoadIconW
LoadIconA
SendDlgItemMessageA
GetMenuItemInfoA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
WindowFromPoint
MessageBeep
NotifyWinEvent
GetScrollRange
SetScrollPos
EnableWindow
SendMessageA
PostMessageA
UpdateWindow
GetAsyncKeyState
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClientRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CharUpperA
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
MonitorFromPoint
GetTabbedTextExtentA
GetWindowRgn
EnumChildWindows
SubtractRect
GetDoubleClickTime
GetUpdateRect
SendNotifyMessageA
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindowRect
GetWindow
IsWindow
SetFocus
GetFocus
RealChildWindowFromPoint
GetSysColorBrush
EnumDisplayMonitors
SetLayeredWindowAttributes
GetDialogBaseUnits
DeleteMenu
WinHelpA
LoadMenuW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
wsprintfA
IsChild
IsMenu
MapVirtualKeyExA
IsCharLowerA
IsClipboardFormatAvailable
GetDCEx
WaitMessage
CharUpperBuffA
CopyIcon
FrameRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LockWindowUpdate
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
SetClassLongA
DestroyAcceleratorTable
DrawIconEx
CopyImage
GetIconInfo
HideCaret
DrawFocusRect
InvertRect
UnregisterClassA
GetTabbedTextExtentW
CreateMenu
WindowFromDC
InSendMessage
LoadAcceleratorsW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
SetParent
GetMenuDefaultItem
GetDlgItemInt
DefFrameProcA
gdi32
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
CreatePen
ExtCreatePen
CreateHatchBrush
CreateCompatibleBitmap
GetTextMetricsA
GetTextExtentPoint32A
CreateFontIndirectA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateDCA
GetViewportOrgEx
Rectangle
SelectClipRgn
SetRectRgn
CombineRgn
GetMapMode
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetCharWidthA
CreateFontA
StretchDIBits
GetBkColor
GetTextColor
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
GetCurrentObject
CreatePolygonRgn
Polyline
Polygon
OffsetRgn
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
EnumFontFamiliesExA
RoundRect
ExtFloodFill
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetStockObject
CreateSolidBrush
PatBlt
CreateRectRgnIndirect
CreateDIBSection
DeleteObject
BitBlt
Ellipse
LPtoDP
DPtoLP
SelectObject
CreateCompatibleDC
CreateEllipticRgn
CreateBitmap
GetObjectA
CopyMetaFileA
SetTextColor
SetBkColor
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter
advapi32
RegEnumKeyA
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExW
RegEnumValueA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
CryptReleaseContext
shell32
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
SHAddToRecentDocs
DragQueryFileA
DragFinish
ShellExecuteA
SHBrowseForFolderA
ShellExecuteExA
SHGetMalloc
ExtractIconA
comctl32
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
shlwapi
PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathRemoveExtensionA
PathFindExtensionA
PathStripPathA
PathRemoveFileSpecW
ole32
DoDragDrop
OleCreateFromData
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
PropVariantCopy
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
OleDuplicateData
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoInitializeEx
OleRegEnumVerbs
OleRegGetMiscStatus
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleLockRunning
OleRun
OleSave
WriteClassStm
OleSaveToStream
OleQueryLinkFromData
OleQueryCreateFromData
RevokeDragDrop
RegisterDragDrop
OleSetMenuDescriptor
OleGetClipboard
CreateDataAdviseHolder
CreateOleAdviseHolder
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
CreateFileMoniker
CoLockObjectExternal
GetRunningObjectTable
OleIsRunning
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SysStringByteLen
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
SafeArrayDestroy
VariantClear
oledlg
ord8
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
wldap32
ord41
ord27
ord301
ord33
ord79
ord35
ord32
ord200
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord46
ws2_32
bind
ntohs
htons
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
htonl
ntohl
getsockname
crypt32
CertFreeCertificateContext
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 535KB - Virtual size: 535KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ