Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_04f33a0657417b39b039b3a636d2340e_magniber.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-18_04f33a0657417b39b039b3a636d2340e_magniber.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-18_04f33a0657417b39b039b3a636d2340e_magniber
-
Size
277KB
-
MD5
04f33a0657417b39b039b3a636d2340e
-
SHA1
c2c6afc7756ee8a8b6198b990d1956b7908886f4
-
SHA256
ac98da4223cdd94edf05742281bd209f9b69dbc9ae546873f578d3e2b92f5d33
-
SHA512
78dbda3511a84ba360b5c0e8f8cef5829ad8a3dbc7a837d97480ca723dbbbac93341f96a95d7be1272234613212706f993f9abaaed4b7b185b5462baeb5205de
-
SSDEEP
6144:e3nHPDm0jLAu6Y5jEw564aoJxmhuw1AFkHK/:Ovbjf6YNFehQwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-18_04f33a0657417b39b039b3a636d2340e_magniber
Files
-
2024-01-18_04f33a0657417b39b039b3a636d2340e_magniber.exe windows:5 windows x86 arch:x86
943b550bda838f264a91d1241abb0b14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetModuleFileNameW
GetTimeZoneInformation
lstrcatA
MultiByteToWideChar
lstrlenW
DisconnectNamedPipe
CreateJobObjectA
GetProcAddress
LoadLibraryA
LocalAlloc
SetCalendarInfoW
WriteProfileSectionW
ConvertDefaultLocale
FreeEnvironmentStringsW
RequestWakeupLatency
OutputDebugStringA
_lopen
TransactNamedPipe
GetNumaProcessorNode
lstrcpyA
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetComputerNameExA
GetVersionExW
EnumResourceTypesA
CreateActCtxW
GetCompressedFileSizeW
EnumCalendarInfoExW
GetNumaAvailableMemoryNode
TerminateJobObject
LoadResource
GetStringTypeA
IsValidLocale
TlsFree
lstrlenA
EnumSystemLocalesA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
HeapSize
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
SetEnvironmentVariableA
user32
IsCharAlphaNumericA
GetKeyboardLayoutList
GetUserObjectInformationW
CreateDesktopW
LoadMenuIndirectA
CharUpperBuffW
ImpersonateDdeClientWindow
SetSystemCursor
RegisterClassExA
LoadCursorW
GetClipboardFormatNameA
GetGUIThreadInfo
SetPropA
CharUpperBuffA
PeekMessageA
gdi32
AnimatePalette
GetEnhMetaFileA
CreateDIBSection
EnumFontFamiliesExW
TextOutW
CloseEnhMetaFile
GdiComment
GetMiterLimit
winspool.drv
DeviceCapabilitiesW
advapi32
ReportEventA
ole32
CoInitialize
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ