2024-01-18_5cf6ec5ef0111566997d660c58060933_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-18_5cf6ec5ef0111566997d660c58060933_magniber
Size

2.3MB
MD5

5cf6ec5ef0111566997d660c58060933
SHA1

e94b33ed1f2994d28d4c2e247b7c108b90f22f1a
SHA256

2eccbbd7e31d050a35d8225f34b4601836de212aef3a4a7992ab3d53c1737846
SHA512

a7b922844bd17a820698353173b7a2d09af1abd27c8807f59f56f507ecc715c3220967abb85ce5327a6947f8c09a3a83e3320542e4ac36168af4186aedad3e6d
SSDEEP

49152:RgWlbH8mH1b/+vKDyts3QIRcAzbi8Ln5vx16:RgWlbcmVb/+vKD2eSAzS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-18_5cf6ec5ef0111566997d660c58060933_magniber

Files

2024-01-18_5cf6ec5ef0111566997d660c58060933_magniber
.exe windows:6 windows x86 arch:x86

fa6ae3e2aca2275c852cbfbfb12c412c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalUnlock
GetTempPathW
LocalFree
WaitForSingleObject
HeapReAlloc
HeapSize
WritePrivateProfileStringW
GetPrivateProfileStringW
FreeResource
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
K32GetProcessImageFileNameW
GetPriorityClass
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
LoadResource
InitializeCriticalSection
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
lstrcmpW
lstrcpyW
FindNextFileW
FindFirstFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFileAttributesW
DecodePointer
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
GlobalAlloc
VirtualAlloc
GetThreadTimes
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
SetStdHandle
GetConsoleMode
GetConsoleCP
GetACP
GetStdHandle
ExitProcess
FreeLibraryAndExitThread
ExitThread
GetProcessHeap
GetTickCount
GetCommandLineW
CreateEventW
RaiseException
CreateProcessW
CreateMutexW
Sleep
MulDiv
HeapFree
HeapAlloc
MoveFileW
DeleteFileW
VirtualProtect
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
CloseHandle
FindFirstFileExW
LoadLibraryExW
FreeLibrary
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RegisterWaitForSingleObject
GetProcAddress
WaitForSingleObjectEx
UnregisterWaitEx
SetThreadPriority
FindClose
GetUserDefaultLangID
SetFilePointerEx
FlushFileBuffers
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ReleaseMutex
OutputDebugStringA
SystemTimeToFileTime
IsBadWritePtr
IsBadReadPtr
CreateWaitableTimerW
WaitForMultipleObjects
CancelWaitableTimer
SetWaitableTimer
SetFileTime
SetFilePointer
SetEndOfFile
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
SuspendThread
TerminateThread
CreateThread
CopyFileW
WriteFile
RemoveDirectoryW
ReadFile
GetTempFileNameW
GetFileAttributesExW
CreateDirectoryW
lstrcmpA
DeviceIoControl
CreateFileW
LoadLibraryW
GetModuleHandleA
GetVersionExW
OutputDebugStringW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
GetStringTypeW
MultiByteToWideChar
GetModuleHandleExW
QueueUserWorkItem
GetNativeSystemInfo
GetCurrentThread
SwitchToThread
DuplicateHandle
EncodePointer
TryEnterCriticalSection
WideCharToMultiByte
FormatMessageW
InitializeSListHead
GetStartupInfoW

user32

DeferWindowPos
EndDeferWindowPos
SetClipboardData
GetFocus
IsClipboardFormatAvailable
GetClipboardData
SendMessageTimeoutW
GetSystemMetrics
GetAncestor
SendInput
MapVirtualKeyW
GetLastActivePopup
GetTopWindow
GetWindow
GetDesktopWindow
EndDialog
GetMessageW
DispatchMessageW
TranslateMessage
SetWindowLongW
GetWindowLongW
CreateWindowExW
SendMessageW
PostMessageW
GetWindowTextW
SetWindowPos
GetWindowRect
ScreenToClient
BeginPaint
CloseClipboard
GetDC
PostQuitMessage
ReleaseDC
UpdateWindow
ShowWindow
IsWindowVisible
SetTimer
KillTimer
GetParent
GetDlgItem
MessageBoxW
OpenClipboard
GetWindowThreadProcessId
IsWindow
GetClassNameW
GetMonitorInfoW
DefWindowProcW
LoadCursorW
RegisterClassExW
EnumDisplayMonitors
BeginDeferWindowPos
DialogBoxParamW
GetCursorPos
SetCursor
GetRawInputData
mouse_event
UpdateLayeredWindow
FindWindowW
LoadIconW
RegisterClassW
GetForegroundWindow
SetLayeredWindowAttributes
GetLastInputInfo
EmptyClipboard
SetForegroundWindow
GetWindowDC
RegisterRawInputDevices
GetShellWindow
EndPaint
MonitorFromWindow
EnumWindows
SystemParametersInfoW

gdi32

CreateSolidBrush
GetObjectW
GetStockObject
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
SelectObject
CreateFontIndirectW
GetDeviceCaps

advapi32

RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW

shell32

SHCreateDirectoryExW
SHGetFolderPathW
SHFileOperationW
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoCreateGuid
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize

shlwapi

PathGetDriveNumberW
PathFileExistsW
SHGetValueW
PathAppendW
SHSetValueW
SHDeleteValueW
StrStrIW
SHGetValueA
SHSetValueA

gdiplus

GdipAlloc
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreatePath
GdipDeletePath
GdipResetPath
GdipAddPathString
GdipCreateFromHDC
GdipDeleteGraphics
GdipReleaseDC
GdipSetTextRenderingHint
GdipFree
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipDrawRectangleI
GdipGraphicsClear
GdipDrawString
GdipDrawImagePointRectI
GdipGetPathWorldBounds
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipDisposeImage
GdipSetInterpolationMode
GdipCreateBitmapFromStream
GdipCloneImage

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wtsapi32

WTSRegisterSessionNotification

powrprof

PowerReadACValueIndex
PowerReadDCValueIndex
PowerGetActiveScheme

netapi32

Netbios

wininet

InternetCrackUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetQueryOptionW
InternetSetOptionW
HttpOpenRequestW
HttpAddRequestHeadersA
InternetOpenUrlW
HttpSendRequestW
HttpQueryInfoA
HttpQueryInfoW
InternetErrorDlg
InternetReadFileExA
InternetWriteFile
InternetSetOptionA
InternetGetLastResponseInfoW
InternetSetStatusCallbackW
FtpOpenFileW
FtpCommandW
FtpGetFileSize
HttpSendRequestExW
HttpEndRequestW
HttpAddRequestHeadersW

winmm

timeGetTime

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fa6ae3e2aca2275c852cbfbfb12c412c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

gdiplus

version

wtsapi32

powrprof

netapi32

wininet

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 161KB - Virtual size: 161KB

.data Size: 30KB - Virtual size: 63KB

.rsrc Size: 81KB - Virtual size: 81KB

.reloc Size: 136KB - Virtual size: 140KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 161KB - Virtual size: 161KB

.data
Size: 30KB - Virtual size: 63KB

.rsrc
Size: 81KB - Virtual size: 81KB

.reloc
Size: 136KB - Virtual size: 140KB