2024-01-19_3083ae0edfe68529517b87a0bacf16ce_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-19_3083ae0edfe68529517b87a0bacf16ce_magniber
Size

20.0MB
MD5

3083ae0edfe68529517b87a0bacf16ce
SHA1

b25902d93628b84f167fedcc3c70b6f1cdd64fe3
SHA256

5f9c75994dae319d575694abe9f2be91231d431102edb83372d0608d62232bda
SHA512

ae0e606b4e1035788f2bc30b6c4a945f1c28a2013d5c4113a5d18efadd04e70b53d805c837ea83a57f4a5da10e1a10cfb6b20b5bf66a3be97dff4aad5c52de94
SSDEEP

196608:lLW1fm2fOy41Pec+2ZujNcxjPwvzM5y/YL8xadHcM75W9aSmkt6/d2tASkuyup88:ZgNX7M75Wb96eum36PWTU3Bgm9ni

Score

1^/10

Malware Config

Signatures

Files

2024-01-19_3083ae0edfe68529517b87a0bacf16ce_magniber
.exe windows:6 windows x86 arch:x86

ea805ec4b4db45bc4a3d24cd676f81e6

Code Sign

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7
Certificate

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

07/03/2019, 19:35

Not After

03/03/2034, 19:35

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:12:5b:30:68:71:42:83:e5:a1:65:81:3b:5f:d2:ff
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

29/11/2023, 16:10

Not After

27/11/2025, 16:10

Subject

CN=Jriver\, Inc,O=Jriver\, Inc,L=Minneapolis,ST=Minnesota,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:c5:cf:9b:35:6f:c1:e4:ef:46:65:5b:2d:9d:b3:fa:e8:e5:03:5a:6f:cc:cb:73:7f:c5:ef:fc:89:41:1b:08
Signer

Actual PE Digest

74:c5:cf:9b:35:6f:c1:e4:ef:46:65:5b:2d:9d:b3:fa:e8:e5:03:5a:6f:cc:cb:73:7f:c5:ef:fc:89:41:1b:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

OleCreatePropertyFrame
SysAllocString
VariantInit
VariantChangeType
VariantClear
LoadTypeLibEx
RegisterActiveObject
RevokeActiveObject
GetErrorInfo
CreateErrorInfo
SysFreeString

imm32

ImmGetContext
ImmGetCompositionStringW
ImmReleaseContext

gdi32

LineTo
DeleteObject
CreateRectRgn
Ellipse
CreateSolidBrush
DeleteDC
SaveDC
RestoreDC
SelectObject
MoveToEx
GetDeviceCaps
GetMapMode
SetMapMode
DPtoLP
LPtoDP
CreatePen
StartDocW
StartPage
EndPage
AbortDoc
EndDoc
CreateDCW
CreateEllipticRgn

kernel32

SetFilePointer
SetEndOfFile
GetFileSize
WriteFile
ReadFile
FlushFileBuffers
DeviceIoControl
lstrlenW
GetCurrentProcess
SetPriorityClass
CreatePipe
SetHandleInformation
GetStdHandle
CreateProcessW
WaitForMultipleObjects
GetExitCodeProcess
TerminateProcess
LocalFree
GetSystemInfo
GetModuleHandleW
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryExW
FreeLibrary
GetProcAddress
GetTimeZoneInformation
GetLocalTime
GetDateFormatW
GetTimeFormatW
FindFirstFileW
FindClose
FindNextFileW
GetCurrentProcessId
GetCurrentThreadId
GetThreadPriority
GetCurrentThread
CreateEventW
TerminateThread
SetEvent
ResetEvent
WaitForSingleObject
SetThreadPriority
ResumeThread
RaiseException
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCommandLineW
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
MulDiv
GlobalMemoryStatusEx
SetProcessWorkingSetSize
InitializeCriticalSectionEx
DecodePointer
K32GetProcessMemoryInfo
CreateMutexW
GetPrivateProfileStringW
WritePrivateProfileStringW
LocalAlloc
ReadDirectoryChangesW
GetOverlappedResult
IsDebuggerPresent
WritePrivateProfileSectionW
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
EncodePointer
WideCharToMultiByte
GetCPInfo
LCMapStringEx
GetSystemTimeAsFileTime
GetVersionExW
IsProcessorFeaturePresent
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetFullPathNameW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapFree
HeapAlloc
GetFileType
IsValidCodePage
GetACP
GetOEMCP
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
CompareStringW
LCMapStringW
HeapReAlloc
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
GetFileSizeEx
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetProcessHeap
HeapSize
WriteConsoleW
VirtualProtect
VirtualQuery
LoadLibraryExA
GlobalUnlock
GlobalFree
GetLogicalDriveStringsW
GetSystemDirectoryA
LoadLibraryA
GetVersion
GetThreadId
SetErrorMode
TryEnterCriticalSection
CancelIo
ConnectNamedPipe
lstrlenA
GetThreadLocale
SetNamedPipeHandleState
DisconnectNamedPipe
CreateNamedPipeW
GlobalLock
GlobalAlloc
GetLongPathNameW
Sleep
SetFileTime
GetFileTime
DeleteFileW
SetFileAttributesW
MoveFileW
GetLastError
GetVolumeInformationW
GetComputerNameW
CreateFileW
RemoveDirectoryW
GetFileAttributesW
GetLogicalDrives
GetDiskFreeSpaceExW
GetDriveTypeW
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
CloseHandle
CopyFileW
NormalizeString
MultiByteToWideChar
OutputDebugStringW
LeaveCriticalSection
EnterCriticalSection
GlobalSize
DeleteCriticalSection
InitializeCriticalSection
CompareStringEx
GetEnvironmentVariableA
GetEnvironmentVariableW

user32

SystemParametersInfoW
RegisterClipboardFormatW
SetClipboardData
EmptyClipboard
DrawIconEx
CopyIcon
DestroyCursor
DrawIcon
CreateIconFromResource
CreateCursor
GetSystemMenu
InsertMenuW
UnregisterHotKey
RegisterHotKey
GetCursor
PostThreadMessageW
GetMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetCursor
ShowCursor
MapVirtualKeyExW
GetKeyboardLayout
VkKeyScanExW
SendInput
GetKeyState
MapVirtualKeyW
SetWindowPlacement
GetWindowPlacement
GetMonitorInfoW
GetSystemMetrics
ChangeDisplaySettingsExW
EnumDisplaySettingsExW
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
MonitorFromRect
EnumDisplayMonitors
SetCursorPos
GetCursorPos
ScreenToClient
GetWindowTextW
GetWindowTextLengthW
LoadCursorW
WindowFromPoint
IsWindowVisible
GetWindow
GetClassNameW
FindWindowExW
WaitMessage
EnumChildWindows
EnumWindows
FindWindowW
GetDoubleClickTime
ValidateRect
LoadImageW
ChangeClipboardChain
SetClipboardViewer
CreateWindowExW
DestroyIcon
FlashWindowEx
PeekMessageW
DefWindowProcW
MessageBeep
EndPaint
BeginPaint
GetGUIThreadInfo
GetFocus
KillTimer
SetTimer
SetForegroundWindow
AttachThreadInput
GetForegroundWindow
LockSetForegroundWindow
ReleaseCapture
SetCapture
GetCapture
GetDesktopWindow
GetLastActivePopup
SetParent
GetParent
SetWindowRgn
UpdateWindow
InvalidateRect
RedrawWindow
ClientToScreen
GetClientRect
GetWindowRect
PostMessageW
SetWindowLongW
GetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
IsWindowEnabled
EnableWindow
IsIconic
IsZoomed
DestroyWindow
IsWindow
RegisterClassW
GetClassInfoW
UnregisterClassW
MsgWaitForMultipleObjects
GetWindowThreadProcessId
RegisterWindowMessageW
SendMessageW
CloseClipboard
GetClipboardData
OpenClipboard
MessageBoxW
GetMessagePos
IsClipboardFormatAvailable
ExitWindowsEx
ReleaseDC
GetDC
TranslateMessage
DispatchMessageW

advapi32

RegEnumValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyExW
RegQueryValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExW
RegCloseKey

ole32

CoGetClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoInitializeEx
CreateBindCtx
MkParseDisplayName
CoGetMalloc
CoTaskMemAlloc
CoRegisterClassObject
GetRunningObjectTable
CreateClassMoniker
FreePropVariantArray
DoDragDrop
ReleaseStgMedium
RegisterDragDrop
RevokeDragDrop
CoFreeUnusedLibraries
CoCreateInstance
OleUninitialize
CoUninitialize
OleInitialize
CoInitialize
CLSIDFromString
CoCreateGuid
CoTaskMemFree

wintrust

WinVerifyTrust

Sections

.text
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea805ec4b4db45bc4a3d24cd676f81e6

Code Sign

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7Certificate

Extended Key Usages

Key Usages

0d:12:5b:30:68:71:42:83:e5:a1:65:81:3b:5f:d2:ffCertificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

74:c5:cf:9b:35:6f:c1:e4:ef:46:65:5b:2d:9d:b3:fa:e8:e5:03:5a:6f:cc:cb:73:7f:c5:ef:fc:89:41:1b:08Signer

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

imm32

gdi32

kernel32

user32

advapi32

ole32

wintrust

Sections

.text Size: 15.3MB - Virtual size: 15.3MB

.rdata Size: 4.3MB - Virtual size: 4.3MB

.data Size: 251KB - Virtual size: 272KB

.rsrc Size: 90KB - Virtual size: 89KB

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7
Certificate

0d:12:5b:30:68:71:42:83:e5:a1:65:81:3b:5f:d2:ff
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

74:c5:cf:9b:35:6f:c1:e4:ef:46:65:5b:2d:9d:b3:fa:e8:e5:03:5a:6f:cc:cb:73:7f:c5:ef:fc:89:41:1b:08
Signer

.text
Size: 15.3MB - Virtual size: 15.3MB

.rdata
Size: 4.3MB - Virtual size: 4.3MB

.data
Size: 251KB - Virtual size: 272KB

.rsrc
Size: 90KB - Virtual size: 89KB