Static task
static1
Behavioral task
behavioral1
Sample
2024-01-19_f4e9afc3605e34dc5cd4f5215eb7678a_magniber.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-19_f4e9afc3605e34dc5cd4f5215eb7678a_magniber.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-19_f4e9afc3605e34dc5cd4f5215eb7678a_magniber
-
Size
8.5MB
-
MD5
f4e9afc3605e34dc5cd4f5215eb7678a
-
SHA1
7dbd6af6057f88559b965d61aa92a4ebf4312a30
-
SHA256
0a416be64baabd84a3c1fb52cb9b1e1f332cd288a01aa57a001568025bef6bfd
-
SHA512
c13ef0656e99afd920027e1d4510cb72bd87eb7a07a0bcc462623eafd79a0fc127e4a2e0afdb3eb1510bc241a64228183409d39324e9e1ef719247ce2c1beb15
-
SSDEEP
196608:3x3aX8ZDsbkbw+psRZ+QkFuIn0Z6DW6DUuJtcx:3xqVbkbxGRZ+QkFu8aaUuJ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-19_f4e9afc3605e34dc5cd4f5215eb7678a_magniber
Files
-
2024-01-19_f4e9afc3605e34dc5cd4f5215eb7678a_magniber.exe windows:6 windows x86 arch:x86
82f921b2bde2a8ac3e0996d17b2086d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleInformation
CreatePipe
CreateProcessW
GetModuleFileNameW
VirtualProtect
CreateDirectoryW
GetModuleFileNameA
GetCommandLineA
GetLastError
ReleaseMutex
CreateMutexA
IsDebuggerPresent
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
GetCurrentProcess
VirtualAlloc
LoadLibraryW
SetCurrentDirectoryW
FreeLibrary
SetDllDirectoryW
SetUnhandledExceptionFilter
OutputDebugStringA
GetDynamicTimeZoneInformation
Sleep
DeleteFileW
GetCurrentProcessId
DecodePointer
DeleteCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
GetModuleHandleW
GetProcAddress
CreateToolhelp32Snapshot
Thread32First
Thread32Next
LocalFree
FormatMessageA
VirtualQuery
QueryPerformanceFrequency
QueryPerformanceCounter
RtlCaptureContext
CreateFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
CreateThread
TerminateThread
GetProcessId
VirtualQueryEx
WriteFile
DuplicateHandle
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
CloseHandle
ResetEvent
WaitForMultipleObjects
IsDBCSLeadByte
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
FindFirstFileA
FindClose
GetFileInformationByHandle
GetFileAttributesA
TlsSetValue
SetLastError
TlsAlloc
GetProcessHeap
TlsGetValue
TlsFree
CreateEventA
GetFullPathNameA
GetVersionExA
SetEndOfFile
GetModuleHandleA
FindFirstFileW
MoveFileA
GetFileAttributesExA
GetFullPathNameW
FindNextFileW
TerminateProcess
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
FindNextFileA
GetEnvironmentVariableA
GetFileAttributesW
GetCurrentDirectoryA
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
CreateFileA
DeleteFileA
SetFileAttributesA
GetCurrentDirectoryW
RemoveDirectoryA
SetEnvironmentVariableA
SystemTimeToFileTime
CreateProcessA
GetFileType
CreateDirectoryA
GetSystemTime
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
GetSystemDirectoryA
LoadLibraryA
GetLocaleInfoA
GetACP
SetConsoleCtrlHandler
ExpandEnvironmentStringsW
GetStdHandle
SetFilePointer
UnmapViewOfFile
FlushViewOfFile
GetSystemInfo
CreateFileMappingA
GetFileSize
MapViewOfFile
IsBadStringPtrA
IsBadStringPtrW
GetTickCount
ReadFile
InitializeCriticalSectionEx
GlobalMemoryStatus
SetEvent
GetCurrentThreadId
WriteConsoleW
GetCommandLineW
PeekConsoleInputA
ReadConsoleInputW
RaiseException
LoadLibraryExA
GetStringTypeW
WaitForSingleObjectEx
GetExitCodeThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FindFirstFileExW
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
DeviceIoControl
CopyFileW
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetLocaleInfoEx
GetSystemTimeAsFileTime
EncodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
ExitProcess
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
SetFilePointerEx
FlushFileBuffers
HeapCompact
LockFileEx
UnlockFileEx
GetTimeZoneInformation
GetConsoleMode
ReadConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
HeapSize
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleMode
GetNumberOfConsoleInputEvents
FlushConsoleInputBuffer
imm32
ImmSetCompositionWindow
ImmGetContext
dwrite
DWriteCreateFactory
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory1
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 489KB - Virtual size: 20.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ