2024-01-24_b028da50009bd3bec444ec8c94bb0283_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-24_b028da50009bd3bec444ec8c94bb0283_magniber
Size

937KB
MD5

b028da50009bd3bec444ec8c94bb0283
SHA1

cdc68c562e3f890689815d8d1c7cfe20324ad85a
SHA256

7647f6681cad9abd4a39b0d796cb6fa514919ba217ec524a9c836f81709c801b
SHA512

35bfc8f57480d10117edb11363517033f1edaafd31fdb80d231b1e908849f4cbdfcfa06ae22eb504e55aaff4141a9b3f91a477cb7ec8f561303c0749e90ee626
SSDEEP

24576:EFtOqSKCEcm/zQkGnkDD6WTKUjfiG/US3:EFtOfMF0kK6VTKUjfiG/US3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-24_b028da50009bd3bec444ec8c94bb0283_magniber

Files

2024-01-24_b028da50009bd3bec444ec8c94bb0283_magniber
.exe windows:5 windows x86 arch:x86

9b294471f9cb3d64f13fe37be193f4b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
SetEvent
lstrcmpW
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
SetFileAttributesW
ReadFile
GetFileSize
WriteFile
GlobalFree
GetVersion
lstrcpyW
GetFileAttributesW
GetTickCount
LocalFree
FormatMessageW
lstrcatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetSystemDirectoryW
GetLogicalDriveStringsW
WaitForSingleObject
CreateThread
GetPrivateProfileStringA
GetPrivateProfileIntW
GetTempPathW
GetCommandLineW
WritePrivateProfileStringW
GetPrivateProfileStringW
FindClose
FindNextFileW
FindFirstFileW
SystemTimeToFileTime
GetUserDefaultLangID
GetTempFileNameW
CreateFileA
SetFilePointer
DeleteFileA
MoveFileA
Sleep
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
IsValidLocale
ExitProcess
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
SetConsoleCtrlHandler
GetStringTypeA
GetLocaleInfoA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetModuleHandleA
FatalAppExitA
HeapCreate
GetCurrentThread
GetModuleFileNameA
GetStdHandle
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoW
RtlUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetFileType
LocalFileTimeToFileTime
SetEndOfFile
GetFileSizeEx
SetFilePointerEx
GetEnvironmentVariableW
SetEnvironmentVariableW
TlsFree
TlsAlloc
OpenThread
TlsSetValue
TlsGetValue
ReleaseMutex
GetSystemTimeAsFileTime
OutputDebugStringW
LoadLibraryW
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
ExpandEnvironmentStringsW
FreeResource
IsBadReadPtr
VirtualProtect
CreateEventW
CreateMutexW
OpenProcess
TerminateProcess
lstrcpynW
lstrlenA
lstrcpynA
GetVersionExW
GetSystemTime
CopyFileW
DeleteFileW
CreateDirectoryW
GetLocalTime
RaiseException
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
SetLastError
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
GetCurrentThreadId
GetCurrentProcessId
CreateFileW
DeviceIoControl
CloseHandle
GetCurrentProcess
FlushInstructionCache
MultiByteToWideChar
GetProcAddress
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
EnumSystemLocalesA

user32

GetFocus
CreateAcceleratorTableW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetActiveWindow
UnregisterClassA
FindWindowW
DestroyWindow
wvsprintfW
SetWindowLongW
SetWindowPos
IsWindow
GetWindowLongW
GetClassInfoExW
LoadCursorW
SetRectEmpty
DefWindowProcW
GetAncestor
WindowFromPoint
GetShellWindow
FindWindowExW
EnumWindows
DeleteMenu
EnableMenuItem
UpdateWindow
CopyRect
GetWindowInfo
GetForegroundWindow
GetDoubleClickTime
LoadMenuW
GetSubMenu
EndDialog
MonitorFromWindow
DialogBoxParamW
LoadIconW
SetForegroundWindow
DrawTextW
TrackMouseEvent
GetMenuState
GetMenuItemID
GetMenuStringW
CallNextHookEx
IsDialogMessageW
UnhookWindowsHookEx
EnableWindow
CheckDlgButton
FillRect
GetClassNameW
GetDlgItem
SetDlgItemTextW
SetWindowsHookExW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
GetWindow
GetWindowRect
GetClientRect
ScreenToClient
GetDC
ReleaseDC
ShowWindow
SetTimer
KillTimer
PtInRect
SetCursor
GetCursorPos
UpdateLayeredWindow
SetCapture
RegisterClassExW
LoadImageW
CreateWindowExW
ReleaseCapture
PostMessageW
SendMessageTimeoutW
RegisterWindowMessageW
TranslateAcceleratorW
InvalidateRect
SendMessageW
CreatePopupMenu
AppendMenuW
RemoveMenu
MapWindowPoints
SetMenuItemInfoW
GetMenuItemInfoW
SetMenuDefaultItem
LoadStringW
SetFocus
PostQuitMessage
LoadStringA
GetMenuItemCount
DestroyMenu
GetMonitorInfoW
MonitorFromPoint
TrackPopupMenuEx
MessageBeep
DestroyIcon
GetWindowThreadProcessId
GetDesktopWindow
SystemParametersInfoW
GetDlgItemTextW
CreateDialogParamW
MessageBoxW
IntersectRect
MoveWindow
GetSystemMetrics
IsWindowVisible
GetParent
GetSysColor
ClientToScreen
InvalidateRgn
RedrawWindow
DestroyAcceleratorTable
BeginPaint
CallWindowProcW
EndPaint
IsChild

gdi32

SelectPalette
CreateDCW
SetViewportOrgEx
GetViewportOrgEx
SetDIBits
GetObjectW
RealizePalette
CreateFontW
StretchBlt
SetStretchBltMode
EnumFontFamiliesW
GetObjectType
GetStockObject
GetDIBits
GdiFlush
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
GetObjectA
CreatePen
LineTo
MoveToEx
CreateCompatibleDC
PatBlt
SelectObject
DeleteDC
CreateDIBSection
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExA
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW

shell32

SHCreateDirectoryExA
SHGetFolderPathW
Shell_NotifyIconW
SHCreateDirectoryExW
ShellExecuteExW
ShellExecuteW
SHFileOperationW

ole32

CoTaskMemAlloc
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc

oleaut32

LoadRegTypeLi
VarUI4FromStr
OleCreateFontIndirect
DispCallFunc
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
LoadTypeLi
SysStringLen

shlwapi

PathFileExistsW
SHGetValueW
StrStrIW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrCmpIW
PathFindExtensionW
PathAddBackslashW
SHDeleteValueA
SHSetValueA
StrStrIA
SHDeleteValueW
StrToIntA
PathRemoveFileSpecA
SHSetValueW
PathCombineW

comctl32

_TrackMouseEvent
InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDrawLine
GdipSetStringFormatHotkeyPrefix
GdipCreateHBITMAPFromBitmap
GdipDeletePen
GdipCreatePen1
GdipCloneImage
GdipDrawImageRectRectI
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImageRawFormat
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipCloneBrush
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawString
GdipFillPath
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipAddPathArcI
GdipAddPathLineI
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipAlloc
GdipFree
GdipDeleteBrush
GdipSetInterpolationMode

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

psapi

GetModuleFileNameExW

winmm

timeEndPeriod
timeBeginPeriod
timeSetEvent
timeKillEvent

urlmon

URLDownloadToFileW

ws2_32

gethostname
getsockname
WSACreateEvent
htons
gethostbyname
socket
WSAEnumNetworkEvents
setsockopt
recv
shutdown
closesocket
WSACloseEvent
WSAStartup
WSACleanup
WSAGetLastError
connect
ioctlsocket
bind
WSAAsyncGetHostByName
send
WSAAsyncSelect
WSAEventSelect
WSAWaitForMultipleEvents

wininet

InternetQueryOptionA
InternetQueryOptionW
InternetCrackUrlW

secur32

FreeCredentialsHandle
AcquireCredentialsHandleA
InitializeSecurityContextA

Sections

.text
Size: 573KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b294471f9cb3d64f13fe37be193f4b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

version

psapi

winmm

urlmon

ws2_32

wininet

secur32

Sections

.text Size: 573KB - Virtual size: 573KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 23KB - Virtual size: 36KB

.rsrc Size: 224KB - Virtual size: 223KB

.text
Size: 573KB - Virtual size: 573KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 23KB - Virtual size: 36KB

.rsrc
Size: 224KB - Virtual size: 223KB