Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_658d967cef0fd57fbb23381c67b9bdcc_magniber.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_658d967cef0fd57fbb23381c67b9bdcc_magniber.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-24_658d967cef0fd57fbb23381c67b9bdcc_magniber
-
Size
5.4MB
-
MD5
658d967cef0fd57fbb23381c67b9bdcc
-
SHA1
92f1c66c6e2ac399780357d21727c2ea121a4b91
-
SHA256
aac56c38ccf36b87f11d1fe1ec8cc2445c1618bcd0a6b89cfd693f01e52ab112
-
SHA512
e6abbebf6ac9d95a71617717e9a23c2a4ebd453f58652e0e0c8360be7453afc5000c1b84724858ec5c220186c4fb9186a2d746e9dc181c335ea9fbe3dc90056e
-
SSDEEP
98304:Jzb/dG3093XZWQzc1E+yJBRhaLFCZUhBdmi06WHP2mRf:Jzb/dG3iIHyJcQe7MP2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-24_658d967cef0fd57fbb23381c67b9bdcc_magniber
Files
-
2024-01-24_658d967cef0fd57fbb23381c67b9bdcc_magniber.exe windows:4 windows x86 arch:x86
1ebbd0c33b4a638fd4e66a156b22b216
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
bass
BASS_ChannelSetAttributes
BASS_SampleGetChannel
BASS_ChannelPlay
BASS_ChannelPause
BASS_ChannelIsActive
BASS_ChannelSlideAttributes
BASS_SampleStop
BASS_StreamCreateFile
BASS_SampleLoad
BASS_ChannelGetLength
BASS_ChannelSeconds2Bytes
BASS_ChannelSetSync
BASS_ChannelSetPosition
BASS_ChannelRemoveSync
BASS_ChannelStop
BASS_ChannelIsSliding
BASS_Free
BASS_Init
BASS_StreamFree
BASS_SampleFree
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateFontIndirectA
AddFontMemResourceEx
RemoveFontMemResourceEx
GetStockObject
DeleteDC
GetGlyphIndicesA
GetGlyphOutline
GetTextMetricsA
DeleteObject
SelectObject
kernel32
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
RaiseException
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
LockResource
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
HeapFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetLocaleInfoA
FreeLibrary
InitializeCriticalSection
RtlUnwind
LCMapStringA
LCMapStringW
GetTimeFormatA
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetNumberFormatA
lstrcpy
OutputDebugStringA
CreateFileA
SetFilePointer
GetLocalTime
FindResourceA
SizeofResource
LoadResource
CreateMutexA
CreateDirectoryA
LocalFree
CloseHandle
ReadFile
GetFileSize
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
FormatMessageA
VirtualQuery
lstrcat
GetSystemDirectoryA
GetFileTime
FileTimeToSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
lstrlen
lstrcpyn
MulDiv
FindClose
FindNextFileA
FindFirstFileA
GetTickCount
GetFileAttributesA
lstrcmpi
lstrcmp
DeleteFileA
GetSystemTimeAsFileTime
SetEndOfFile
shell32
ShellExecuteA
user32
SetClipboardData
WindowFromPoint
SetTimer
ClientToScreen
KillTimer
LoadImageA
LoadCursorA
OpenClipboard
GetClipboardData
CloseClipboard
GetCursorPos
ScreenToClient
SetCapture
DefWindowProcA
GetWindowLongA
SetCursor
CallWindowProcA
SetDlgItemTextA
CreateWindowExA
SetWindowLongA
DestroyWindow
MessageBoxA
ReleaseCapture
SendDlgItemMessageA
EndDialog
DialogBoxIndirectParamA
ChangeDisplaySettingsA
EnumThreadWindows
wvsprintfA
GetClientRect
FillRect
GetWindowRect
LoadIconA
IsCharAlphaNumericA
EqualRect
MessageBeep
GetKeyState
ShowWindow
SystemParametersInfoA
ReleaseDC
UpdateWindow
GetSystemMetrics
IsIconic
SetForegroundWindow
FindWindowA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
PostQuitMessage
EmptyClipboard
DefDlgProcA
SetRect
PtInRect
IntersectRect
CopyRect
OffsetRect
LoadStringA
InflateRect
GetDC
UnionRect
RegisterClassA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
timeGetTime
Sections
.text Size: 916KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 736KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Geddon Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE