2024-01-25_370e729e194f919c6774c844f409d9e9_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-25_370e729e194f919c6774c844f409d9e9_magniber
Size

8.9MB
MD5

370e729e194f919c6774c844f409d9e9
SHA1

35a347b912bfd57379e145df8ece9d3d79e75b0f
SHA256

4f447f396b9ce694bb86bac21444dcbfee092a0e552667501dc7b1afdd0a6f08
SHA512

9753e63b7016ab9633e5b04f8f644b654d85376fc4ab93c670df146a6fa0b0ef23d4a0368e8bd0ad9465c92eb3216156c71c4878e8d388c0e7def35168f8b725
SSDEEP

98304:207oYz0WkcoKwlgJZJKLeNYvTrbH7TN7MtWDfAvsy8GTNDfnBpStGHO+UG:v7oYzyc4lgJZ0vTnH7TNM8GYtGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-25_370e729e194f919c6774c844f409d9e9_magniber

Files

2024-01-25_370e729e194f919c6774c844f409d9e9_magniber
.exe windows:6 windows x86 arch:x86

670816bf44741a8f6425a009510e92c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
CreateThread
Sleep
CreateEventW
WaitForSingleObject
SetEvent
CloseHandle
DecodePointer
GetCommandLineW
LoadLibraryA
SetErrorMode
GetFileAttributesW
VerifyVersionInfoW
GlobalHandle
LockResource
VerSetConditionMask
DeleteFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WriteConsoleW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
MultiByteToWideChar
FindResourceW
LoadLibraryW
lstrlenW
lstrcpyW
lstrcmpiW
lstrcmpW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalReAlloc
GlobalAlloc
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeLibrary
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetACP
GetStdHandle
ExitProcess
PeekNamedPipe
SetConsoleCtrlHandler
GetFileType
SetStdHandle
HeapQueryInformation
GetCommandLineA
ExitThread
VirtualQuery
RtlUnwind
UnregisterWaitEx
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
QueryDepthSList
InterlockedFlushSList
FreeLibraryAndExitThread
GetThreadTimes
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
FormatMessageA
AreFileApisANSI
GetFileInformationByHandle
SetCurrentDirectoryW
LoadLibraryExA
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
GetLocaleInfoW
LCMapStringW
GetSystemTimeAsFileTime
GetCPInfo
QueryPerformanceFrequency
QueryPerformanceCounter
SwitchToThread
WaitForSingleObjectEx
TryEnterCriticalSection
GetStringTypeW
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
GetThreadPriority
ResetEvent
SetFilePointerEx
SetUnhandledExceptionFilter
IsDebuggerPresent
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SetDllDirectoryW
GetModuleHandleExW
DeleteAtom
FindNextFileW
MoveFileExW
DeviceIoControl
SetLastError
GetLastError
RaiseException
OutputDebugStringA
RemoveDirectoryW
GetDriveTypeW
CreateDirectoryW
CompareStringW
GetWindowsDirectoryW
SearchPathW
GetProfileIntW
SystemTimeToTzSpecificLocalTime
SetFileAttributesW
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetUserDefaultUILanguage
FindResourceExW
FileTimeToSystemTime
GetUserDefaultLCID
EncodePointer
GetSystemDirectoryW
FreeResource
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
SetThreadPriority
ResumeThread
GetCurrentThread
GetVersionExW
lstrcmpA
WideCharToMultiByte
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentProcessId
GlobalGetAtomNameW
GetCurrentDirectoryW
GlobalSize
LocalFree
FormatMessageW
CopyFileW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LocalAlloc
LocalReAlloc
RegisterApplicationRecoveryCallback
RegisterApplicationRestart
ApplicationRecoveryInProgress
ApplicationRecoveryFinished
CompareStringEx
GetThreadPreferredUILanguages
GetLocaleInfoEx
GlobalFlags
VirtualProtect
DeleteFileW
CreateFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
GetTickCount
GetTempPathW
GetFileTime
GetTempFileNameW

user32

FillRect
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetParent
GetClassNameW
GetWindow
LoadCursorW
MapWindowPoints
ScreenToClient
ClientToScreen
GetSysColor
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
UnhookWindowsHookEx
GetMessagePos
GetMessageTime
RegisterClassW
GetClassInfoW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsIconic
GetDlgCtrlID
SetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
TrackPopupMenu
TrackPopupMenuEx
GetForegroundWindow
SetForegroundWindow
ValidateRect
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
SetPropW
GetPropW
RemovePropW
EqualRect
GetClassLongW
GetTopWindow
GetLastActivePopup
SetWindowsHookExW
CallNextHookEx
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetDC
PostQuitMessage
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
CheckDlgButton
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
DestroyMenu
InsertMenuItemW
SetRectEmpty
IntersectRect
OffsetRect
DestroyIcon
UnpackDDElParam
UpdateWindow
DrawEdge
DrawFrameControl
DrawStateW
SetWindowRgn
DrawFocusRect
InflateRect
IsRectEmpty
DrawIconEx
IsZoomed
IsClipboardFormatAvailable
GetSystemMenu
AppendMenuW
DeleteMenu
GetMenuItemInfoW
SetMenuDefaultItem
LockWindowUpdate
SetParent
ModifyMenuW
WindowFromPoint
SystemParametersInfoW
MonitorFromPoint
NotifyWinEvent
MessageBeep
GetKeyNameTextW
MapVirtualKeyW
UpdateLayeredWindow
EnableScrollBar
UnionRect
DrawIcon
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
CopyImage
SendDlgItemMessageA
ChangeWindowMessageFilter
RealChildWindowFromPoint
GetNextDlgTabItem
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetCursorPos
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuDefaultItem
SetClassLongW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CopyAcceleratorTableW
WaitMessage
SubtractRect
GetUpdateRect
CharUpperBuffW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
RegisterClipboardFormatW
GetDialogBaseUnits
FrameRect
GetNextDlgGroupItem
IsCharLowerW
MapVirtualKeyExW
GetComboBoxInfo
DestroyCursor
CreateMenu
GetWindowRgn
HideCaret
InvertRect
wsprintfW
CharLowerBuffW
VkKeyScanW
SendInput
CreateIconFromResourceEx
CreateIconIndirect
DestroyAcceleratorTable
CreateAcceleratorTableW
MonitorFromWindow
GetMonitorInfoW
TrackMouseEvent
GetMenu
AdjustWindowRectEx
PostThreadMessageW
CharUpperW
MessageBoxA
MessageBoxW
GetAsyncKeyState
SetLayeredWindowAttributes
MessageBoxExW
SetRect
ShowScrollBar
LoadImageW
EnumChildWindows
PtInRect
CopyRect
GetSysColorBrush
SetWindowContextHelpId
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetKeyState
GetFocus
SetFocus
CharNextW
GetDlgItem
EndDialog
DialogBoxIndirectParamW
IsWindowVisible
SetWindowPos
MoveWindow
ReuseDDElParam
ShowWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
LoadStringW
MapDialogRect
SendMessageW
RegisterWindowMessageW
GetCursorPos
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
CreateDialogIndirectParamW
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
GetActiveWindow
GetCapture
EnableWindow
IsWindowEnabled
GetSystemMetrics
SetActiveWindow
GetWindowDC
IsDialogMessageW

gdi32

GetViewportExtEx
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreatePen
CreateDCW
CopyMetaFileW
LPtoDP
DPtoLP
GetPixel
GetTextMetricsW
Polyline
Polygon
CreatePolygonRgn
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateRectRgnIndirect
SetBitmapDimensionEx
GetTextExtentExPointW
SetPixelV
GetTextFaceW
RoundRect
GetSystemPaletteEntries
GetNearestPaletteIndex
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
GetWindowOrgEx
GetViewportOrgEx
SetPaletteEntries
ExtFloodFill
GetPaletteEntries
CreatePalette
EnumFontFamiliesExW
GetCurrentObject
OffsetRgn
GetRgnBox
Rectangle
CreateRoundRectRgn
SetDIBColorTable
StretchBlt
SetPixel
RealizePalette
SetRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
GetObjectW
SetBkColor
SetTextColor
ExtTextOutW
CreateDIBSection
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
CreateBitmap
LineTo
IntersectClipRect
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
TextOutW
MoveToEx
PtVisible
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
GetWindowExtEx

advapi32

RegDeleteValueW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW

ole32

DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRun
CoFreeUnusedLibraries
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
OleDraw
CoCreateGuid
CoInitializeEx
CoInitialize
CoReleaseServerProcess
CoAddRefServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
ProgIDFromCLSID
OleLockRunning
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CreateStreamOnHGlobal

oleaut32

LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
DispCallFunc
SysStringByteLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayGetUBound
GetErrorInfo
SafeArrayGetLBound
SafeArrayLock
VarUI4FromStr
VariantClear
VariantCopy
VariantInit
VarBstrFromDate
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
SafeArrayUnlock
SafeArrayCopy
SafeArrayGetVartype
SetErrorInfo
CreateErrorInfo
RegisterTypeLi
UnRegisterTypeLi
VarBstrCmp
SafeArrayCreate
SafeArrayRedim
VariantCopyInd
SysAllocString
SysFreeString
SysAllocStringLen

uxtheme

GetCurrentThemeName
DrawThemeTextEx
GetThemeColor
BufferedPaintInit
BufferedPaintUnInit
BeginBufferedPaint
DrawThemeBackground
GetWindowTheme
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetThemePartSize
GetThemeSysColor
GetThemeMargins
CloseThemeData
EndBufferedPaint
OpenThemeData

dbghelp

MiniDumpWriteDump

shlwapi

PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindFileNameW
ord12
PathIsDirectoryW
PathFindExtensionW

comctl32

ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Draw
InitCommonControlsEx
ImageList_Destroy
ImageList_LoadImageW
ImageList_Remove
ImageList_AddMasked
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetImageCount
ord345
CreatePropertySheetPageW
DestroyPropertySheetPage
PropertySheetW

msimg32

AlphaBlend
TransparentBlt

gdiplus

GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipSetCompositingQuality
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawImageRect
GdipCreatePath
GdipDeletePath
GdipResetPath
GdipClosePathFigure
GdipAddPathArcI
GdipCreateLineBrushI
GdipConvertToEmfPlus
GdipCreateMetafileFromStream
GdipGetMetafileHeaderFromMetafile
GdipImageRotateFlip
GdipDrawImageRectRect
GdipDrawRectangleI
GdipDrawLineI
GdipBitmapSetPixel
GdipSetPenDashArray
GdipFillRectangleI
GdipDrawPath
GdipSetPageUnit
GdipSetSmoothingMode
GdipSetPenMode
GdipDeletePen
GdipCloneImage
GdipCreatePen1

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

dwmapi

DwmSetWindowAttribute
DwmIsCompositionEnabled
DwmInvalidateIconicBitmaps
DwmSetIconicLivePreviewBitmap
DwmSetIconicThumbnail
DwmDefWindowProc
DwmExtendFrameIntoClientArea

winmm

PlaySoundW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW
PrintDlgW

shell32

SHGetKnownFolderPath
DragFinish
DragQueryFileW
InitNetworkAddressControl
SHAppBarMessage
SHCreateItemFromParsingName
SHGetFileInfoW
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

ws2_32

WSAStartup
htons
htonl
ntohl
WSACleanup
ntohs

xerces-c_2_8

??1BinInputStream@xercesc_2_8@@UAE@XZ
??0BinInputStream@xercesc_2_8@@IAE@XZ
?getEncoding@InputSource@xercesc_2_8@@UBEPB_WXZ
?getIssueFatalErrorIfNotFound@InputSource@xercesc_2_8@@UBE_NXZ
?getPublicId@InputSource@xercesc_2_8@@UBEPB_WXZ
?getSystemId@InputSource@xercesc_2_8@@UBEPB_WXZ
?setEncoding@InputSource@xercesc_2_8@@UAEXQB_W@Z
?setIssueFatalErrorIfNotFound@InputSource@xercesc_2_8@@UAEX_N@Z
?setPublicId@InputSource@xercesc_2_8@@UAEXQB_W@Z
?setSystemId@InputSource@xercesc_2_8@@UAEXQB_W@Z
?fgXercesSchema@XMLUni@xercesc_2_8@@2QB_WB
?fgXercesSchemaFullChecking@XMLUni@xercesc_2_8@@2QB_WB
?fgXercesSchemaExternalSchemaLocation@XMLUni@xercesc_2_8@@2QB_WB
?fgXercesSchemaExternalNoNameSpaceSchemaLocation@XMLUni@xercesc_2_8@@2QB_WB
?fgXercesUserAdoptsDOMDocument@XMLUni@xercesc_2_8@@2QB_WB
?fgDOMComments@XMLUni@xercesc_2_8@@2QB_WB
?fgDOMDatatypeNormalization@XMLUni@xercesc_2_8@@2QB_WB
?fgDOMNamespaces@XMLUni@xercesc_2_8@@2QB_WB
?fgDOMValidation@XMLUni@xercesc_2_8@@2QB_WB
?fgDOMWhitespaceInElementContent@XMLUni@xercesc_2_8@@2QB_WB
?fgXercescDefaultLocale@XMLUni@xercesc_2_8@@2QBDB
?fgMemoryManager@XMLPlatformUtils@xercesc_2_8@@2PAVMemoryManager@2@A
??0InputSource@xercesc_2_8@@IAE@QAVMemoryManager@1@@Z
??0Wrapper4InputSource@xercesc_2_8@@QAE@QAVInputSource@1@_NQAVMemoryManager@1@@Z
?getDOMImplementation@DOMImplementationRegistry@xercesc_2_8@@SAPAVDOMImplementation@2@PB_W@Z
??1DOMErrorHandler@xercesc_2_8@@UAE@XZ
?decodeToXMLByte@Base64@xercesc_2_8@@SAPAEQB_WPAIQAVMemoryManager@2@W4Conformance@12@@Z
?encode@Base64@xercesc_2_8@@SAPAEQBEIPAIQAVMemoryManager@2@@Z
??1MemoryManager@xercesc_2_8@@UAE@XZ
?Terminate@XMLPlatformUtils@xercesc_2_8@@SAXXZ
?Initialize@XMLPlatformUtils@xercesc_2_8@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@_N@Z
??1InputSource@xercesc_2_8@@UAE@XZ
?fgDOMEntities@XMLUni@xercesc_2_8@@2QB_WB
??3XMemory@xercesc_2_8@@SAXPAX@Z
??2XMemory@xercesc_2_8@@SAPAXI@Z
??1Wrapper4InputSource@xercesc_2_8@@UAE@XZ

Exports

Exports

??0?$oserializer@Vtext_woarchive@archive@boost@@UAudioInfo@narrationserializer@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@UAudioTrackInfo@narrationserializer@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackInfo@narrationserializer@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackPart@narrationserializer@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@UVideoTrackInfo@narrationserializer@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@V?$optional@UAudioInfo@narrationserializer@@@3@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@detail@archive@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UAudioInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UAudioTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UMediaTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UMediaTrackPart@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UVideoTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$optional@UAudioInfo@narrationserializer@@@boost@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UAudioInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UAudioTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UMediaTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UMediaTrackPart@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UVideoTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@V?$optional@UAudioInfo@narrationserializer@@@boost@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@serialization@boost@@@serialization@boost@@QAE@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UAudioInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UAudioInfo@narrationserializer@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UAudioTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UAudioTrackInfo@narrationserializer@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UMediaTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UMediaTrackInfo@narrationserializer@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UMediaTrackPart@narrationserializer@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UMediaTrackPart@narrationserializer@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UVideoTrackInfo@narrationserializer@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UVideoTrackInfo@narrationserializer@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$optional@UAudioInfo@narrationserializer@@@boost@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$optional@UAudioInfo@narrationserializer@@@boost@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UAudioInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UAudioInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UAudioTrackInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UAudioTrackInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UMediaTrackInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UMediaTrackInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UMediaTrackPart@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UMediaTrackPart@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UVideoTrackInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UVideoTrackInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$optional@UAudioInfo@narrationserializer@@@3@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$optional@UAudioInfo@narrationserializer@@@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UAudioInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UAudioInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UAudioTrackInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UAudioTrackInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackPart@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackPart@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UVideoTrackInfo@narrationserializer@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UVideoTrackInfo@narrationserializer@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$optional@UAudioInfo@narrationserializer@@@3@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$optional@UAudioInfo@narrationserializer@@@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@CAAA_NXZ
?get_mutable_instance@?$singleton@V?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?is_destroyed@?$singleton@V?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@SA_NXZ
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UAudioInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UAudioTrackInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UMediaTrackInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UMediaTrackPart@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UVideoTrackInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$optional@UAudioInfo@narrationserializer@@@3@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@CAAA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@SAXXZ
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UAudioInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UAudioTrackInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UMediaTrackPart@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UVideoTrackInfo@narrationserializer@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$optional@UAudioInfo@narrationserializer@@@3@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UMediaTrackPart@narrationserializer@@V?$allocator@UMediaTrackPart@narrationserializer@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?unlock@singleton_module@serialization@boost@@SAXXZ

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 450KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 936KB - Virtual size: 940KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

670816bf44741a8f6425a009510e92c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

uxtheme

dbghelp

shlwapi

comctl32

msimg32

gdiplus

oleacc

imm32

dwmapi

winmm

version

winspool.drv

comdlg32

shell32

ws2_32

xerces-c_2_8

Exports

Exports

Sections

.text Size: 5.8MB - Virtual size: 5.8MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 450KB - Virtual size: 479KB

_RDATA Size: 9KB - Virtual size: 9KB

.rsrc Size: 75KB - Virtual size: 74KB

.reloc Size: 936KB - Virtual size: 940KB

.text
Size: 5.8MB - Virtual size: 5.8MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 450KB - Virtual size: 479KB

_RDATA
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 75KB - Virtual size: 74KB

.reloc
Size: 936KB - Virtual size: 940KB