2024-01-26_247f30b181b3339801bec0e6ba6c8d04_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-26_247f30b181b3339801bec0e6ba6c8d04_magniber
Size

2.1MB
MD5

247f30b181b3339801bec0e6ba6c8d04
SHA1

c4dedf55c9e73e52f771081ba4076615cf52f132
SHA256

e3d90e6935601f84ce39d874d5d453b919de4e04a1c92eacdcdc751c69819002
SHA512

96721d708a890bb1fae6b7ef63a94537d8a1dbeeaae2fdf0dc86a66d985408f30583d759c08484e7ff26d020bc6587c001aa41858493f9e6b65abbf6f08a81f9
SSDEEP

49152:Y4Ta/Z99fPs1oB2m7iOz9mKlGJs9C44NHX5TVfML8YKa8e2:3Ta3tEs96VAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-26_247f30b181b3339801bec0e6ba6c8d04_magniber

Files

2024-01-26_247f30b181b3339801bec0e6ba6c8d04_magniber
.exe windows:5 windows x86 arch:x86

5aa5d6e3e6b449b61d3026c26f4187e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleUninitialize
CoInitializeEx
OleInitialize
OleLockRunning
OleSetContainedObject
OleCreate
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID
CoCreateGuid

winhttp

WinHttpGetIEProxyConfigForCurrentUser

crypt32

CertGetNameStringW
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyRevocation
CertVerifyCertificateChainPolicy
CertDuplicateCertificateContext
CryptDecodeObjectEx
PFXImportCertStore
CertOpenSystemStoreW
CertAddStoreToCollection
CertAddCertificateContextToStore
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore

kernel32

SizeofResource
FindFirstFileA
FindClose
UnmapViewOfFile
GetFileAttributesA
CreateFileA
LockResource
GlobalFree
CloseHandle
LoadResource
FindResourceW
CreateFileMappingW
MapViewOfFile
CreateMutexW
CreateProcessW
GetExitCodeProcess
FindFirstFileW
DeleteFileW
GetFileSize
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetVolumeInformationW
GetSystemDirectoryW
LocalFree
GetComputerNameW
GetDiskFreeSpaceExW
QueryPerformanceFrequency
GetProcAddress
GetModuleHandleW
GlobalMemoryStatus
GetSystemWindowsDirectoryW
QueryPerformanceCounter
MulDiv
ExitProcess
GetTempPathW
GetFileAttributesExW
LoadLibraryW
GetLongPathNameW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
WideCharToMultiByte
SetEndOfFile
SetFilePointer
CreateDirectoryW
RemoveDirectoryW
CreateFileW
GetFileAttributesW
GetSystemTimeAsFileTime
GetEnvironmentVariableA
SetEnvironmentVariableA
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForMultipleObjects
CreateEventW
FreeLibrary
SetLastError
CopyFileA
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
DeleteCriticalSection
ReadConsoleW
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapSize
GetTimeZoneInformation
GetProcessHeap
SetFilePointerEx
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
InterlockedIncrement
CreateThread
WaitForSingleObject
GetVersionExW
ReleaseMutex
Sleep
CreateDirectoryA
MultiByteToWideChar
GetLastError
CreateMutexA
GetTempPathA
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
HeapFree
HeapReAlloc
HeapAlloc
LoadLibraryExW
InterlockedPushEntrySList
RtlUnwind
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetModuleFileNameW
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
DecodePointer
FindNextFileW

user32

TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
ShowWindow
SetMenu
LoadAcceleratorsW
GetSystemMetrics
TranslateAcceleratorW
SetFocus
BringWindowToTop
SetActiveWindow
BeginPaint
EndPaint
MessageBoxW
PostQuitMessage
DefWindowProcW
SetRect
GetDC
SetForegroundWindow
GetMessageW
LoadStringW
DestroyWindow
GetSystemMenu
EnableMenuItem
GetWindowLongW
SetWindowLongW
SetWindowPos
SendMessageW
ReleaseDC

advapi32

FreeSid
RegOpenKeyExW
CheckTokenMembership
AllocateAndInitializeSid
LookupAccountNameW
ConvertSidToStringSidW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom

shell32

ShellExecuteA
ShellExecuteW

oleaut32

VariantInit
VariantClear
SysAllocString
SysFreeString

shlwapi

PathFileExistsA

wsock32

getsockname
ntohl
ioctlsocket
socket
__WSAFDIsSet
select
WSAGetLastError
WSAStartup
WSACleanup
htons
ntohs
accept
bind
closesocket
connect
inet_ntoa
getpeername
shutdown
getsockopt
listen
recv
recvfrom
send
sendto
setsockopt

ws2_32

freeaddrinfo
getnameinfo
getaddrinfo

gdi32

GetDeviceCaps

Exports

Exports

_Abrwgfiuq@36
_diqjodihqod@12
_dqbquiiqgq@16
_dqhwioqhdoiqdghqiu@12
_dugqyudvbqbkdq@16
_gqgigbuifqiufq@16
_hguiqgdqld@12
_ihdoqhdoiq@12
_iohqobqbqocqoq@4
_jwqdiuqgdiuq@12
_kodioqhdq@16
_mdlqkndoiq@28
_nenvijwbviwq@16
_nlkwqdjqbiduq@16
_qdqohdoqddq@16
_qhdoqdoqdqj@12
_ugiqgdiqbqdd@12
_yeywbelqnlqnf@12

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 595KB - Virtual size: 594KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5aa5d6e3e6b449b61d3026c26f4187e1

Headers

DLL Characteristics

File Characteristics

Imports

ole32

winhttp

crypt32

kernel32

user32

advapi32

shell32

oleaut32

shlwapi

wsock32

ws2_32

gdi32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 335KB - Virtual size: 335KB

.data Size: 26KB - Virtual size: 38KB

.gfids Size: 2KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 595KB - Virtual size: 594KB

.reloc Size: 67KB - Virtual size: 67KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 335KB - Virtual size: 335KB

.data
Size: 26KB - Virtual size: 38KB

.gfids
Size: 2KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 595KB - Virtual size: 594KB

.reloc
Size: 67KB - Virtual size: 67KB