2024-02-02_97f6d376a732cd0d415c1c8feca61886_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-02_97f6d376a732cd0d415c1c8feca61886_magniber
Size

3.3MB
MD5

97f6d376a732cd0d415c1c8feca61886
SHA1

ebfb2d82419fefab573e6e699194dcccc0b09bb8
SHA256

e89f66c6fe031e4a0d7708b7b1171253144c9f22ca139136815a0e06ec2b650d
SHA512

ee726a486c664f4fc51eeeb5be2984f73e816452ae64917a4caa7a27cd527ad5088d9a4a13bc222e51fae4e1a6afd85392a20bf010c375d2d0367880446a93fe
SSDEEP

98304:wVqASEEe+OYS2dIDo+1px3H70BRYoNHdlm+zf3yJLimmzLWHDWun7ht5Q0m+I90K:tEj+OYS2eDoMpQ0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-02_97f6d376a732cd0d415c1c8feca61886_magniber

Files

2024-02-02_97f6d376a732cd0d415c1c8feca61886_magniber
.exe windows:5 windows x86 arch:x86

3262af43b4cd47f95e49d85376f8cfc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\svn\s22\live\build\game\FarmFrenzy_AllAboard.pdb

Imports

kernel32

SetCurrentDirectoryW
GetLastError
GetModuleHandleW
GetModuleFileNameW
InterlockedCompareExchange
SetLastError
ReleaseSemaphore
SetEnvironmentVariableA
GetTimeZoneInformation
SetEndOfFile
SetStdHandle
FlushFileBuffers
LoadLibraryExW
GetConsoleCP
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateSemaphoreW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
OutputDebugStringW
LoadLibraryW
GetProcAddress
FreeLibrary
GetFileSize
FindFirstFileW
SetFilePointer
MapViewOfFile
UnmapViewOfFile
WriteFile
GetFileAttributesW
ReadFile
CreateFileW
GetTempPathW
GetCurrentDirectoryW
FindClose
CreateFileMappingW
RemoveDirectoryW
FindNextFileW
CloseHandle
DeleteFileW
QueryPerformanceCounter
Sleep
CreateMutexW
SetThreadExecutionState
GetCurrentThreadId
SetUnhandledExceptionFilter
GetCurrentThread
GetLocalTime
GetCurrentProcessId
GetLocaleInfoA
GetSystemInfo
GetUserDefaultUILanguage
InterlockedDecrement
WaitForSingleObject
SetEvent
SetThreadPriority
CreateEventW
CreateThread
GetTickCount
LocalFree
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
DeleteCriticalSection
GlobalLock
GlobalAlloc
GlobalUnlock
FindResourceW
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetThreadContext
ReadProcessMemory
GetEnvironmentVariableA
GetModuleFileNameA
GetCurrentDirectoryA
OutputDebugStringA
GetVersionExA
SuspendThread
ResumeThread
GetStringTypeW
EncodePointer
HeapFree
HeapAlloc
GetCommandLineA
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
GetSystemTimeAsFileTime
AreFileApisANSI
HeapReAlloc
SetFilePointerEx
ExitProcess
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
ExitThread

dbghelp

SymInitialize
SymFromAddr
MiniDumpWriteDump

gdi32

StretchBlt
GetDeviceCaps
CreateDIBSection
DeleteDC
DeleteObject
SelectObject
SetStretchBltMode
CreateCompatibleDC

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

shlwapi

PathRemoveFileSpecW
PathIsRelativeW

d3d9

Direct3DCreate9

d3dx9_43

D3DXCompileShader

openal32

alDeleteSources
alcDestroyContext
alSourceStop
alListenerfv
alGenBuffers
alSourcei
alcGetString
alSourcef
alcOpenDevice
alcCreateContext
alGenSources
alSourceUnqueueBuffers
alDeleteBuffers
alGetSourcef
alcGetError
alGetBufferi
alSourcePause
alBufferData
alcMakeContextCurrent
alGetSourcei
alSourceQueueBuffers
alGetError
alSourcePlay

user32

GetDC
PostMessageW
GetCursorPos
DispatchMessageW
GetWindowThreadProcessId
DefWindowProcW
SetWindowTextW
AdjustWindowRect
RegisterClassW
CreateWindowExW
ShowWindow
SetWindowPos
SetWindowLongW
PeekMessageW
GetAsyncKeyState
BringWindowToTop
SetCursorPos
GetWindowPlacement
LoadIconW
GetForegroundWindow
TranslateMessage
BeginPaint
ReleaseDC
EnumDisplaySettingsExW
LoadCursorW
AttachThreadInput
SetForegroundWindow
UnregisterClassW
RegisterWindowMessageW
GetWindowRect
ScreenToClient
SystemParametersInfoW
DestroyWindow
ClientToScreen
EndPaint
ReleaseCapture
SetCapture
SetClipboardData
OpenClipboard
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
DestroyIcon
DrawIconEx
LoadImageW
MessageBoxA
ClipCursor
GetClientRect
SetCursor

advapi32

AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
GetUserNameA
SetNamedSecurityInfoW

shell32

ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3262af43b4cd47f95e49d85376f8cfc6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

dbghelp

gdi32

winmm

wtsapi32

shlwapi

d3d9

d3dx9_43

openal32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 488KB - Virtual size: 488KB

.data Size: 63KB - Virtual size: 334KB

.rodata Size: 3KB - Virtual size: 2KB

.rsrc Size: 323KB - Virtual size: 322KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 488KB - Virtual size: 488KB

.data
Size: 63KB - Virtual size: 334KB

.rodata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 323KB - Virtual size: 322KB