Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_48d24493e7f257bf8e94ea4afb73ce57_magniber.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_48d24493e7f257bf8e94ea4afb73ce57_magniber.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-18_48d24493e7f257bf8e94ea4afb73ce57_magniber
-
Size
277KB
-
MD5
48d24493e7f257bf8e94ea4afb73ce57
-
SHA1
154590aac6b0f5253dce7d69d75f1488fbbb8238
-
SHA256
f9129faeef1eb4058c21f4333b31ffd9f104c9de61eac21d2bf895ba21428884
-
SHA512
681c052f1e58ce16cf30bb7e8624fe1186d6d21f18f40f437e632226866bdd398021a87b289ccd54c03f7b5f9ab5240758a8e7167f009bd78760190bbf56434f
-
SSDEEP
3072:mlu90+rMb6CPoYHc/UA6Rz4rCmVpk37oCVvjM+BoAhMheafesrj2BMENBKao:04QbpPoYHc/IYfa5A4MheHBMENBKao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-18_48d24493e7f257bf8e94ea4afb73ce57_magniber
Files
-
2024-02-18_48d24493e7f257bf8e94ea4afb73ce57_magniber.exe windows:5 windows x86 arch:x86
855f87406373588c520e468bd9aebf9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetProcessAffinityMask
GetProcessIoCounters
GetCurrentProcess
GetTickCount
GetSystemTimes
GlobalAlloc
TerminateThread
GetProcessHandleCount
GetExitCodeProcess
TerminateProcess
ExitThread
LoadLibraryA
GetProcessId
GetProcessWorkingSetSize
GetFileType
GetProcessAffinityMask
FatalExit
VirtualProtect
SetProcessShutdownParameters
ReadFile
SetEndOfFile
WriteConsoleW
SetFilePointerEx
SetStdHandle
CloseHandle
CreateFileW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
ReadConsoleW
user32
GetPropW
ShowScrollBar
EnableScrollBar
GetMessageExtraInfo
BeginPaint
GetMonitorInfoA
SetPropW
GetScrollRange
GetCaretPos
winhttp
WinHttpConnect
WinHttpCloseHandle
WinHttpWriteData
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE