2024-02-18_cdbcdbd65c050c549f99dfb4b8efbf47_magniber

Sharing

Copy URL Twitter E-mail

General

Target
2024-02-18_cdbcdbd65c050c549f99dfb4b8efbf47_magniber
Size 4.3MB
Sample240218-pyxg2saa91
SHA256 b2196f6ee218510726c1b482949455c937fc841656df9284403d14217c30d807
MD5 cdbcdbd65c050c549f99dfb4b8efbf47
SHA1 035df815fe26fac70a98376e6a5c14fe2c90c929
SHA512 06cc9713603b6589f4683afa9893095b17c8cfefc635c3b3faac61593fc71f5ca75f0825684dc59b64a628afc9403f7995acdb1cf771bf16660c9a0aff15218f
SSDEEP 98304:QsbltXkUt8hD37ZerXSFSYGBDVfSXNiu0fEL8G+:DJtpadS2xlkueEL8v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-18_cdbcdbd65c050c549f99dfb4b8efbf47_magniber

File Explorer

2024-02-18_cdbcdbd65c050c549f99dfb4b8efbf47_magniber

.exe 4.3MB

2024-02-18_cdbcdbd65c050c549f99dfb4b8efbf47_magniber

IMPHASH 70710dd0993d00abea20816af9954c33
SHA256 b2196f6ee218510726c1b482949455c937fc841656df9284403d14217c30d807
MD5 cdbcdbd65c050c549f99dfb4b8efbf47
SHA1 035df815fe26fac70a98376e6a5c14fe2c90c929
SHA512 06cc9713603b6589f4683afa9893095b17c8cfefc635c3b3faac61593fc71f5ca75f0825684dc59b64a628afc9403f7995acdb1cf771bf16660c9a0aff15218f
SSDEEP 98304:QsbltXkUt8hD37ZerXSFSYGBDVfSXNiu0fEL8G+:DJtpadS2xlkueEL8v
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1367037

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\buildslave\steam_rel_client_win32\build\src\steamexe\Release\steamexe.pdb

kernel32

SetLastError SystemTimeToFileTime GetSystemTime SetConsoleMode ConvertThreadToFiber ConvertFiberToThread CreateFiber DeleteFiber SwitchToFiber GetEnvironmentVariableW ReadConsoleA WriteFile RemoveDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage HeapReAlloc GetTimeZoneInformation SetConsoleCtrlHandler SetFilePointerEx LCMapStringW CompareStringW HeapAlloc HeapFree HeapValidate HeapSize WriteConsoleW GetStdHandle GetConsoleOutputCP ReadConsoleW GetConsoleMode PeekNamedPipe GetFileType ExitProcess InterlockedPushEntrySList RtlUnwind GetStartupInfoW InitializeSListHead IsProcessorFeaturePresent UnhandledExceptionFilter CreateEventW VerifyVersionInfoW FindResourceA LocalFree LocalAlloc GlobalLock GlobalUnlock GetCurrentProcess GlobalAlloc SizeofResource LockResource LoadResource GetModuleFileNameW OpenProcess GetExitCodeProcess SetStdHandle GetFullPathNameW DeleteFileW CreateDirectoryW VerSetConditionMask MulDiv FreeLibrary LoadLibraryA GetProcAddress Sleep GetCurrentThreadId DeviceIoControl GetFileAttributesW FindFirstFileW FindClose CreateFileW MoveFileExW GetModuleHandleA GetTickCount CreateFileA LeaveCriticalSection EnterCriticalSection GetLastError WaitForSingleObjectEx GetCPInfo DecodePointer EncodePointer ProcessIdToSessionId GetCurrentProcessId GetStringTypeW InitOnceComplete InitOnceBeginInitialize InitializeCriticalSectionEx AcquireSRWLockExclusive OpenEventA SetEvent ReleaseSRWLockExclusive InitializeSRWLock SetProcessAffinityMask GetProcessHeaps DebugBreak SetErrorMode CloseHandle RemoveDirectoryA GetFileAttributesA MultiByteToWideChar OutputDebugStringA SystemTimeToTzSpecificLocalTime GetCurrentDirectoryA GetCurrentDirectoryW FindNextFileW WideCharToMultiByte GetModuleHandleW LoadLibraryExA LoadLibraryExW LoadLibraryW FindFirstFileExW FlushFileBuffers GetDiskFreeSpaceA GetDiskFreeSpaceExW GetDriveTypeW GetFileAttributesExW GetFileInformationByHandle GetFileSizeEx GetFileTime ReadFile SetEndOfFile SetFileAttributesW SetFilePointer SetFileTime SleepEx GetSystemTimeAsFileTime CopyFileW GetDateFormatW GetTimeFormatW FileTimeToSystemTime GlobalFree SetHandleInformation VirtualProtect VirtualQuery GetModuleFileNameA GetModuleHandleExA GetModuleHandleExW IsBadWritePtr CreateIoCompletionPort PostQueuedCompletionStatus InitializeCriticalSection DeleteCriticalSection ResetEvent WaitForSingleObject CreateEventA QueryPerformanceCounter QueryPerformanceFrequency GetCommandLineA GetProcessHeap HeapSetInformation HeapLock HeapUnlock HeapWalk HeapQueryInformation TerminateProcess GlobalMemoryStatusEx VirtualAlloc IsDebuggerPresent GetCommandLineW DuplicateHandle RaiseException InitializeCriticalSectionAndSpinCount TryEnterCriticalSection SwitchToThread CreateThread GetCurrentThread OpenThread SetThreadPriority TerminateThread GetExitCodeThread SuspendThread ResumeThread TlsAlloc TlsGetValue TlsSetValue TlsFree SetThreadAffinityMask SetEnvironmentVariableW SetCurrentDirectoryW OutputDebugStringW CreateProcessW GetSystemInfo GetProcessAffinityMask SetUnhandledExceptionFilter

user32

CreateWindowExW RegisterClassExW DefWindowProcW PostThreadMessageW SendMessageW PeekMessageW GetProcessWindowStation GetWindowThreadProcessId EnumWindows DispatchMessageW IsWindowVisible TranslateMessage GetMonitorInfoW MonitorFromWindow MonitorFromPoint LoadIconW LoadCursorW EnumChildWindows SetClassLongW SetWindowLongW GetWindowLongW MapWindowPoints MessageBoxW GetWindowRect SetWindowTextW RedrawWindow EndPaint BeginPaint UpdateWindow KillTimer UnregisterClassW GetClassInfoExW wsprintfA DialogBoxParamA EndDialog GetDlgItem SetDlgItemInt GetDlgItemInt SetDlgItemTextA OpenClipboard CloseClipboard SetClipboardData EmptyClipboard GetWindowTextLengthA GetDesktopWindow SetTimer MsgWaitForMultipleObjects SetWindowPos MoveWindow GetMessageW ReleaseDC GetDC GetUserObjectInformationW AllowSetForegroundWindow MessageBoxA DestroyWindow ShowWindow

gdi32

AddFontMemResourceEx TextOutW CreateDIBSection SetTextColor SetBkMode SetBkColor SelectObject RemoveFontMemResourceEx GetTextExtentPoint32W GetStockObject GetDeviceCaps DeleteObject DeleteDC CreateICW CreateFontW CreateCompatibleDC SwapBuffers SetPixelFormat ChoosePixelFormat

advapi32

RegisterEventSourceW DeregisterEventSource SetSecurityDescriptorDacl InitializeSecurityDescriptor RegOpenKeyA RegSetValueExW RegSetValueExA RegQueryValueExW RegQueryValueExA ReportEventW RegOpenKeyExA RegCreateKeyExA RegCloseKey

shell32

SHGetFileInfoW CommandLineToArgvW ord680 SHGetKnownFolderPath

ole32

CoTaskMemFree

oleaut32

VariantClear

comctl32

InitCommonControlsEx

psapi

GetModuleFileNameExW GetModuleInformation GetProcessMemoryInfo

version

VerQueryValueW

crypt32

CertGetCertificateChain CertOpenStore CertCloseStore CertCreateCertificateContext CertFreeCertificateContext CertAddCertificateContextToStore CertFreeCertificateChain

ws2_32

htons ntohl ntohs getaddrinfo freeaddrinfo closesocket shutdown socket WSAStartup WSAGetLastError WSARecv WSARecvFrom WSASend htonl WSASocketA __WSAFDIsSet select WSASetLastError WSACleanup WSAIoctl setsockopt getsockname ioctlsocket bind send recv connect WSASendTo

wsock32

ord1142

bcrypt

BCryptGenRandom

Sharing

General

Malware Config

Signatures

File Explorer

2024-02-18_cdbcdbd65c050c549f99dfb4b8efbf47_magniber

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

psapi

version

crypt32

ws2_32

wsock32

bcrypt

generic