Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_da954ea94632146bed7a3cf538f6d137_magniber.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_da954ea94632146bed7a3cf538f6d137_magniber.exe
Resource
win10v2004-20231215-en
Target
2024-02-19_da954ea94632146bed7a3cf538f6d137_magniber
Size
3.4MB
MD5
da954ea94632146bed7a3cf538f6d137
SHA1
f9a8f357063e67e986ec5688c73152811d2f5256
SHA256
9a4dcf33b9c885fcfcdf63f355e29bd63892c5f94ca960a1b8b78b01b1cb1eae
SHA512
f41b3beef954604ac307f43c71f087077814e64f741778ca918c0139ee63749e4ecdddbaff10690dfeba91bc126e03cf950e98443ee68a9a5e9f391f1dce25b8
SSDEEP
49152:bOHOjufPDXQ0gKhsoMqqUIAea8tDZdUT7ItJvtfySpMJHC9WFPXtsU1G:UBfbXDgosNUPea8tE0voJJ6
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\develop\projects\tt-apps\bin\Release\tt-cleaner\tt-cleaner.pdb
CreateProcessW
QueryDosDeviceW
K32GetProcessImageFileNameW
CreateToolhelp32Snapshot
Process32FirstW
GetExitCodeProcess
ReadFile
GetFileSizeEx
CreateFileA
FormatMessageA
SetLastError
WaitForSingleObjectEx
CloseHandle
GetTickCount
QueryPerformanceCounter
ExpandEnvironmentStringsA
Sleep
VerifyVersionInfoA
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetSystemDirectoryA
QueryPerformanceFrequency
VerSetConditionMask
SleepEx
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
Process32NextW
DecodePointer
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
SetStdHandle
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetStdHandle
ExitProcess
VirtualQuery
GetModuleHandleExW
ExitThread
PeekNamedPipe
GetFileType
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
VirtualProtect
VirtualAlloc
LoadLibraryExW
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
SetEvent
GetSystemTime
GetCurrentProcessId
LockFileEx
UnlockFile
HeapCompact
LoadLibraryW
GetSystemInfo
DeleteFileA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
CreateMutexW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
InitializeCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
GetThreadTimes
WaitForSingleObject
GetComputerNameW
GetSystemDirectoryW
GetVolumeInformationW
GetLongPathNameW
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
MapViewOfFile
CreateFileMappingW
GetFileInformationByHandle
UnmapViewOfFile
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetFilePointer
SetFileTime
OpenProcess
FindFirstFileExW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
FormatMessageW
DuplicateHandle
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetExitCodeThread
TryEnterCriticalSection
EncodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
CreateFileW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
CreateDirectoryW
SizeofResource
FindFirstFileW
GetFullPathNameW
FindNextFileW
lstrlenW
WriteFile
RemoveDirectoryW
FindClose
GetFileAttributesW
SetFileAttributesW
LockResource
DeleteFileW
FindResourceExW
LoadResource
FindResourceW
MoveFileExW
GetFileSize
CopyFileW
MoveFileW
GetTempPathW
GetWindowsDirectoryW
GetDriveTypeW
GetModuleFileNameW
GetVersionExW
LocalFree
GetTempFileNameW
VerifyVersionInfoW
CreateTimerQueueTimer
DeleteTimerQueueTimer
FlushFileBuffers
LocalAlloc
GetFileAttributesExW
PostMessageW
GetWindow
GetTopWindow
GetClassNameW
wsprintfW
GetWindowThreadProcessId
CryptHashData
GetLengthSid
InitializeAcl
AddAce
IsValidSid
InitializeSid
CopySid
SetNamedSecurityInfoW
GetSidLengthRequired
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
RegGetValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
ConvertSidToStringSidW
OpenServiceW
QueryServiceConfig2W
QueryServiceConfigW
EnumServicesStatusExW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptAcquireContextW
CryptDestroyHash
OpenSCManagerW
LookupAccountNameW
SystemFunction036
RegDeleteKeyW
RegEnumValueW
RegQueryValueExW
CloseServiceHandle
inflateEnd
inflateInit_
inflateInit2_
inflate
zlibVersion
CertGetNameStringA
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertCloseStore
CertAddCertificateContextToStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertOpenStore
WSAStartup
WSACleanup
__WSAFDIsSet
select
WSAGetLastError
socket
recv
WSAIoctl
freeaddrinfo
WSASetLastError
connect
getpeername
getsockname
getsockopt
ioctlsocket
inet_ntoa
bind
getaddrinfo
closesocket
gethostbyname
htons
setsockopt
ntohs
send
?staticMetaObject@QObject@@2UQMetaObject@@B
??1QString@@QAE@XZ
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
??1QJsonValue@@QAE@XZ
??4QJsonValueRef@@QAEAAV0@ABVQJsonValue@@@Z
??0QJsonArray@@QAE@XZ
??1QJsonArray@@QAE@XZ
??4QJsonArray@@QAEAAV0@$$QAV0@@Z
??0QJsonObject@@QAE@XZ
??1QJsonObject@@QAE@XZ
??4QJsonObject@@QAEAAV0@$$QAV0@@Z
??AQJsonObject@@QAE?AVQJsonValueRef@@ABVQString@@@Z
??0QJsonValue@@QAE@ABVQString@@@Z
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
??0QJsonValue@@QAE@PBD@Z
??8QString@@QBE_NPBD@Z
?fromStdString@QString@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?toStdWString@QString@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toInt@QJsonValue@@QBEHH@Z
?toString@QJsonValue@@QBE?AVQString@@XZ
?at@QJsonArray@@QBE?AVQJsonValue@@H@Z
?begin@QJsonArray@@QBE?AVconst_iterator@1@XZ
?end@QJsonArray@@QBE?AVconst_iterator@1@XZ
??0QJsonObject@@QAE@$$QAV0@@Z
??AQJsonObject@@QBE?AVQJsonValue@@ABVQString@@@Z
??1QByteArray@@QAE@XZ
?toUtf8@QString@@QHAE?AVQByteArray@@XZ
?array@QJsonDocument@@QBE?AVQJsonArray@@XZ
?object@QJsonDocument@@QBE?AVQJsonObject@@XZ
?toJson@QJsonDocument@@QBE?AVQByteArray@@W4JsonFormat@1@@Z
?toJson@QJsonDocument@@QBE?AVQByteArray@@XZ
?fromJson@QJsonDocument@@SA?AV1@ABVQByteArray@@PAUQJsonParseError@@@Z
??1QJsonDocument@@QAE@XZ
??0QJsonDocument@@QAE@ABVQJsonArray@@@Z
??0QJsonDocument@@QAE@ABVQJsonObject@@@Z
??0QString@@QAE@ABVQByteArray@@@Z
?staticMetaObject@QWebEngineView@@2UQMetaObject@@B
UnloadUserProfile
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
WinHttpCloseHandle
WinHttpSetOption
WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpOpen
WinHttpCrackUrl
WinHttpConnect
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpSendRequest
InternetGetCookieW
InternetSetCookieW
SHGetDesktopFolder
ShellExecuteW
CommandLineToArgvW
SHGetKnownFolderPath
SHGetFolderPathW
CoInitializeEx
OleRun
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoCreateInstance
CoInitialize
CoSetProxyBlanket
CoTaskMemFree
SysFreeString
GetErrorInfo
SysStringLen
VariantInit
SysAllocString
VariantChangeType
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ