C:\Users\HyoN\Desktop\Hyon Src\MuServer\GameServer\Release\GameServer_EX601\GameServer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_7ced05d7450668b8a27d744cd0401989_magniber.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-21_7ced05d7450668b8a27d744cd0401989_magniber.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-21_7ced05d7450668b8a27d744cd0401989_magniber
-
Size
12.1MB
-
MD5
7ced05d7450668b8a27d744cd0401989
-
SHA1
006fe7040a4f237cb5a4c5d3e2afa97a68abc5db
-
SHA256
d513b994c536522b371cbaa3241ba2ccf7dab90dec1bced46f32264f3e9557a3
-
SHA512
610e70c80403e29b6324ad5895e6e1efa491bb92da7b5215a04950813dd7ce70a1870670da1a58a15eaaa2b40ab7a06bccd3d28549c643840dc08af2364259fa
-
SSDEEP
24576:YpBMUhN2EvKZPn3nSZ09VX4UP54o9soKRFOOotIlegQA0B01TiwhYo/Xx1G1fO+w:9qNLSZfHGUUofNbBOWBQwL6THkykw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-21_7ced05d7450668b8a27d744cd0401989_magniber
Files
-
2024-02-21_7ced05d7450668b8a27d744cd0401989_magniber.exe windows:6 windows x86 arch:x86
5c47cbc81bd3c503cebfd48f9d61aa89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ReadFile
WriteFile
DeleteFileA
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateMutexA
HeapAlloc
GetProcessHeap
HeapFree
GetLocalTime
CreateDirectoryA
SetFilePointer
GlobalAlloc
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
SetErrorMode
SetUnhandledExceptionFilter
TerminateThread
WaitForSingleObject
ReleaseSemaphore
CreateTimerQueue
DeleteTimerQueue
CreateTimerQueueTimer
CreateIoCompletionPort
SetThreadPriority
GetSystemInfo
GetQueuedCompletionStatus
CloseHandle
HeapSize
HeapReAlloc
DecodePointer
ExitProcess
SetEndOfFile
MoveFileExW
DeleteFileW
CreateFileW
CreatePipe
GetFileAttributesExW
GetExitCodeProcess
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileSizeEx
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetFileSize
CreateFileA
FindNextFileA
FindFirstFileA
CreateThread
GetLastError
CreateSemaphoreA
InitializeCriticalSectionAndSpinCount
GetTickCount
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
ReadConsoleW
GetConsoleMode
CreateProcessW
DuplicateHandle
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedPushEntrySList
RtlUnwind
VirtualProtect
LoadLibraryA
GetModuleHandleExA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
VirtualQuery
VirtualFree
VirtualAlloc
SetLastError
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
InitializeSListHead
RaiseException
OutputDebugStringW
WriteConsoleW
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
WideCharToMultiByte
FormatMessageA
GetTempPathW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
MultiByteToWideChar
GetStringTypeW
GetCPInfo
IsDebuggerPresent
user32
UpdateWindow
DialogBoxParamA
MessageBoxA
DestroyWindow
CreateWindowExA
PostQuitMessage
EndDialog
SetRect
GetClientRect
GetDC
ShowWindow
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
ReleaseDC
SetTimer
SetWindowTextA
LoadStringA
wsprintfA
DefWindowProcA
FillRect
gdi32
TextOutA
SetTextColor
SelectObject
SetBkMode
DeleteObject
CreateSolidBrush
CreateFontA
GetStockObject
odbc32
ord11
ord75
ord7
ord31
ord36
ord20
ord18
ord8
ord4
ord26
ord16
ord13
ord24
ws2_32
htons
inet_addr
gethostbyname
connect
WSAGetLastError
WSAAsyncSelect
closesocket
recv
send
WSAStartup
ntohl
WSASocketA
htonl
bind
listen
WSASend
WSARecv
inet_ntoa
WSAAccept
sendto
socket
dbghelp
MiniDumpWriteDump
winmm
timeGetTime
Exports
Exports
__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10.0MB - Virtual size: 30.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ