s:\PROJECT\metin2\mainline\Srcs\Tools\TorrentPatch\bin\TorrentPatch_x86_MT_VC90.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber
-
Size
7.7MB
-
MD5
066e803b36c6af6a08395ec5ebdf4de5
-
SHA1
8e2a279fe9a36565244640479bbc23cb247d9977
-
SHA256
a283f1dbbea38c6c36a91587d562180da4a7d0d13dd5bf49d8f7147a96948a39
-
SHA512
ae770d333e67e007e19ff65d3b7828e64bf23fb9dfe3240f0510ea65aea44b804e438af24f79223a5057bb0044f20964cda68069c1db1a1b70b83f89e8066124
-
SSDEEP
196608:yvpPBFBagQs2ix9/iUVMP8Kxt+Gws4h/hiwsZh/hiwsF:ynFBagQs2ix9li8Ds4h/hvsZh/hvsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber
Files
-
2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber.exe windows:5 windows x86 arch:x86
d606fc67ad971465f35f2602e10a8b74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCurrentThreadId
LoadLibraryW
CreateSemaphoreW
ReleaseSemaphore
InterlockedIncrement
InterlockedDecrement
SetThreadPriority
TerminateThread
ResumeThread
TlsGetValue
TlsSetValue
GetProcessAffinityMask
GetCurrentProcess
ExitProcess
GetACP
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
SystemTimeToFileTime
GetTempPathW
FindClose
FindFirstFileW
GetTempFileNameW
GetStdHandle
GetTimeZoneInformation
GetThreadLocale
GetCurrentProcessId
GetEnvironmentVariableW
GetCPInfo
IsValidCodePage
GetDiskFreeSpaceW
SetEnvironmentVariableW
GetFileType
GetFileAttributesW
GetWindowsDirectoryW
FindNextFileW
RaiseException
CreateThread
DuplicateHandle
ExpandEnvironmentStringsW
GetCommandLineW
SetErrorMode
SetLastError
LocalAlloc
HeapSize
GetProcessHeap
InterlockedExchange
CreateDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetFileAttributesA
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapReAlloc
ExitThread
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetDriveTypeA
GetFullPathNameA
GetFullPathNameW
MoveFileW
MoveFileA
RemoveDirectoryW
WriteConsoleW
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetCurrentThread
SetHandleCount
VirtualFree
VirtualAlloc
HeapCreate
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
GetCurrentDirectoryA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
CompareStringA
CreateFileMappingW
QueryPerformanceFrequency
CreateEventA
CreateSemaphoreA
CreateIoCompletionPort
GetQueuedCompletionStatus
InterlockedExchangeAdd
PostQueuedCompletionStatus
InterlockedCompareExchange
QueueUserAPC
SleepEx
DeviceIoControl
SetFilePointerEx
ReadFileScatter
GetOverlappedResult
WriteFileGather
VirtualLock
VirtualUnlock
GetFileAttributesExW
FormatMessageA
ResetEvent
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
lstrcpyA
GetSystemTime
SetThreadAffinityMask
CreateFileA
ReadFile
SetFilePointer
UnmapViewOfFile
GetSystemInfo
CreateFileMappingA
OutputDebugStringA
MapViewOfFile
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
SetEvent
WaitForSingleObject
CreateEventW
TlsFree
TlsAlloc
GetModuleHandleW
DeleteFileW
WriteFile
DeleteFileA
GetTickCount
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FormatMessageW
CreateProcessW
SetFileTime
TerminateProcess
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExW
GetFileSize
GetCurrentDirectoryW
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
GetFileTime
GetFileSizeEx
CreateFileW
SetCurrentDirectoryW
CopyFileW
GetModuleFileNameW
Sleep
OpenMutexW
ReleaseMutex
CloseHandle
GetLastError
OutputDebugStringW
CreateMutexW
VirtualQuery
user32
SetWindowTextW
InvalidateRect
EndDeferWindowPos
BeginDeferWindowPos
GetWindow
GetMessageTime
SystemParametersInfoW
GetMenuItemInfoW
GetActiveWindow
CallNextHookEx
RegisterHotKey
UnregisterHotKey
UnhookWindowsHookEx
GetCapture
PtInRect
IsWindow
TrackPopupMenu
IsDialogMessageW
SetWindowsHookExW
GetSysColor
GetUpdateRgn
InflateRect
GetIconInfo
CreateIconIndirect
EndPaint
GetWindowDC
BeginPaint
LoadBitmapW
DestroyIcon
LoadImageW
CreateDialogParamW
GetDlgItem
DrawFrameControl
DrawIconEx
GetClassNameW
GetWindowTextW
GetWindowTextLengthW
SetMenu
DrawIcon
GetUpdateRect
BringWindowToTop
IsZoomed
IsIconic
GetDesktopWindow
GetSystemMenu
FlashWindow
CreateDialogIndirectParamW
GetForegroundWindow
DrawTextW
CopyRect
DrawFocusRect
OffsetRect
GetMessageW
ValidateRect
MapWindowPoints
DestroyCursor
keybd_event
IsClipboardFormatAvailable
HideCaret
DestroyAcceleratorTable
CreateAcceleratorTableW
TranslateAcceleratorW
DrawEdge
UnionRect
ChildWindowFromPoint
DefFrameProcW
TranslateMDISysAccel
DefMDIChildProcW
GetMenuStringW
GetMessagePos
DrawStateW
DrawStateA
RegisterClipboardFormatW
ChangeDisplaySettingsW
EnumDisplaySettingsW
SetScrollInfo
KillTimer
GetFocus
DispatchMessageA
PeekMessageA
SetWindowPos
SetWindowLongW
FillRect
GetWindowRect
GetAsyncKeyState
VkKeyScanW
DispatchMessageW
TranslateMessage
ReleaseDC
GetDC
CheckMenuRadioItem
CheckMenuItem
InsertMenuItemW
EnableMenuItem
GetMenuItemCount
GetSubMenu
CreateMenu
AppendMenuW
DrawMenuBar
GetMenuState
InsertMenuW
RemoveMenu
ModifyMenuW
DestroyMenu
CreatePopupMenu
SetMenuItemInfoW
UnregisterClassW
GetKeyState
RegisterWindowMessageW
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleW
DdeClientTransaction
DdeDisconnect
DdeInitializeW
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeUninitialize
DdeQueryStringW
DdeFreeStringHandle
DestroyWindow
SendMessageW
SetCursor
RegisterClassW
MessageBeep
PeekMessageW
MessageBoxW
PostThreadMessageW
GetScrollInfo
IsWindowEnabled
SetCursorPos
ReleaseCapture
SetCapture
IsWindowVisible
CallWindowProcW
DeferWindowPos
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
GetCursorPos
WindowFromPoint
SetForegroundWindow
RegisterClipboardFormatA
OpenClipboard
SetClipboardData
CloseClipboard
SetWindowRgn
GetWindowLongW
GetClientRect
AdjustWindowRectEx
PostQuitMessage
DefWindowProcW
LoadIconW
LoadCursorW
CreateWindowExW
MoveWindow
GetSystemMetrics
PostMessageW
MessageBoxA
GetParent
SetTimer
ScrollWindow
ShowWindow
EnableWindow
ShowCursor
SetFocus
gdi32
StretchDIBits
DeleteObject
StretchBlt
MaskBlt
SetBrushOrgEx
GetStockObject
Ellipse
RoundRect
Rectangle
PolyPolygon
SetPolyFillMode
Polygon
Pie
Arc
CreateSolidBrush
SelectClipRgn
GetTextColor
GetBkColor
SetMapMode
SetViewportExtEx
GetRegionData
ExtCreateRegion
OffsetRgn
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
GetTextExtentExPointW
GetCharABCWidthsW
SetROP2
TextOutW
PolyBezier
Polyline
SetPixel
GetPixel
ExtFloodFill
ExtSelectClipRgn
GetClipBox
SetTextColor
SetStretchBltMode
SaveDC
RestoreDC
SetBkMode
SetBkColor
CreateBitmap
CreateCompatibleBitmap
BitBlt
DeleteDC
CreateCompatibleDC
GetPaletteEntries
GetObjectW
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32W
SelectPalette
RealizePalette
GdiFlush
SelectObject
GetTextMetricsW
GetDeviceCaps
CreateFontIndirectW
DeleteEnhMetaFile
CopyEnhMetaFileW
GetEnhMetaFileW
CreateDCW
StartDocW
EndPage
StartPage
EndDoc
SetAbortProc
EnumFontFamiliesExW
CreateICW
PatBlt
GetDIBColorTable
CreateDIBitmap
GetDIBits
CreateDIBSection
SetTextAlign
CreateRectRgnIndirect
GetSystemPaletteEntries
CombineRgn
RectInRegion
PtInRegion
EqualRgn
GetRgnBox
MoveToEx
LineTo
CreatePen
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
CreatePalette
GetNearestPaletteIndex
shell32
ShellExecuteW
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconW
ExtractIconExW
SHFileOperationW
ole32
OleSetContainedObject
OleInitialize
CoCreateInstance
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard
OleUninitialize
OleCreate
oleaut32
SysAllocString
VariantClear
comctl32
ImageList_Add
ImageList_BeginDrag
ImageList_SetDragCursorImage
ord17
ord16
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
wininet
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
HttpQueryInfoW
ws2_32
getpeername
WSAStartup
WSACleanup
ntohl
htonl
WSASetLastError
WSAAddressToStringA
WSAGetLastError
WSAStringToAddressA
htons
ntohs
setsockopt
WSASocketW
closesocket
bind
listen
WSAIoctl
WSASend
getservbyname
gethostbyname
getsockopt
getsockname
WSASendTo
WSARecvFrom
ioctlsocket
connect
WSARecv
accept
inet_addr
select
__WSAFDIsSet
socket
mswsock
GetAcceptExSockaddrs
AcceptEx
winmm
timeGetTime
comdlg32
PageSetupDlgW
PrintDlgW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
ChooseFontW
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 629KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SHARED Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ