Static task
static1
Behavioral task
behavioral1
Sample
2024-02-27_f76703118cc53a2e18f4ad993bb3e4c0_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-27_f76703118cc53a2e18f4ad993bb3e4c0_magniber.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-02-27_f76703118cc53a2e18f4ad993bb3e4c0_magniber
-
Size
277KB
-
MD5
f76703118cc53a2e18f4ad993bb3e4c0
-
SHA1
b5518d9111cbb5a17640d888ed2870622ea3787c
-
SHA256
8de71d29c23dc1750ecc23d19c9b3f6c7ecf10b24c2d10d1c373bfed04d36460
-
SHA512
135b4d9b1c1872f499f91eba7c5a6cec78d23e5b0e3398c238e9dd4aca2d55b32767dcdd5636387c04100cada8b72311c1421a16d2c646bed9d7b465fa2b1c7a
-
SSDEEP
6144:o3nHPDm0jLAu6Y5jEw564aoJxmhuw1AFkHK/:kvbjf6YNFehQwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-27_f76703118cc53a2e18f4ad993bb3e4c0_magniber
Files
-
2024-02-27_f76703118cc53a2e18f4ad993bb3e4c0_magniber.exe windows:5 windows x86 arch:x86
943b550bda838f264a91d1241abb0b14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetModuleFileNameW
GetTimeZoneInformation
lstrcatA
MultiByteToWideChar
lstrlenW
DisconnectNamedPipe
CreateJobObjectA
GetProcAddress
LoadLibraryA
LocalAlloc
SetCalendarInfoW
WriteProfileSectionW
ConvertDefaultLocale
FreeEnvironmentStringsW
RequestWakeupLatency
OutputDebugStringA
_lopen
TransactNamedPipe
GetNumaProcessorNode
lstrcpyA
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetComputerNameExA
GetVersionExW
EnumResourceTypesA
CreateActCtxW
GetCompressedFileSizeW
EnumCalendarInfoExW
GetNumaAvailableMemoryNode
TerminateJobObject
LoadResource
GetStringTypeA
IsValidLocale
TlsFree
lstrlenA
EnumSystemLocalesA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
HeapSize
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
SetEnvironmentVariableA
user32
IsCharAlphaNumericA
GetKeyboardLayoutList
GetUserObjectInformationW
CreateDesktopW
LoadMenuIndirectA
CharUpperBuffW
ImpersonateDdeClientWindow
SetSystemCursor
RegisterClassExA
LoadCursorW
GetClipboardFormatNameA
GetGUIThreadInfo
SetPropA
CharUpperBuffA
PeekMessageA
gdi32
AnimatePalette
GetEnhMetaFileA
CreateDIBSection
EnumFontFamiliesExW
TextOutW
CloseEnhMetaFile
GdiComment
GetMiterLimit
winspool.drv
DeviceCapabilitiesW
advapi32
ReportEventA
ole32
CoInitialize
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ