D:\cis\SupplyidMakeReport\Release\PacketPCMgr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_70edbc251f7950bd7f4b91968e7f9e1d_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_70edbc251f7950bd7f4b91968e7f9e1d_magniber.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-09_70edbc251f7950bd7f4b91968e7f9e1d_magniber
-
Size
13.8MB
-
MD5
70edbc251f7950bd7f4b91968e7f9e1d
-
SHA1
3cb162393faa9564b4a871f83ce7eafde2b27703
-
SHA256
298c3b22518b00afa145d369777f757f45375c86a37ab8280144d343032cd6fb
-
SHA512
00799a08c4bca4a143b216bb89e97bbcb7b7553cde72fb842acd6549e23bf1af8d7569021608046f008e65a5072d8adacd7dc581008c91fd2dbb067eb59ee0b2
-
SSDEEP
196608:cWIjdrBptEqrGFQd1FH0NLx7pS6EsMrIzPEXEsS0Wgu6E1SbGFO1r2OaLV7gMSkB:Ed5LFH0NLxrEIwXFWgu6E1SiFsVCaRkB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-09_70edbc251f7950bd7f4b91968e7f9e1d_magniber
Files
-
2024-03-09_70edbc251f7950bd7f4b91968e7f9e1d_magniber.exe windows:4 windows x86 arch:x86
5e54b3b3ec12f28c9ae111b55b557a6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
htonl
ntohl
htons
kernel32
GetTempPathW
GetLongPathNameW
GetModuleHandleW
CreateProcessW
LoadResource
DeleteFileW
LockResource
EnterCriticalSection
SizeofResource
QueryDosDeviceW
Sleep
LeaveCriticalSection
CloseHandle
FindResourceW
GetModuleFileNameW
FindResourceExW
GetCurrentProcess
OpenProcess
FindFirstFileW
FindClose
GetCurrentProcessId
Process32FirstW
Process32NextW
GetProcAddress
WaitForSingleObject
WideCharToMultiByte
lstrlenW
InterlockedCompareExchange
GetSystemInfo
GetSystemDefaultLangID
GetVersionExW
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetLastError
CreateFileW
ReadFile
SetStdHandle
CreateToolhelp32Snapshot
GetACP
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
MultiByteToWideChar
RaiseException
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
IsValidLocale
GetLocaleInfoA
GetThreadLocale
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileAttributesW
GetStartupInfoW
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetCPInfo
RtlUnwind
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ole32
CoInitialize
CoUninitialize
psapi
GetModuleFileNameExW
GetProcessImageFileNameW
user32
UnregisterClassA
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52.0MB - Virtual size: 52.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ