2024-03-10_764f4b0ed00723c62e7d7721ae0808b8_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-10_764f4b0ed00723c62e7d7721ae0808b8_magniber
Size

15.4MB
MD5

764f4b0ed00723c62e7d7721ae0808b8
SHA1

f72474256687e7380464321049cfdc53f51a5f15
SHA256

ff48fb021f184655af63f048220a151e9cd40152701abda0fe23551e9fa40ffb
SHA512

c1cf846d405aa1fbd525549f44ce0b6da71a0bd5a0d3a335d166735506c91960d69ddbe1f3a61def0c5f0f792ff53f87fdf95ecb55ee188da26bcd97c18c2165
SSDEEP

393216:+yzJO32Py6NoSwvMSrJxzLq1j2xusn+o:ENlSwMQxzGpIJ+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-10_764f4b0ed00723c62e7d7721ae0808b8_magniber

Files

2024-03-10_764f4b0ed00723c62e7d7721ae0808b8_magniber
.exe windows:5 windows x86 arch:x86

e1a26fb509496e58b186e26e9fe94cb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Darkfall\ToolSource\SFLobby\Build\Release\SFLobbyUS.pdb

Imports

kernel32

GetThreadLocale
GetFileAttributesA
GlobalMemoryStatusEx
GetVersionExA
OutputDebugStringA
CompareStringW
CompareStringA
GetLocaleInfoW
CreateFileW
GetConsoleOutputCP
WriteConsoleA
GetCurrentDirectoryA
GetStringTypeW
GetStringTypeA
EnumSystemLocalesA
LoadLibraryW
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
SetHandleCount
GetOEMCP
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
MoveFileA
RemoveDirectoryA
CreateDirectoryA
GetFullPathNameA
GetDriveTypeA
SetStdHandle
GetModuleFileNameW
WriteConsoleW
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetStartupInfoA
GetModuleHandleW
HeapReAlloc
GetSystemTimeAsFileTime
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrlenW
HeapFree
lstrlenA
InterlockedCompareExchange
InterlockedExchange
SetEndOfFile
FlushFileBuffers
SetFilePointer
CreateMutexA
GetExitCodeThread
TerminateThread
SuspendThread
GetThreadTimes
QueryPerformanceFrequency
QueryPerformanceCounter
GetComputerNameExA
GetNativeSystemInfo
DeviceIoControl
VirtualAlloc
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedDecrement
SetLastError
CreateFileMappingA
GetLastError
MapViewOfFile
CloseHandle
CreateEventA
UnmapViewOfFile
OpenEventA
SetEvent
WaitForMultipleObjects
SystemTimeToFileTime
GetLocalTime
WaitForSingleObject
Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetCurrentThread
GetModuleFileNameA
CreateProcessA
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
DeleteFileA
WinExec
CreateThread
SetEnvironmentVariableA
FreeLibrary
MulDiv
FormatMessageA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreA
ReleaseSemaphore
SetThreadPriority
ResetEvent
LocalFree
LocalAlloc
GetCurrentThreadId
MultiByteToWideChar
GetCommandLineA
SetErrorMode
GlobalLock
GlobalUnlock
GlobalAlloc
WideCharToMultiByte
GlobalSize
GlobalFree
HeapSize
GetProcessHeap
GetACP
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoA
SetThreadLocale
GetTimeZoneInformation
ExitProcess
GetCurrentProcess
GetEnvironmentVariableA
GetProfileStringA
GetCurrentProcessId
GetCPInfo
IsValidCodePage
GetComputerNameA
GlobalMemoryStatus
GetDiskFreeSpaceA
GetExitCodeProcess
TerminateProcess
OpenProcess
GetTempPathA
GetFileType
CopyFileA
SetCurrentDirectoryA
GetWindowsDirectoryA
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
SetFileTime
GetFileTime
GetTempFileNameA
FindClose
FindFirstFileA
GetStdHandle
IsBadReadPtr
IsBadStringPtrA
ReadFile
WriteFile
CreatePipe
PeekNamedPipe
SetNamedPipeHandleState
ResumeThread
DuplicateHandle
RaiseException
FindNextFileA
ExpandEnvironmentStringsA

user32

TranslateMessage
PeekMessageA
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
MoveWindow
SetWindowLongA
GetWindowRect
SetWindowTextA
CreateWindowExA
PostQuitMessage
VkKeyScanA
GetAsyncKeyState
GetKeyState
SetWindowPos
SetFocus
SetCapture
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleA
DdeClientTransaction
DispatchMessageA
DdeInitializeA
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeQueryStringA
DdeUninitialize
DdeFreeStringHandle
WaitForInputIdle
EnumWindows
ExitWindowsEx
MessageBeep
GetWindowThreadProcessId
EnumDisplaySettingsA
ChangeDisplaySettingsA
SetCursorPos
GetScrollInfo
SetScrollInfo
GetClientRect
FillRect
DrawFrameControl
CreateIconIndirect
GetClassNameA
GetWindowLongA
SystemParametersInfoA
DrawIconEx
GetCursorPos
SetCursor
DestroyIcon
LoadImageA
GetSystemMetrics
LoadBitmapA
LoadIconA
DdeDisconnect
DrawStateA
DrawEdge
ShowCursor
GetClassInfoA
SetClipboardData
GetClipboardFormatNameA
EnumClipboardFormats
GetClipboardData
EmptyClipboard
RegisterClipboardFormatA
GetMenuStringA
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
InsertMenuItemA
InsertMenuA
RemoveMenu
CreatePopupMenu
DestroyMenu
CreateMenu
AppendMenuA
GetSubMenu
GetParent
WindowFromPoint
SetParent
UpdateWindow
ScreenToClient
ClientToScreen
DeferWindowPos
DefWindowProcA
CallWindowProcA
GetMessageTime
GetActiveWindow
GetWindow
CallNextHookEx
RegisterHotKey
UnregisterHotKey
GetFocus
GetCapture
PtInRect
TrackPopupMenu
GetIconInfo
GetSysColor
PostMessageA
RedrawWindow
ReleaseDC
SetWindowRgn
GetDC
ShowWindow
SetActiveWindow
SendMessageA
ScrollWindow
SetMenuItemInfoA
ModifyMenuA
CheckMenuRadioItem
CheckMenuItem
GetMenuState
UnionRect
ValidateRect
GetMessageA
GetMessagePos
MapWindowPoints
TranslateAcceleratorA
CreateAcceleratorTableA
DestroyAcceleratorTable
LoadAcceleratorsA
LoadCursorFromFileA
DestroyCursor
IsDialogMessageA
GetMenuItemInfoA
GetMenuItemCount
UnhookWindowsHookEx
SetWindowsHookExA
GetUpdateRgn
IsWindow
DestroyWindow
IsWindowVisible
IsWindowEnabled
EndDeferWindowPos
BeginDeferWindowPos
InflateRect
EnableWindow
LoadCursorA
MessageBoxA
ChildWindowFromPoint
GetWindowDC
GetUpdateRect
BeginPaint
DrawIcon
EndPaint
SetMenu
OffsetRect
DrawFocusRect
CopyRect
DrawTextA
SetTimer
KillTimer
keybd_event
ShowCaret
HideCaret
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
FlashWindow
CreateDialogIndirectParamA
RegisterClassA
UnregisterClassA
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetDesktopWindow
IsIconic
IsZoomed
BringWindowToTop
SetForegroundWindow
GetForegroundWindow
GetDlgItem
CreateDialogParamA
ReleaseCapture

gdi32

BitBlt
ExtCreateRegion
CreateDCA
StartDocA
EndPage
StartPage
EndDoc
SetAbortProc
GetSystemPaletteEntries
CloseEnhMetaFile
CreateEnhMetaFileA
GetEnhMetaFileA
GetMetaFileBitsEx
SetWinMetaFileBits
PlayEnhMetaFile
CopyEnhMetaFileA
GetWinMetaFileBits
SetMetaFileBitsEx
GetEnhMetaFileHeader
DeleteEnhMetaFile
EnumFontFamiliesExA
CreateBitmapIndirect
CreateICA
PatBlt
SetTextAlign
CreateRectRgnIndirect
CombineRgn
CreatePolygonRgn
RectInRegion
PtInRegion
EqualRgn
GetRgnBox
GetDIBColorTable
CreateDIBitmap
GetDIBits
CreateDIBSection
SaveDC
RestoreDC
GetRegionData
OffsetRgn
ExcludeClipRect
GdiFlush
MoveToEx
LineTo
CreatePen
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
CreatePalette
GetNearestPaletteIndex
StretchDIBits
StretchBlt
GetTextExtentExPointA
MaskBlt
PolyBezier
GetTextExtentPoint32A
GetCharABCWidthsA
SetBrushOrgEx
CreateFontIndirectA
TextOutA
GetStockObject
Ellipse
RoundRect
Rectangle
PolyPolygon
SetPolyFillMode
Polygon
Pie
Arc
CreateSolidBrush
SelectClipRgn
CreateRectRgn
GetTextColor
GetBkColor
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
GetTextMetricsA
SetROP2
SelectPalette
RealizePalette
Polyline
SetPixel
GetPixel
ExtFloodFill
ExtSelectClipRgn
GetClipBox
SetTextColor
SetStretchBltMode
SetBkMode
SetBkColor
CreateBitmap
CreateCompatibleBitmap
GetDeviceCaps
SelectObject
DeleteDC
CreateCompatibleDC
GetPaletteEntries
GetObjectA
DeleteObject

comdlg32

ChooseFontA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
PageSetupDlgA
PrintDlgA

winmm

timeBeginPeriod
waveOutWrite
waveOutPrepareHeader
waveOutClose
waveOutUnprepareHeader
waveOutOpen
waveOutReset

shell32

DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteExA
DragQueryFileA
DragQueryPoint
DragFinish
ExtractIconExA
ExtractIconA
ShellExecuteA

comctl32

ImageList_Remove
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Replace
ImageList_SetBkColor
ImageList_Draw
ImageList_AddMasked
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ImageList_Destroy
ord6
ord16
ImageList_GetImageCount
ord17

ole32

CoSetProxyBlanket
OleSetContainedObject
OleRun
CLSIDFromProgID
OleLockRunning
CoGetMalloc
OleUninitialize
StringFromIID
CoTaskMemFree
CoCreateInstance
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard
OleInitialize

oleaut32

VariantClear
SysStringLen
VariantInit
VarDecFromR8
VarR8FromDec
VariantChangeType
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysAllocString
GetErrorInfo
SetErrorInfo
CreateErrorInfo

advapi32

RegQueryInfoKeyA
RegQueryValueExA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegCreateKeyA
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetUserNameA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

wsock32

WSAStartup
htons
send
recv
__WSAFDIsSet
ioctlsocket
connect
setsockopt
WSAGetLastError
sendto
recvfrom
bind
closesocket
inet_ntoa
socket
inet_addr
gethostbyname
ntohs
select

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

d3d9

Direct3DCreate9

d3dx9_39

D3DXCheckVersion

iphlpapi

GetIfTable

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 655KB - Virtual size: 655KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1a26fb509496e58b186e26e9fe94cb9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winmm

shell32

comctl32

ole32

oleaut32

advapi32

wsock32

version

d3d9

d3dx9_39

iphlpapi

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 655KB - Virtual size: 655KB

.data Size: 1.0MB - Virtual size: 1.3MB

.rsrc Size: 10.5MB - Virtual size: 10.5MB

.reloc Size: 234KB - Virtual size: 234KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 655KB - Virtual size: 655KB

.data
Size: 1.0MB - Virtual size: 1.3MB

.rsrc
Size: 10.5MB - Virtual size: 10.5MB

.reloc
Size: 234KB - Virtual size: 234KB