2024-03-14_c6c6d13692906b6421bc657f0332c4eb_mafia_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-14_c6c6d13692906b6421bc657f0332c4eb_mafia_magniber
Size

3.0MB
MD5

c6c6d13692906b6421bc657f0332c4eb
SHA1

82969c1526eb3f0af6db9c03a43a8650a2f51441
SHA256

077159f4d731a23d8b4be4897ce57f9a07c5902154965bc7a917b50b4392fc12
SHA512

03e782168ddfae411af037b1bd305b91ca48e4dda7730886f9080a4aaa65206b7f4cb591e5ff865db0e84a92a46a51b46fbf974e59f489ae5aaf67edf86d70ac
SSDEEP

49152:elHaSr7sWL2ohzqO/XHj4OsdfK255H+3mNq29eFfbzA4uKlKuuGaXKy4IBAUZLY7:1Sr7smgO/XHjIk2uaeJeBAUZL1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-14_c6c6d13692906b6421bc657f0332c4eb_mafia_magniber

Files

2024-03-14_c6c6d13692906b6421bc657f0332c4eb_mafia_magniber
.exe windows:5 windows x86 arch:x86

996b3f98ba4ab95a495293ac16b7a30e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Projects\DCC\HO\bin\Win32\Release\ZGCO\ZGCO.pdb

Imports

kernel32

GetModuleHandleA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA
LoadLibraryA
SetErrorMode
SetUnhandledExceptionFilter
GetModuleFileNameA
Sleep
CreateThread
TerminateProcess
GetCurrentThread
GetLocaleInfoA
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
TerminateThread
MultiByteToWideChar
ReadFile
GetExitCodeProcess
DuplicateHandle
CreatePipe
GetTickCount
FreeLibrary
SetLastError
ReadProcessMemory
GetLastError
GetEnvironmentVariableA
GetVersionExA
ResumeThread
GetThreadContext
SuspendThread
GetACP
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
EncodePointer
DecodePointer
HeapAlloc
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
DeleteFileA
GetModuleHandleW
ExitProcess
HeapFree
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCPInfo
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapSize
HeapQueryInformation
GetTimeZoneInformation
SetStdHandle
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FatalAppExitA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
RaiseException
SetEndOfFile
GetProcessHeap
GetDriveTypeW
WriteConsoleW
CreateFileW
CompareStringW
SetEnvironmentVariableA
GetSystemInfo
QueryPerformanceFrequency
InitializeCriticalSection
LocalAlloc
LocalFree
GetComputerNameA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
DeviceIoControl
VirtualQuery
QueryPerformanceCounter
GetFileAttributesA
CreateDirectoryA
DebugBreak
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetCurrentDirectoryA
CreateProcessA
CloseHandle
SetHandleCount
GetTempPathA

advapi32

GetUserNameA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

user32

LoadCursorA
SetCursor
ShowWindow
GetAsyncKeyState
AdjustWindowRectEx
MsgWaitForMultipleObjects
PeekMessageA
DispatchMessageA
InflateRect
OffsetRect
SetWindowTextA
SetRect
GetMonitorInfoA
MonitorFromWindow
SetWindowPos
SetWindowLongA
GetWindowLongA
MessageBoxA
GetClientRect
DestroyWindow
MonitorFromPoint
CreateWindowExA
GetDC
ClientToScreen
LoadIconA
RegisterClassA
DefWindowProcA
ReleaseCapture
SetCapture
ShowCursor
SetForegroundWindow
TranslateMessage
ReleaseDC

gdi32

BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC
GetStockObject
SelectObject
CreateCompatibleBitmap

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

libegl

ord1
ord4
ord12
ord8
ord22
ord5
ord29
ord34
ord24
ord25
ord7
ord13
ord9
ord11
ord23
ord14
ord3
ord2
ord30
ord32

libglesv2

ord37
ord30
ord33
ord93
ord54
ord25
ord47
ord52
ord95
ord6
ord53
ord28
ord16
ord18
ord112
ord113
ord77
ord34
ord69
ord68
ord21
ord36
ord27
ord32
ord66
ord65
ord90
ord3
ord2
ord26
ord22
ord91
ord61
ord124
ord125
ord114
ord72
ord64
ord131
ord42
ord43
ord11
ord39
ord41
ord141
ord44
ord40
ord14
ord29
ord50
ord4
ord13
ord5
ord48
ord142
ord97
ord31
ord1
ord106
ord109
ord46
ord7
ord24
ord130
ord139
ord17
ord99
ord49

openal32

alBufferData
alDeleteBuffers
alSourceStop
alSourcei
alSourcefv
alSourcef
alListenerf
alGetSourcei
alListenerfv
alDistanceModel
alGenSources
alGetString
alcMakeContextCurrent
alcCreateContext
alcOpenDevice
alcGetString
alcCloseDevice
alcDestroyContext
alDeleteSources
alSourcePlay
alGenBuffers

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 673KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

996b3f98ba4ab95a495293ac16b7a30e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

user32

gdi32

shell32

ole32

libegl

libglesv2

openal32

version

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 46KB - Virtual size: 673KB

.rsrc Size: 155KB - Virtual size: 155KB

.reloc Size: 63KB - Virtual size: 62KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 46KB - Virtual size: 673KB

.rsrc
Size: 155KB - Virtual size: 155KB

.reloc
Size: 63KB - Virtual size: 62KB