2024-03-16_26f20e8c4246f014a97243873942c656_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-16_26f20e8c4246f014a97243873942c656_magniber
Size

11.8MB
MD5

26f20e8c4246f014a97243873942c656
SHA1

877845ad98c0064878ebadde1a50dd67ea22b006
SHA256

0e2b453a913658ba1c3e00fd02d2802630ec4e56071aa49ee672a2509b1c4056
SHA512

e50034af924faf67cc38eddb17c96a050117af353c1f636158d3a5c9a3bcdf1da481f9b5295b2fff0ea2ca4d87735593a5c09aeb1d47577693967044a24bd03e
SSDEEP

98304:igFl6m5ungRvGTGrwz02sZFq2EViDo94GsEFv9vcx5TCAj7eNMGe8aqeFN6pPivD:L6mxRveywd0FaViDo94G1YTrGe8EKav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-16_26f20e8c4246f014a97243873942c656_magniber

Files

2024-03-16_26f20e8c4246f014a97243873942c656_magniber
.exe windows:5 windows x86 arch:x86

bd9d07441c40c0c0088992d805f318fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\toydefense2\toydefense-scifi\dev\branch\version1_6\win\ToyDefense4_Sci-Fi-Partner-Release.pdb

Imports

kernel32

GetFileInformationByHandle
FileTimeToSystemTime
GetDriveTypeW
FindFirstFileExW
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
PeekNamedPipe
GetFullPathNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameA
GetVersion
GlobalMemoryStatus
FlushConsoleInputBuffer
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetConsoleMode
GetFileAttributesExW
SetFileAttributesW
FindFirstFileA
QueryPerformanceFrequency
GetLastError
GetLongPathNameW
GetCurrentProcess
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
SwitchToThread
FormatMessageA
SleepEx
GetUserDefaultLCID
Sleep
FindClose
CreateDirectoryA
CreateDirectoryW
FindFirstFileW
FindNextFileW
GetTickCount
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetLocalTime
DisableThreadLibraryCalls
GetCurrentThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsBadWritePtr
FreeLibrary
LoadLibraryA
CreateThread
ExitThread
GetExitCodeThread
WaitForSingleObject
CloseHandle
GetStringTypeW
InterlockedExchange
EncodePointer
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
QueryPerformanceCounter
CreateTimerQueueTimer
CreateTimerQueue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
RtlUnwind
HeapFree
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
HeapAlloc
GetCommandLineW
IsDebuggerPresent
ExitProcess
AreFileApisANSI
HeapReAlloc
DeleteFileW
MoveFileExW
ReadFile
FatalAppExitA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
WriteFile
HeapSize
DuplicateHandle
SetEvent
ReleaseSemaphore
CreateEventW
InitializeSListHead
UnregisterWaitEx
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
DebugBreak
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
SetProcessAffinityMask
LoadLibraryW
GetProcessHeap
GetTimeZoneInformation
SetConsoleCtrlHandler
IsValidCodePage
GetACP
GetOEMCP
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
ReadConsoleW
FlushFileBuffers
GetConsoleCP
CreateFileW
SetFilePointer
SetFilePointerEx
SetStdHandle
UnregisterWait
GetThreadPriority
WaitForMultipleObjectsEx
SetEndOfFile
SetEnvironmentVariableA
SignalObjectAndWait
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
GetVersionExA
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
OutputDebugStringA
MultiByteToWideChar
GetCurrentThreadId
WideCharToMultiByte
FindNextFileA

user32

LoadIconW
DestroyIcon
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
MessageBoxA
ShowCursor
ScreenToClient
ShowWindow
SetWindowPos
UpdateWindow
SetActiveWindow
AdjustWindowRect
LoadCursorW
SetWindowLongW
IsIconic
GetWindowInfo
GetCursor
MessageBoxW
GetForegroundWindow
DrawTextA
DrawTextW
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
GetCursorPos
SetCursor
FindWindowW
GetWindowLongW
SetForegroundWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
GetDesktopWindow
SendMessageW
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
PostQuitMessage
DefWindowProcW
SystemParametersInfoW

wininet

InternetGetConnectedState

sensapi

IsNetworkAlive

shlwapi

PathFindFileNameW

psapi

GetModuleFileNameExW
EnumProcessModules

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

d3d8

Direct3DCreate8

dinput8

DirectInput8Create

ws2_32

getaddrinfo
freeaddrinfo
gethostname
recv
listen
getsockopt
getsockname
getpeername
ioctlsocket
WSASetLastError
closesocket
bind
select
__WSAFDIsSet
shutdown
WSACleanup
sendto
setsockopt
socket
WSAStartup
connect
send
WSAGetLastError
htonl
htons
inet_addr
inet_ntoa
ntohl
ntohs
accept
recvfrom
gethostbyname
getservbyname

gdi32

SetBkColor
SetTextColor
SelectObject
GetDeviceCaps
GetBitmapBits
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
CreateFontIndirectA
CreateDIBSection
CreateDCA
GetObjectA
CreateFontW
DeleteObject
SetBkMode
CreateSolidBrush

advapi32

RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
DeregisterEventSource
RegisterEventSourceA
ReportEventA
RegQueryValueExW

shell32

SHGetSpecialFolderPathA
SHGetFolderPathW
ShellExecuteW

Sections

.text
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 395KB - Virtual size: 585KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd9d07441c40c0c0088992d805f318fd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

wininet

sensapi

shlwapi

psapi

winmm

d3d8

dinput8

ws2_32

gdi32

advapi32

shell32

Sections

.text Size: 8.4MB - Virtual size: 8.4MB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 395KB - Virtual size: 585KB

_RDATA Size: 27KB - Virtual size: 26KB

.rsrc Size: 331KB - Virtual size: 330KB

.reloc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 8.4MB - Virtual size: 8.4MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 395KB - Virtual size: 585KB

_RDATA
Size: 27KB - Virtual size: 26KB

.rsrc
Size: 331KB - Virtual size: 330KB

.reloc
Size: 1.4MB - Virtual size: 1.4MB