Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_a37e1af8e55986b2435397e52c8b9a34_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_a37e1af8e55986b2435397e52c8b9a34_magniber.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-28_a37e1af8e55986b2435397e52c8b9a34_magniber
-
Size
277KB
-
MD5
a37e1af8e55986b2435397e52c8b9a34
-
SHA1
152519801fc79c79847f2f3867271f124d20d558
-
SHA256
0ef5ae0089297f5582cc1762f7aac9f3b15241cfaeb6dddeed2cdf6b01e95297
-
SHA512
3d31e1ff6bdd700c2e29999622bc19e3dd29ff4e0c178cc8900ec988908da464da83a8ed3bc5cc6fb7bcf62bd0c67b07b2250f4cf13033ddcaf3bab3fd4a9874
-
SSDEEP
6144:u3nHPDm0jLAu6Y5jEw564aoJxmhuw1AFkHK/:+vbjf6YNFehQwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-28_a37e1af8e55986b2435397e52c8b9a34_magniber
Files
-
2024-03-28_a37e1af8e55986b2435397e52c8b9a34_magniber.exe windows:5 windows x86 arch:x86
943b550bda838f264a91d1241abb0b14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetModuleFileNameW
GetTimeZoneInformation
lstrcatA
MultiByteToWideChar
lstrlenW
DisconnectNamedPipe
CreateJobObjectA
GetProcAddress
LoadLibraryA
LocalAlloc
SetCalendarInfoW
WriteProfileSectionW
ConvertDefaultLocale
FreeEnvironmentStringsW
RequestWakeupLatency
OutputDebugStringA
_lopen
TransactNamedPipe
GetNumaProcessorNode
lstrcpyA
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetComputerNameExA
GetVersionExW
EnumResourceTypesA
CreateActCtxW
GetCompressedFileSizeW
EnumCalendarInfoExW
GetNumaAvailableMemoryNode
TerminateJobObject
LoadResource
GetStringTypeA
IsValidLocale
TlsFree
lstrlenA
EnumSystemLocalesA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
HeapSize
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
SetEnvironmentVariableA
user32
IsCharAlphaNumericA
GetKeyboardLayoutList
GetUserObjectInformationW
CreateDesktopW
LoadMenuIndirectA
CharUpperBuffW
ImpersonateDdeClientWindow
SetSystemCursor
RegisterClassExA
LoadCursorW
GetClipboardFormatNameA
GetGUIThreadInfo
SetPropA
CharUpperBuffA
PeekMessageA
gdi32
AnimatePalette
GetEnhMetaFileA
CreateDIBSection
EnumFontFamiliesExW
TextOutW
CloseEnhMetaFile
GdiComment
GetMiterLimit
winspool.drv
DeviceCapabilitiesW
advapi32
ReportEventA
ole32
CoInitialize
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ