e:\building\ludashi_projects\360HardwareMaster\ComputerZMonitorWTL\ComputerZMonitorWTL\Release\ComputerMonZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-29_68d99a114d849185f24af6a9b6a77280_magniber.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-29_68d99a114d849185f24af6a9b6a77280_magniber.exe
Resource
win10v2004-20240319-en
General
-
Target
2024-03-29_68d99a114d849185f24af6a9b6a77280_magniber
-
Size
514KB
-
MD5
68d99a114d849185f24af6a9b6a77280
-
SHA1
12184d3370e08d14cc0ea7d750088cf3a0619117
-
SHA256
dbbbe66a4dfdf5189d8a81b600679c9fda1825afd8dca944ad69f01bee96806d
-
SHA512
7d001d748d05baa08b6dbdf1d08ea99ebfe7698db4ccffd2b04e2b0d90ffe738b6f3d8eba23fb209ad9d7029d172ab2712b0ac533dc19d102274f595ccef9cc3
-
SSDEEP
12288:0+vBSJdmRMtm2MYyAjUlO5QKwoCATVU01seOKi:95tRE5MGjUl3KwyTVU0OeO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-29_68d99a114d849185f24af6a9b6a77280_magniber
Files
-
2024-03-29_68d99a114d849185f24af6a9b6a77280_magniber.exe windows:5 windows x86 arch:x86
eefbf41dea62b39b809f3727982bdbaa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
LockResource
CreateMutexW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetLongPathNameW
MulDiv
TerminateThread
WaitForSingleObject
CreateEventW
ResetEvent
SetEvent
GetPrivateProfileIntW
GetVersionExW
MapViewOfFile
CreateFileMappingW
GetSystemInfo
UnmapViewOfFile
DeleteFileW
CreateNamedPipeW
ConnectNamedPipe
DisconnectNamedPipe
FlushFileBuffers
WriteFile
ReadFile
GetNamedPipeInfo
GetNamedPipeHandleStateW
SetNamedPipeHandleState
Sleep
lstrlenW
WritePrivateProfileStringW
LoadLibraryW
InterlockedCompareExchange
HeapFree
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
SetLastError
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetCurrentProcessId
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcess
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedExchange
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
ExitProcess
GetCurrentThread
HeapSize
FatalAppExitA
HeapDestroy
HeapCreate
HeapReAlloc
CreateThread
ExitThread
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
CreateFileW
DeviceIoControl
OpenProcess
lstrlenA
OutputDebugStringW
DebugBreak
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
InitializeCriticalSection
WriteConsoleW
GetLastError
FlushInstructionCache
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
RaiseException
DeleteCriticalSection
GetCurrentThreadId
GetStartupInfoW
GetProcessHeap
HeapAlloc
LoadLibraryA
DeleteAtom
FindAtomW
TlsAlloc
ReleaseMutex
AddAtomW
OpenThread
GetAtomNameW
TlsSetValue
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
FormatMessageW
GetLocalTime
LocalFree
CreateProcessW
CloseHandle
GetDateFormatA
GetSystemTime
TlsGetValue
GetModuleFileNameW
user32
SendMessageW
LoadCursorW
RegisterClassExW
CharNextW
wvsprintfW
LoadStringW
IsWindow
FindWindowExW
FindWindowW
SetWindowPos
GetWindowLongW
CallWindowProcW
GetWindowRect
WindowFromPoint
GetWindowThreadProcessId
GetDesktopWindow
GetForegroundWindow
GetAncestor
WaitForInputIdle
DefWindowProcW
DispatchMessageW
EnumDisplaySettingsW
GetMonitorInfoW
MonitorFromPoint
GetWindowInfo
GetWindow
GetShellWindow
UpdateLayeredWindow
ReleaseCapture
SystemParametersInfoW
PostQuitMessage
PostMessageW
GetCursorPos
LoadMenuW
DeleteMenu
TrackPopupMenu
CheckMenuItem
GetSubMenu
CheckMenuRadioItem
DestroyMenu
ClientToScreen
ScreenToClient
SetTimer
KillTimer
SetCapture
BeginPaint
EndPaint
TranslateMessage
GetMessageW
PeekMessageW
DestroyWindow
ShowWindow
SetWindowLongW
UnregisterClassA
CreateWindowExW
SendMessageTimeoutW
IsIconic
SetForegroundWindow
GetDC
ReleaseDC
IsRectEmpty
SetRect
PtInRect
SetCursor
OffsetRect
SetRectEmpty
GetClassInfoExW
gdi32
CreateFontIndirectW
GetTextExtentPoint32W
SetViewportOrgEx
SelectObject
CreateCompatibleDC
CreateDIBSection
DeleteObject
CreateFontW
EnumFontFamiliesW
DeleteDC
SetBkColor
ExtTextOutW
BitBlt
GetDeviceCaps
advapi32
RegCreateKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExA
shell32
ShellExecuteExW
SHAppBarMessage
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoSetProxyBlanket
CoInitializeSecurity
CreateStreamOnHGlobal
CoInitializeEx
oleaut32
SysAllocString
SysFreeString
VariantClear
VarUI4FromStr
VariantInit
shlwapi
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
PathCombineW
PathIsRelativeW
StrCmpIW
PathFindFileNameW
StrToIntExW
StrCmpW
SHGetValueA
SHSetValueA
comctl32
InitCommonControlsEx
_TrackMouseEvent
msimg32
AlphaBlend
gdiplus
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipDrawImageRectI
GdipDrawImageRectRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipDisposeImage
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipAlloc
GdipGetImageHeight
GdipGetImageWidth
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipMeasureString
GdipDrawString
wintrust
WinVerifyTrust
WTHelperProvDataFromStateData
crypt32
CertGetNameStringW
psapi
GetModuleFileNameExW
iphlpapi
GetAdaptersInfo
wininet
InternetGetConnectedState
urlmon
URLDownloadToFileW
URLDownloadToCacheFileW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
netapi32
Netbios
Sections
.text Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ