2024-04-10_69be28fd5791e41925f7ad664cfc2937_magniber_silence

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-10_69be28fd5791e41925f7ad664cfc2937_magniber_silence
Size

9.1MB
MD5

69be28fd5791e41925f7ad664cfc2937
SHA1

04243f087fdf41e1af2bb19bf51fa06f39991fde
SHA256

a27c0281bbe6050edfe717d148130113b25a57585e3ae3857f062a17e4f338ac
SHA512

d305d057d19a7b4dededa7a8569216b11d5042a8d573ff175a8db752ca780536c35882bc13a4d07d81c1fdf5e75e5f73bb834e255ae2ff0f6fc7fc97ef667257
SSDEEP

98304:Sbj9To7sNkihP2+yGJGCgh6YbcMN6exihLt43blZaYAA1R9x+lzWr1jYRpkIqPcv:CIsH+6Y4hLS3B4YAG9x+lauF4HfHi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-10_69be28fd5791e41925f7ad664cfc2937_magniber_silence

Files

2024-04-10_69be28fd5791e41925f7ad664cfc2937_magniber_silence
.exe windows:6 windows x86 arch:x86

f727bb1af946993b2b81d98026605d59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\mart\rpg-translate2\2Kagura\2Kagura\bin\kaguraD14.pdb

Imports

kernel32

GlobalSize
GlobalLock
GlobalAlloc
GlobalMemoryStatusEx
GlobalMemoryStatus
lstrcmpiA
InterlockedExchange
ResetEvent
SearchPathA
RaiseException
InitializeCriticalSectionAndSpinCount
LoadResource
LockResource
SizeofResource
GetModuleHandleA
LoadLibraryExA
FindResourceA
IsDBCSLeadByte
GetCurrentThreadId
SetLastError
FlushInstructionCache
GetCurrentProcess
MulDiv
GetLocalTime
lstrlenW
GetFileAttributesW
GetVersionExA
CompareStringA
CreateProcessA
GetTimeZoneInformation
GetSystemTime
GlobalHandle
TerminateThread
GetDriveTypeA
ExitThread
GetExitCodeThread
CreateThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
CopyFileW
GetSystemTimeAsFileTime
SetFileAttributesW
FindFirstFileA
FindNextFileA
GetCurrentThread
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcessAffinityMask
GetSystemInfo
SetThreadAffinityMask
GetThreadPriority
SetThreadPriority
GetUserDefaultLangID
VerLanguageNameA
GetSystemWindowsDirectoryA
GetLogicalDrives
GetDiskFreeSpaceExA
GetVolumeInformationA
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
SetEnvironmentVariableA
SetEndOfFile
WriteConsoleW
SetStdHandle
LoadLibraryW
OutputDebugStringW
GetConsoleCP
GlobalUnlock
SetThreadLocale
GetCurrentProcessId
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointer
GetProcessHeap
GetStdHandle
HeapSize
IsDebuggerPresent
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
CompareStringW
GetTimeFormatW
GetDateFormatW
IsProcessorFeaturePresent
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
AreFileApisANSI
GetModuleHandleExW
ExitProcess
RtlUnwind
GetCommandLineA
VirtualQuery
VirtualProtect
VirtualAlloc
LoadLibraryExW
GetCPInfo
IsValidCodePage
ResumeThread
HeapReAlloc
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStringTypeW
GetOEMCP
GetACP
FormatMessageA
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
lstrcpynA
Sleep
DeleteFileW
MoveFileExW
GetTempFileNameW
LocalAlloc
lstrcatA
lstrcatW
GetTempPathA
GetTempPathW
GetModuleFileNameA
WaitForMultipleObjects
lstrcpyW
CreateEventA
GetModuleFileNameW
lstrcpynW
GlobalFree
FreeEnvironmentStringsW
lstrcmpA
VirtualFree
WaitForSingleObject
SetEvent
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetEnvironmentStringsW
GetUserDefaultLCID
SetFilePointerEx
WriteFile
ReadFile
CloseHandle
FlushFileBuffers
GetLastError
CreateFileW
lstrlenA
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindClose
FindNextFileW
CompareFileTime
FindFirstFileW
LocalFree
InterlockedIncrement
InterlockedDecrement

user32

GetKeyState
GetCapture
CallWindowProcA
EmptyClipboard
SetClipboardData
CloseClipboard
SetClassLongA
LoadIconA
EndDialog
DefWindowProcA
CreateDialogIndirectParamA
RegisterWindowMessageA
GetClassInfoExA
SetDlgItemTextW
MessageBeep
DialogBoxParamA
SetCursor
RegisterClassExA
PostMessageA
CharNextExA
KillTimer
SetTimer
GetCursorPos
CopyRect
OffsetRect
SetRect
CharNextW
wvsprintfW
wvsprintfA
wsprintfA
CharNextA
GetAsyncKeyState
GetActiveWindow
GetForegroundWindow
ScreenToClient
ClientToScreen
SetCursorPos
GetClientRect
PtInRect
GetDC
ReleaseDC
CreateDialogParamA
GetRawInputData
SystemParametersInfoA
GetSystemMetrics
GetMessageA
DispatchMessageA
PeekMessageA
TranslateMessage
SetWindowLongA
GetWindowLongA
CreateWindowExA
DestroyWindow
SendMessageA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetMenu
SetMenu
DrawMenuBar
LoadCursorA
IsIconic
MoveWindow
SetWindowPos
GetWindowRect
BeginPaint
EndPaint
InvalidateRect
InvalidateRgn
ShowWindow
IsWindowVisible
RedrawWindow
IsWindowEnabled
EnableWindow
SetActiveWindow
SetCapture
SetFocus
CheckDlgButton
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
SetDlgItemInt
SetDlgItemTextA
GetWindow
IsChild
GetParent
SetParent
GetDlgCtrlID
GetDlgItem
MessageBoxA
OpenClipboard
AdjustWindowRectEx
IsWindow
GetClassNameA
GetMonitorInfoA
GetSysColor
DestroyAcceleratorTable
GetFocus
FillRect
GetDesktopWindow
GetAncestor
CreatePopupMenu
AppendMenuA
CreateAcceleratorTableA
ReleaseCapture
TrackPopupMenuEx
DestroyMenu
SetForegroundWindow
MonitorFromRect
GetCursor
GetMenuItemCount
GetSubMenu
EnableMenuItem
DeleteMenu
PostQuitMessage
ModifyMenuA
CheckMenuItem
AnimateWindow
GetMenuStringA
TrackPopupMenu
SetWindowRgn
GetSystemMenu
SetRectEmpty
GetKeyboardState
InsertMenuA
RemoveMenu
GetMenuItemID
GetMenuState
SetMenuItemInfoA
UnregisterClassA
RegisterClassA
CharPrevA
TranslateAcceleratorA
LoadAcceleratorsA
LoadMenuA
FindWindowA
RegisterRawInputDevices
DialogBoxIndirectParamA

gdi32

SetTextColor
SetBkMode
SetBkColor
CreateRectRgn
GetTextExtentPoint32A
GetStockObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetDeviceCaps
GetObjectA
GetOutlineTextMetricsA
DeleteObject
GetTextMetricsA
SelectObject
BitBlt
CreateFontIndirectA

comdlg32

ChooseFontA

shell32

Shell_NotifyIconA
ShellExecuteA
ShellExecuteW
SHGetFolderPathA
SHCreateDirectoryExW
SHGetFolderPathW

imm32

ImmGetContext
ImmSetOpenStatus
ImmGetOpenStatus

msacm32

acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerQueryValueW

d3d9

Direct3DCreate9

dsetup

ord11

lua5.1

lua_setfield
lua_pushnil
lua_gc
lua_gettop
lua_settop
lua_pushinteger
lua_settable
lua_gettable
lua_type
lua_isnumber
lua_tointeger
lua_toboolean
lua_pushnumber
lua_pushboolean
lua_pushcclosure
luaL_optinteger
lua_createtable
lua_error
lua_replace
lua_concat
lua_typename
lua_touserdata
lua_iscfunction
lua_pushlstring
lua_setfenv
lua_rawget
lua_getfenv
lua_tocfunction
lua_isuserdata
lua_rawequal
lua_rawset
luaL_checklstring
luaL_loadbuffer
lua_close
lua_atpanic
luaL_openlibs
luaL_newstate
lua_call
luaL_argerror
lua_tothread
lua_resume
lua_pushfstring
lua_status
lua_pushstring
lua_getstack
lua_getlocal
lua_getupvalue
lua_getinfo
lua_next
lua_tonumber
lua_getmetatable
lua_pcall
lua_setmetatable
luaL_newmetatable
lua_newuserdata
lua_remove
luaL_error
lua_pushlightuserdata
lua_topointer
lua_tolstring
lua_isstring
lua_insert
lua_pushvalue
luaL_optnumber
lua_objlen
lua_getfield
lua_xmove
lua_checkstack

ole32

CreateStreamOnHGlobal
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleInitialize
OleUninitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VariantCopy
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantChangeType
VarUI4FromStr

d3dx9_43

D3DXQuaternionToAxisAngle
D3DXQuaternionNormalize
D3DXMatrixDecompose
D3DXVec4Transform
D3DXMatrixOrthoOffCenterLH
D3DXPlaneIntersectLine
D3DXPlaneFromPointNormal
D3DXComputeNormals
D3DXPlaneFromPoints
D3DXVec3Normalize
D3DXQuaternionRotationYawPitchRoll
D3DXVec3ProjectArray
D3DXMatrixScaling
D3DXVec3TransformCoord
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixMultiply
D3DXCreateLine
D3DXVec2TransformCoordArray
D3DXComputeBoundingSphere
D3DXQuaternionInverse
D3DXCreateTextureFromFileInMemoryEx
D3DXMatrixAffineTransformation
D3DXMatrixTransformation
D3DXMatrixRotationAxis
D3DXQuaternionSlerp
D3DXVec2TransformCoord
D3DXMatrixRotationQuaternion
D3DXVec3TransformNormal
D3DXVec3Project
D3DXGetImageInfoFromFileInMemory
D3DXVec3TransformArray
D3DXQuaternionMultiply
D3DXQuaternionRotationAxis
D3DXVec3Transform
D3DXMatrixInverse
D3DXVec3TransformCoordArray
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXLoadSurfaceFromFileInMemory
D3DXVec2Transform
D3DXCreateTexture
D3DXVec3TransformNormalArray
D3DXSaveTextureToFileInMemory
D3DXGetImageInfoFromFileA
D3DXSaveSurfaceToFileW
D3DXComputeTangent
D3DXGetDeclLength
D3DXIntersectSubset
D3DXBoxBoundProbe
D3DXCreateCompressedAnimationSet
D3DXFrameRegisterNamedMatrices
D3DXLoadMeshHierarchyFromXInMemory
D3DXFrameFind
D3DXFrameDestroy
D3DXFileCreate
D3DXGetDeclVertexSize
D3DXCreateEffect
D3DXCreateCubeTexture
D3DXLoadSurfaceFromSurface
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXMatrixTranslation
D3DXVec3UnprojectArray
D3DXLoadMeshFromXInMemory
D3DXComputeBoundingBox

winmm

timeEndPeriod
timeBeginPeriod
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerGetNumDevs
mixerClose
mixerSetControlDetails
mixerGetControlDetailsA
mixerOpen
mciGetErrorStringA
mciSendCommandA
timeGetTime

shlwapi

ord12
PathAddExtensionW
PathFileExistsA
PathCombineW
PathRenameExtensionW
PathIsRelativeA
PathCanonicalizeA
PathRemoveExtensionA
PathCombineA
PathAddBackslashA
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathFindExtensionA
PathIsRelativeW
PathIsUNCW
PathRemoveFileSpecA
PathRemoveBackslashA
PathFindFileNameA
PathRemoveBackslashW

wininet

HttpQueryInfoA
HttpEndRequestA
HttpSendRequestExA
HttpAddRequestHeadersA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetQueryDataAvailable
InternetCrackUrlA
InternetOpenUrlA
InternetConnectA
InternetCloseHandle
InternetSetStatusCallback
InternetOpenA
InternetAttemptConnect
InternetWriteFile

gdiplus

GdipDeleteBrush
GdipCloneBrush
GdipCreateSolidFill
GdipDisposeImage
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatMeasurableCharacterRanges
GdipCreateFromHWND
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipFlush
GdipSetTextRenderingHint
GdipSetPageUnit
GdipSetPageScale
GdipFillRectangleI
GdipDrawString
GdipMeasureString
GdipMeasureCharacterRanges
GdipCreateRegionRectI
GdipDeleteRegion
GdipGetRegionBoundsI
GdipIsEmptyRegion
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetLogFontA
GdipDeleteFont
GdipGetFontSize
GdipGetFontUnit
GdipGetFontHeight
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipCreatePen1
GdipDeletePen
GdipCreateFromHDC
GdipDrawLineI
GdipAlloc
GdipFree

ddraw

DirectDrawCreateEx

dinput8

DirectInput8Create

xinput9_1_0

XInputGetState
XInputGetCapabilities

dsound

ord11
ord2
ord1

advapi32

RegQueryInfoKeyW
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 819KB - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 388KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 387KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f727bb1af946993b2b81d98026605d59

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

shell32

imm32

msacm32

version

d3d9

dsetup

lua5.1

ole32

oleaut32

d3dx9_43

winmm

shlwapi

wininet

gdiplus

ddraw

dinput8

xinput9_1_0

dsound

advapi32

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 819KB - Virtual size: 820KB

.data Size: 388KB - Virtual size: 660KB

.tls Size: 387KB - Virtual size: 388KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 472KB - Virtual size: 472KB

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 819KB - Virtual size: 820KB

.data
Size: 388KB - Virtual size: 660KB

.tls
Size: 387KB - Virtual size: 388KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 472KB - Virtual size: 472KB