2024-04-19_f9c930e97876a461a2b28ebbd1d952d1_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-19_f9c930e97876a461a2b28ebbd1d952d1_magniber
Size

3.2MB
MD5

f9c930e97876a461a2b28ebbd1d952d1
SHA1

b1fc9912da838975237e78094d466db1c717ec9d
SHA256

e2b2317d4a094bb414c18170c8cf2523d68fb3dc714ac329d2f8c7c756e48454
SHA512

51f71511febe708192c825627c4b6e9212154b98a356c178e6792b2bb2d9324da946435bb090c82d3e56861633e606934ded1242f5abbbfb49263c1eff7dc4c7
SSDEEP

98304:KkPJMHuWjFoFsVHUu6PA66IVDNWr1KHxjnNl:VCHXZHUjA66IxNWUX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-19_f9c930e97876a461a2b28ebbd1d952d1_magniber

Files

2024-04-19_f9c930e97876a461a2b28ebbd1d952d1_magniber
.exe windows:6 windows x86 arch:x86

7785a064969b3aa5e1b179f39a47d137

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\src\piper\branches\earth_branch\earth_7_3_6_branch\googleclient\earth\client\scons-out\prod-32\obj\tools\installer2\setup\setup_pro.pdb

Imports

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

shell32

SHBrowseForFolderW
SHGetFolderPathW
SHGetPathFromIDListW

oleaut32

SysAllocString
SysFreeString

shlwapi

PathQuoteSpacesW
ord176

gdi32

SetBkColor
GetObjectW
SetTextColor
SetBkMode
SelectObject
BitBlt
CreateCompatibleDC
CreateSolidBrush
ExcludeClipRect
RestoreDC
SaveDC

advapi32

GetNamedSecurityInfoW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
AllocateLocallyUniqueId
RegOpenKeyExW
RegCloseKey

kernel32

GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
SetConsoleCtrlHandler
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
InitializeCriticalSectionAndSpinCount
VerSetConditionMask
GetCommandLineW
DeleteFileW
DecodePointer
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetCurrentProcess
GetCurrentThreadId
GetSystemDirectoryW
IsWow64Process
GetModuleHandleW
GetProcAddress
LoadLibraryW
SetSearchPathMode
VerifyVersionInfoW
GetUserDefaultUILanguage
CloseHandle
CreateProcessW
CreateDirectoryW
CreateFileW
RemoveDirectoryW
WriteFile
GetTempPathW
WaitForSingleObject
GetExitCodeProcess
GetWindowsDirectoryW
FindResourceExW
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalFree
EnumResourceLanguagesW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
EncodePointer
HeapAlloc
HeapFree
GetProcessHeap
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
VirtualAlloc
VirtualFree
LoadLibraryExA
OutputDebugStringW
RtlUnwind
InterlockedFlushSList
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
GetCurrentThread
GetStringTypeW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
HeapSize
HeapReAlloc
OutputDebugStringA
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo

user32

GetSysColorBrush
InflateRect
SystemParametersInfoW
GetSysColor
UnregisterClassW
DialogBoxParamW
MessageBoxW
SetWindowLongW
SetProcessDefaultLayout
SendMessageW
IsWindow
IsWindowVisible
EndDialog
SetDlgItemTextW
CheckDlgButton
GetDlgCtrlID
GetSystemMetrics
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowTextW
GetClientRect
GetWindowRect
ScreenToClient
GetWindowLongW
GetWindow
LoadImageW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
DestroyWindow
ShowWindow
SetWindowPos
UpdateWindow
MapWindowPoints
GetParent
LoadCursorW
MonitorFromWindow
GetMonitorInfoW
LoadStringW
wsprintfW
DefWindowProcW
CallWindowProcW

Sections

.text
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67.2MB - Virtual size: 67.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7785a064969b3aa5e1b179f39a47d137

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ole32

shell32

oleaut32

shlwapi

gdi32

advapi32

kernel32

user32

Sections

.text Size: 347KB - Virtual size: 347KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 4KB - Virtual size: 8KB

.gfids Size: 1024B - Virtual size: 564B

.rsrc Size: 67.2MB - Virtual size: 67.2MB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 347KB - Virtual size: 347KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 4KB - Virtual size: 8KB

.gfids
Size: 1024B - Virtual size: 564B

.rsrc
Size: 67.2MB - Virtual size: 67.2MB

.reloc
Size: 12KB - Virtual size: 12KB