Behavioral task
behavioral1
Sample
2024-04-24_8da9e8459215b8c56a8bd02086306763_magniber_zxxz.exe
Resource
win7-20240221-en
General
-
Target
2024-04-24_8da9e8459215b8c56a8bd02086306763_magniber_zxxz
-
Size
5.7MB
-
MD5
8da9e8459215b8c56a8bd02086306763
-
SHA1
5e15f796f21faa7c1d0344df31d2f388ee6153f6
-
SHA256
db4efaada4b5b9c7f7125f5afaa083228514d907c27a7cdc1a83421159ccc620
-
SHA512
5f3ea8b444fd4e81d8e1b66b1e89e487bed1e576091ce449198333e3429f120117ce76e1ba5fd84005d7c87bc6ed25508074bf6f28c0a9038eb6701708c6b646
-
SSDEEP
49152:XQ9d2adaZnpQSezkgXyBzYW/h/1gsi9KOJioowTiaxxivINRFxNHd7xIPr+ZVQS+:c2iqpQcgXbuWZ7s+ZVBN0MgSHUwoprpT
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-24_8da9e8459215b8c56a8bd02086306763_magniber_zxxz
Files
-
2024-04-24_8da9e8459215b8c56a8bd02086306763_magniber_zxxz.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 3.4MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE