2024-04-25_676dc3aa19927965ad938b26cfe44299_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-25_676dc3aa19927965ad938b26cfe44299_magniber
Size

5.2MB
MD5

676dc3aa19927965ad938b26cfe44299
SHA1

eedb2cf0d7bf4aed8439177532e919e46820c8b5
SHA256

f84fc4ea9a4accc21babcebfe5d91e030dd3e959d09f62b47a907b7fa767ebb0
SHA512

865bd0f8175e9f17c16e4a001fc75182a357296d8d3f7d84e6a3577d09ee44e0e99878c6a3415fae8e501b22ab3fb0efe1948bf4288e054e6f0b5180a5ef3308
SSDEEP

98304:CTgNv5QiVxgbtIM/0cKZP5Cj0qhvcGx6OEKG0cC6g6v66666ES66666E6kD6666+:l/kykj0qh0Gx6gG0cC6g6v66666ES666

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-25_676dc3aa19927965ad938b26cfe44299_magniber

Files

2024-04-25_676dc3aa19927965ad938b26cfe44299_magniber
.exe windows:6 windows x86 arch:x86

24d0b3967f7bf3f9e2dd2da304263ec9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\Frame\build\Release\uchecker.exe.pdb

Imports

kernel32

GetSystemInfo
VirtualQuery
LoadLibraryExA
CreateMutexW
GetLastError
CloseHandle
EndUpdateResourceW
UpdateResourceW
BeginUpdateResourceW
LoadLibraryW
GetModuleHandleW
FreeLibrary
GetLogicalDriveStringsW
GetDriveTypeW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetProcessHeap
CreateFileW
DeleteFileW
SetFilePointer
WriteFile
OutputDebugStringA
SetLastError
ReleaseMutex
WaitForSingleObject
GetCurrentProcessId
CreateProcessW
GetTickCount
GetModuleFileNameW
GetModuleHandleA
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
GetCurrentDirectoryW
GetFileAttributesW
GetFileAttributesExW
GetLongPathNameW
GetTempFileNameW
ReadFile
RemoveDirectoryW
GetTempPathW
GetCurrentProcess
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
MoveFileExW
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetStdHandle
ResumeThread
AssignProcessToJobObject
GetCommandLineW
LocalFree
SetUnhandledExceptionFilter
GetVersionExW
GetNativeSystemInfo
GetProcAddress
ExpandEnvironmentStringsW
CreateEventW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
IsDebuggerPresent
DuplicateHandle
RaiseException
Sleep
CreateThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
GetModuleHandleExA
GetSystemDirectoryW
GetWindowsDirectoryW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
TerminateProcess
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
UnregisterWaitEx
RegisterWaitForSingleObject
SetEvent
ResetEvent
WaitForMultipleObjects
GetThreadTimes
GetTickCount64
InitializeCriticalSectionEx
SleepEx
WaitForSingleObjectEx
GetFileType
PeekNamedPipe
ExpandEnvironmentStringsA
VerSetConditionMask
GetSystemDirectoryA
LoadLibraryA
VerifyVersionInfoA
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
InitializeSListHead
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
UnregisterWait
FreeLibraryAndExitThread
LoadLibraryExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
CreateTimerQueue
RtlUnwind
GetConsoleCP
GetConsoleMode
GetFullPathNameW
ExitProcess
SetStdHandle
ExitThread
HeapAlloc
HeapFree
HeapReAlloc
GetACP
ReadConsoleW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
WriteConsoleW
HeapSize

user32

KillTimer
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetTimer
MsgWaitForMultipleObjectsEx
GetQueueStatus
CallMsgFilterW
PostQuitMessage
WaitMessage
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
SetWindowLongW
GetWindowLongW
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
MessageBoxW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

ws2_32

socket
setsockopt
getaddrinfo
freeaddrinfo
recvfrom
sendto
accept
listen
ioctlsocket
gethostname
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSAStartup
WSACleanup
WSAGetLastError
__WSAFDIsSet
select
WSAIoctl
WSASetLastError

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

advapi32

CryptReleaseContext
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptEncrypt
CryptImportKey
CryptGetHashParam
CryptDestroyKey
CreateProcessAsUserW
CryptAcquireContextA

wldap32

ord32
ord33
ord35
ord79
ord30
ord27
ord26
ord22
ord41
ord50
ord45
ord211
ord46
ord143
ord301
ord200

ole32

CoInitializeEx
CoUninitialize

Sections

.text
Size: 898KB - Virtual size: 898KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oldres
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24d0b3967f7bf3f9e2dd2da304263ec9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

userenv

ws2_32

winmm

advapi32

wldap32

ole32

Sections

.text Size: 898KB - Virtual size: 898KB

.rdata Size: 2.8MB - Virtual size: 2.8MB

.data Size: 14KB - Virtual size: 26KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

oldres Size: 2KB - Virtual size: 1KB

.reloc Size: 40KB - Virtual size: 39KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 898KB - Virtual size: 898KB

.rdata
Size: 2.8MB - Virtual size: 2.8MB

.data
Size: 14KB - Virtual size: 26KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

oldres
Size: 2KB - Virtual size: 1KB

.reloc
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB