2024-04-27_d7b0114c477c2b9e4508119297f81602_magniber_revil | Triage

Sharing

General

Target

2024-04-27_d7b0114c477c2b9e4508119297f81602_magniber_revil
Size

30.8MB
MD5

d7b0114c477c2b9e4508119297f81602
SHA1

59ca73d8ecbe3c2e351088b5038ea0e1cdd7f350
SHA256

c562956d258079649b5a23f7a03ae807a18608602ea2d7346a4e9ed076e7f991
SHA512

96d34f4625e533429d3f8c23880da11a2dc7c8346b3be1dd7fc34d25822ada4ee56a4cc42d3463bd9bbe0403bae8d4b6509ed2a2ac518e06c5e987dd0771eb11
SSDEEP

786432:Fc3R4BVX8UgbMIOLoYW7wClnE4wfRqwi24y9y:FAmV8VbD9pwfRqLMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-27_d7b0114c477c2b9e4508119297f81602_magniber_revil

Files

2024-04-27_d7b0114c477c2b9e4508119297f81602_magniber_revil
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_libiconv_version
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_open_into
libiconvctl
libiconvlist

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21.1MB - Virtual size: 21.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ