2024-05-04_4da81da1b63c2fe2d83703a6f327dcc8_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-04_4da81da1b63c2fe2d83703a6f327dcc8_magniber
Size

6.4MB
MD5

4da81da1b63c2fe2d83703a6f327dcc8
SHA1

da9db6db61c21fd9c627f55b3853e5053297e9dd
SHA256

c636029fe0b5baa494f21a6e3556ff13dfd007a8b577bf259a3ef5d67b4b1696
SHA512

12afaf779b1585a12eae823ea730be78b2dded8af012d44322f6e3b66502adcebb879036cb8e315b1fe7215742e7c6b55ec30f924944ae4a71af1a87ef1fe937
SSDEEP

98304:2g5lFdDqi+LPMVFeFuguK1RWacUk5sD/BTBcsjV6WjoCql6+uO3dHwm:T5q/FAK1RWafLFTBPxjJYt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-04_4da81da1b63c2fe2d83703a6f327dcc8_magniber

Files

2024-05-04_4da81da1b63c2fe2d83703a6f327dcc8_magniber
.exe windows:6 windows x86 arch:x86

1b41f4b6d445bc2b8d13c7772277ced5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Denis Alves\Documents\GitHub\mumain-mauricio\main-files\Global Release\Main.pdb

Imports

imm32

ImmSetCompositionWindow
ImmGetCompositionWindow
ImmGetIMEFileNameA
ImmGetConversionStatus
ImmGetCompositionStringA
ImmReleaseContext
ImmGetContext
ImmGetDescriptionA
ImmSetConversionStatus
ImmGetDefaultIMEWnd

dsound

ord2
ord1

opengl32

glReadPixels
glFogi
glBlendFunc
glGetFloatv
glTexEnvi
glScalef
wglMakeCurrent
wglDeleteContext
wglCreateContext
glGetString
glGetIntegerv
glTranslatef
glRotatef
glFlush
glVertex2f
glStencilOp
glStencilFunc
glPolygonMode
glFrontFace
glDepthMask
glDepthFunc
glColorMask
glColor4ub
glBegin
glColor3ub
glClearColor
glAlphaFunc
glFogfv
glFogf
glTexParameteri
glTexImage2D
glTexEnvf
glGenTextures
glViewport
glEnd
glDeleteTextures
glBindTexture
glPushMatrix
glPopMatrix
glMatrixMode
glLoadIdentity
glClear
glVertex3fv
glTexCoord2f
glColor3fv
glColor3f
glVertex3f
glColor4f
glDisable
glEnable
glNormal3f

glu32

gluPerspective
gluOrtho2D

winmm

timeBeginPeriod
timeGetDevCaps
mmioAscend
timeEndPeriod
mmioClose
mmioDescend
mmioOpenA
timeGetTime
mmioRead
mmioWrite

ws2_32

WSACleanup
WSAStartup
WSAAsyncSelect
shutdown
send
WSAGetLastError
closesocket
connect
htons
inet_addr
recv
gethostbyname
socket
setsockopt

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wzaudio

wzAudioOption
wzAudioDestroy
wzAudioPlay
wzAudioStop
wzAudioGetStreamOffsetRange
wzAudioCreate

kernel32

GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
HeapAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
HeapFree
CreateProcessW
DuplicateHandle
GetModuleFileNameW
GetTempPathW
GetTimeZoneInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
FlushFileBuffers
GetFileAttributesExW
CreateFileW
TlsGetValue
TlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
VirtualProtect
GetModuleHandleExA
GetModuleHandleA
VirtualQuery
VirtualFree
VirtualAlloc
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
InitializeSListHead
IsProcessorFeaturePresent
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
TryEnterCriticalSection
CreateSymbolicLinkW
GetFileInformationByHandleEx
GetModuleHandleW
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
GetCurrentThreadId
GetStdHandle
ReadFile
WriteFile
Sleep
GetLocalTime
AllocConsole
SetConsoleTitleA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
GetCurrentThread
GetThreadContext
IsBadReadPtr
HeapReAlloc
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleFileNameA
GlobalMemoryStatus
lstrcpynA
CreateToolhelp32Snapshot
Process32First
Process32Next
Module32First
Module32Next
GetFileSize
GetLastError
CreateDirectoryA
DeleteFileA
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFullPathNameA
RemoveDirectoryA
FileTimeToSystemTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
SetThreadPriority
GetThreadPriority
SetPriorityClass
GetPriorityClass
GetVersionExA
GetProcessAffinityMask
SetProcessAffinityMask
SetFileAttributesA
WaitForSingleObject
GetCurrentDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA
GlobalUnlock
GlobalLock
lstrlenA
SetFilePointer
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcmpiA
SetLastError
FreeConsole
SetConsoleMode
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
ReadConsoleOutputA
GetConsoleTitleA
GetCommandLineA
ExitProcess
TerminateProcess
OpenProcess
CopyFileA
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
InitOnceExecuteOnce
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
LocalFree
WriteConsoleW
InitializeCriticalSectionEx
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
WaitForSingleObjectEx
FormatMessageA
SetConsoleCtrlHandler
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
OutputDebugStringW
SetStdHandle
GetExitCodeProcess
CreatePipe
DeleteFileW
MoveFileExW
SetEndOfFile
HeapSize
EnumSystemLocalesW
CreateFileA

user32

GetClipboardData
SetTimer
GetDC
SetScrollPos
GetScrollPos
SetWindowTextW
GetWindowTextA
GetWindowTextW
GetCaretPos
GetWindowLongW
SetWindowLongW
OpenClipboard
IsWindowVisible
ShowWindow
DestroyWindow
CreateWindowExW
PostMessageW
SendMessageW
SetRect
UnregisterHotKey
RegisterHotKey
SetCursorPos
IntersectRect
SetFocus
ScreenToClient
GetCursorPos
GetActiveWindow
GetDoubleClickTime
GetAsyncKeyState
PtInRect
OffsetRect
GetFocus
SendMessageA
PostMessageA
wsprintfA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetDesktopWindow
MessageBoxA
GetWindowRect
SetWindowPos
wvsprintfA
GetKeyboardLayoutNameA
GetKeyboardLayout
DrawMenuBar
GetSystemMenu
RemoveMenu
UpdateWindow
EnumChildWindows
GetClassNameA
GetWindowThreadProcessId
KillTimer
SystemParametersInfoA
EnumDisplaySettingsA
ChangeDisplaySettingsA
LoadIconA
LoadCursorA
FindWindowA
ShowCursor
AdjustWindowRect
EndPaint
BeginPaint
ReleaseDC
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetCapture
CreateWindowExA
RegisterClassA
PostQuitMessage
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
CloseClipboard
GetMessageA
CallWindowProcW

gdi32

DeleteObject
SetPixelFormat
ChoosePixelFormat
GetStockObject
CreateFontA
GetTextExtentPoint32W
TextOutW
CreateCompatibleDC
DeleteDC
SelectObject
SetBkColor
SetTextColor
CreateDIBSection
SwapBuffers

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

wininet

HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetQueryDataAvailable
FtpOpenFileA
InternetCloseHandle
InternetOpenA
InternetConnectA
InternetReadFile
FtpFindFirstFileA

urlmon

URLDownloadToFileA

Exports

Exports

__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 443KB - Virtual size: 136.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b41f4b6d445bc2b8d13c7772277ced5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

imm32

dsound

opengl32

glu32

winmm

ws2_32

version

wzaudio

kernel32

user32

gdi32

advapi32

shell32

ole32

wininet

urlmon

Exports

Exports

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 414KB - Virtual size: 414KB

.data Size: 443KB - Virtual size: 136.7MB

.rsrc Size: 135KB - Virtual size: 135KB

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 414KB - Virtual size: 414KB

.data
Size: 443KB - Virtual size: 136.7MB

.rsrc
Size: 135KB - Virtual size: 135KB