2024-05-13_1d0d668161ff88e1eed1c9878a20f203_bkransomware_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-13_1d0d668161ff88e1eed1c9878a20f203_bkransomware_magniber
Size

4.8MB
MD5

1d0d668161ff88e1eed1c9878a20f203
SHA1

b0dc473f93dfc029b0dc160206e86764f38b27fe
SHA256

04b7246a2fcc984ca99922d29e5bd766af6f7cb95f085cc2f253e17179420978
SHA512

c779923245f3612ecc30054dadfd79f6b102d0a52ca395350d77a3b07fa6b76481b25506b7c5b9764adb5cdb8c7bd8ef9e88f89bd320f92d823029c387df2071
SSDEEP

98304:d7EMnMSgF+LWcPvDlGor6wAIoiVpcLdVFLOAkGkzdnEVomFHKnPgV:ESQMT6wAIoiVpedVFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-13_1d0d668161ff88e1eed1c9878a20f203_bkransomware_magniber

Files

2024-05-13_1d0d668161ff88e1eed1c9878a20f203_bkransomware_magniber
.exe windows:5 windows x86 arch:x86

4ff12805949c3f00c9f3ded374179f88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\GameBt\iscsi\Release\iShareAdmin.pdb

Imports

kernel32

IsValidLocale
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
GetOEMCP
GetACP
IsValidCodePage
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
VirtualQuery
ReadConsoleW
AreFileApisANSI
GetLocalTime
UnmapViewOfFile
GetComputerNameExW
GetLogicalDriveStringsW
CreateProcessW
DeviceIoControl
RemoveDirectoryW
FindNextFileW
CreateWaitableTimerA
ResetEvent
ReleaseSemaphore
WaitForMultipleObjectsEx
OpenEventA
FormatMessageA
GetConsoleMode
GetConsoleCP
PeekNamedPipe
GetFileInformationByHandle
GetTimeZoneInformation
GetStringTypeW
VirtualAlloc
GetModuleHandleExW
ExitProcess
RtlUnwind
SetConsoleCtrlHandler
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
ExitThread
CreateThread
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
GetUserDefaultLCID
GetWindowsDirectoryW
SetErrorMode
FindResourceExW
GetProfileIntW
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FindFirstFileW
FindClose
DeleteFileW
SearchPathW
VirtualProtect
GlobalReAlloc
GetFileSize
GetFileAttributesW
GetCurrentDirectoryW
lstrcpyW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetVersionExW
GlobalGetAtomNameW
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
LoadLibraryA
GetModuleFileNameW
OutputDebugStringA
ResumeThread
SuspendThread
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
WideCharToMultiByte
GetModuleHandleW
FlushFileBuffers
DecodePointer
HeapSize
RaiseException
HeapReAlloc
MulDiv
GlobalAlloc
GetModuleHandleA
GetTickCount
TlsSetValue
SetLastError
GetCurrentThread
SetThreadPriority
GetQueuedCompletionStatus
VerSetConditionMask
VerifyVersionInfoW
GlobalUnlock
GlobalLock
OutputDebugStringW
GetProcAddress
LoadLibraryW
HeapFree
HeapAlloc
GetProcessHeap
FreeLibrary
FreeResource
SetThreadUILanguage
SetThreadLocale
GetUserDefaultLangID
GetUserDefaultUILanguage
ReadFile
SetFilePointerEx
GetFileSizeEx
CreateFileW
InitializeCriticalSection
GetCurrentThreadId
GetSystemInfo
MultiByteToWideChar
CreateWaitableTimerW
SetWaitableTimer
TlsGetValue
WaitForMultipleObjects
TerminateThread
QueueUserAPC
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateEventW
SetEvent
SleepEx
WaitForSingleObject
SizeofResource
CloseHandle
Sleep
InterlockedIncrement
GetSystemTimeAsFileTime
InterlockedExchangeAdd
CreateIoCompletionPort
InterlockedCompareExchange
PostQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
CreateEventA
WaitForSingleObjectEx
TlsAlloc
TlsFree
GetLastError
FindResourceW
LoadResource
LockResource
GetCPInfo

user32

MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetClassNameW
GetClassLongW
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
RemovePropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
EndDeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
EndPaint
BeginPaint
GetWindowDC
IsDialogMessageW
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
SetFocus
CheckDlgButton
GetDlgItem
MoveWindow
SetClassLongW
GetDlgCtrlID
DeferWindowPos
MapVirtualKeyW
GetKeyNameTextW
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetActiveWindow
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LockWindowUpdate
GetUpdateRect
GetCapture
BringWindowToTop
SetWindowPos
ShowWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
FillRect
GetSysColorBrush
GetMessagePos
EqualRect
WaitMessage
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
GetMonitorInfoW
ShowOwnedPopups
GetMenuItemInfoW
DestroyAcceleratorTable
UpdateLayeredWindow
WindowFromPoint
ClientToScreen
GetKeyState
SetCursor
FrameRect
DestroyCursor
SetWindowRgn
DrawFocusRect
SetRect
LoadCursorW
DefWindowProcW
GetClassInfoW
UnregisterClassW
CopyRect
IsWindow
ScreenToClient
GetFocus
CreatePopupMenu
SetParent
DrawStateW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetWindowThreadProcessId
NotifyWinEvent
DestroyIcon
CopyImage
GetIconInfo
SendDlgItemMessageA
IsIconic
IsZoomed
TranslateAcceleratorW
InsertMenuItemW
OffsetRect
AppendMenuW
IsMenu
GetLastInputInfo
GetCursorPos
UnpackDDElParam
ReuseDDElParam
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
PostQuitMessage
EnableScrollBar
TrackMouseEvent
CharUpperW
GetSystemMenu
DeleteMenu
DrawFrameControl
SetClipboardData
EmptyClipboard
DrawIconEx
SetLayeredWindowAttributes
EnumDisplayMonitors
RealChildWindowFromPoint
SetCursorPos
SubtractRect
MessageBeep
SetRectEmpty
GetClientRect
GetWindowRect
InflateRect
GetSysColor
EnableWindow
SendMessageW
EnumChildWindows
InvalidateRect
PostMessageW
LoadIconW
GetParent
KillTimer
ReleaseCapture
PtInRect
UpdateWindow
SetCapture
GetDC
ReleaseDC
SetTimer
GetPropW
EnumWindows
GetLastActivePopup
SetForegroundWindow
LoadMenuW
LoadAcceleratorsW
MessageBoxA
IsChild
LoadBitmapW
IntersectRect
UnionRect
IsRectEmpty
GetMenuItemCount
GetMenuItemID
ModifyMenuW
GetSubMenu
GetWindowLongW
GetDesktopWindow
GetWindow
GetTopWindow
IsWindowVisible
GetAsyncKeyState
OpenClipboard
MonitorFromPoint
SystemParametersInfoW
IsClipboardFormatAvailable
CloseClipboard
GetClipboardData
RegisterWindowMessageW
SetPropW
MapVirtualKeyExW
IsCharLowerW
LoadImageW
GetSystemMetrics
RedrawWindow
DestroyMenu
DrawIcon
InvertRect
HideCaret
CreateMenu
GetWindowRgn
GetDoubleClickTime
GetComboBoxInfo
CharUpperBuffW
GetNextDlgGroupItem
InvalidateRgn
CharNextW
CopyAcceleratorTableW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
SetMenuDefaultItem
GetMenuDefaultItem
PostThreadMessageW
DrawEdge
CopyIcon

gdi32

GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
SetRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
GetDIBits
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
Polygon
Polyline
Rectangle
RoundRect
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
GetTextFaceW
CreateDCW
CopyMetaFileW
CreateBitmap
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateSolidBrush
SetPixelV
RealizePalette
GetObjectW
GetStockObject
CombineRgn
CreateRectRgn
OffsetRgn
CreatePolygonRgn
GetClipBox
ExcludeClipRect
CreatePatternBrush
CreateHatchBrush
GetCharWidth32W
GetBkColor
PatBlt
ExtSelectClipRgn
CreatePen
DeleteObject
CreateDIBSection
DeleteDC
GetDeviceCaps
CreateFontIndirectW
GetTextColor
GetTextMetricsW
GetTextExtentPoint32W
BitBlt
GetCurrentObject
CreateCompatibleBitmap
CreateCompatibleDC
DPtoLP
SelectObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

OpenServiceW
QueryServiceConfigW
ControlService
StartServiceW
ChangeServiceConfigW
CloseServiceHandle
OpenSCManagerW
RegEnumValueW
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

DragQueryFileW
DragFinish
DragAcceptFiles
Shell_NotifyIconW
SHAppBarMessage
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation

comctl32

ImageList_GetImageInfo
ImageList_Draw
ImageList_AddMasked
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

GetThemeColor
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
DrawThemeParentBackground
DrawThemeText
IsThemeBackgroundPartiallyTransparent
IsAppThemed

ole32

CoCreateInstance
OleInitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleLockRunning
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
StgOpenStorageOnILockBytes
CoInitializeEx
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
CoInitialize
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoCreateGuid

oleaut32

VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
OleLoadPicture
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdiplusShutdown

ws2_32

shutdown
WSAStringToAddressW
WSAAddressToStringW
WSAStartup
WSACleanup
gethostbyaddr
inet_ntoa
inet_addr
WSAIoctl
getsockname
listen
accept
select
__WSAFDIsSet
htonl
ntohl
closesocket
WSAGetLastError
WSASetLastError
ioctlsocket
setsockopt
WSASend
htons
WSASocketW
bind
getsockopt
connect
WSARecv

isharediskapi

ISHAREDISK_DiskFile_Create
ISHAREDISK_Capacity_DiskFile
ISHAREDISK_DiskFile_Type

wininet

InternetConnectW
InternetSetOptionW
InternetOpenW
InternetGetConnectedState
FtpCommandW
InternetCloseHandle
InternetWriteFile
FtpOpenFileW
InternetGetLastResponseInfoW
InternetSetStatusCallbackW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

iphlpapi

SendARP

secur32

GetUserNameExW

comdlg32

GetOpenFileNameW

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 585KB - Virtual size: 585KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ff12805949c3f00c9f3ded374179f88

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

isharediskapi

wininet

oleacc

imm32

winmm

iphlpapi

secur32

comdlg32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 585KB - Virtual size: 585KB

.data Size: 61KB - Virtual size: 93KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 190KB - Virtual size: 190KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 585KB - Virtual size: 585KB

.data
Size: 61KB - Virtual size: 93KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 190KB - Virtual size: 190KB