2024-05-14_2d00b98bc60131ad0306eeee6dde9466_darkgate_magniber_zxxz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-14_2d00b98bc60131ad0306eeee6dde9466_darkgate_magniber_zxxz
Size

30.7MB
MD5

2d00b98bc60131ad0306eeee6dde9466
SHA1

80be9f3ff7f7f70bcf827aecfd119610b07ec5e9
SHA256

1b18cab9debbfc873ec168200dbf75cb35c0120e09884731ee6d318b45793e7c
SHA512

daecf9a839739d759cf7b2726a942ea6941cfee3e25dcf074be4b3c827b5c777d410226a8dbfe1728f41886a32c509cadfa91d852ef766c54ed43f1340adda78
SSDEEP

196608:FSffV3xIgrWmc44tG7V3U4CuDrS1E/8dtfJfJkTjSdOPNINlEMTR5Zx9sDZCxlR2:8f9Th3UFgrD0vGjdGJlR5r90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-14_2d00b98bc60131ad0306eeee6dde9466_darkgate_magniber_zxxz

Files

2024-05-14_2d00b98bc60131ad0306eeee6dde9466_darkgate_magniber_zxxz
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28.9MB - Virtual size: 28.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ