2024-05-14_fcdf9497b815e3c5b8661e7799069750_magniber | Triage

Sharing

General

Target

2024-05-14_fcdf9497b815e3c5b8661e7799069750_magniber
Size

24.1MB
MD5

fcdf9497b815e3c5b8661e7799069750
SHA1

ca8160664cc43f241c09ebd77a7dca33cb2674d3
SHA256

120d6ee2323cd2789ff173ead0aef6f0644ab11b9ff3533d5834c4ee2f7b2654
SHA512

2beebedb5e64268c3c0ab3beca168ccf54f5053d91e3a1694ba41c5ac447d7c88a8563352d9a7f57563772bc11edb51bdc4c3e1e303ca8059b5eb26da1ed13f3
SSDEEP

393216:R4opD2KL7xaypjDMLCo5Cn606zo6uPCEf6h:bD2KL7wyV

Score

10^/10

Malware Config

Signatures

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-14_fcdf9497b815e3c5b8661e7799069750_magniber

Files

2024-05-14_fcdf9497b815e3c5b8661e7799069750_magniber
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

NEOM
Size: - Virtual size: 33.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2024
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17.6MB - Virtual size: 17.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE