2024-05-15_5547a48bae733e4b44b30f9e0ed3dbe0_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-15_5547a48bae733e4b44b30f9e0ed3dbe0_magniber
Size

4.5MB
MD5

5547a48bae733e4b44b30f9e0ed3dbe0
SHA1

0d242ece8f1f2b1e9469ebe275f624b7a9e85d7f
SHA256

683e97af71a5a04db33ae008919191af4ca5a3892adea4ae7c1748950e26a992
SHA512

d1771381a50c5e59ac81ed9f863da1ca893ab512a99561cd850a8936119bf7d49b9f42ac12547257d1aedf11a4f47fe46842cac407ff22362d46005d3ece46d6
SSDEEP

49152:DTEao3BpEYlvJFvLXfKFNxYvL1IM6OZGOVmnzGGq4od07ePAUPPxIC8kfFPc6reG:DTJo3BpTXfpVmzGGq40Zvrt/QWF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-15_5547a48bae733e4b44b30f9e0ed3dbe0_magniber

Files

2024-05-15_5547a48bae733e4b44b30f9e0ed3dbe0_magniber
.exe windows:5 windows x86 arch:x86

5adc1d039f141cdc9dc71f6dd46deda2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\work\s17\live\game\Game_release.pdb

Imports

kernel32

GetProcAddress
LoadLibraryW
GetModuleFileNameW
CreateFileW
SetCurrentDirectoryW
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetLastError
CloseHandle
GetCommandLineW
GetCurrentDirectoryW
LocalFree
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableA
GetLocaleInfoW
GetConsoleOutputCP
WriteConsoleA
GetExitCodeProcess
CreatePipe
SetCurrentDirectoryA
GetCurrentDirectoryA
PeekNamedPipe
GetTickCount
GetFileTime
Sleep
SetThreadExecutionState
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
FindClose
FindNextFileW
FindFirstFileW
FindNextFileA
FindFirstFileA
DeleteFileW
SetThreadAffinityMask
GetCurrentThread
SetProcessAffinityMask
GetProcessAffinityMask
CreateMutexW
MultiByteToWideChar
WideCharToMultiByte
GetTempPathW
SetEvent
SetThreadPriority
CreateThread
CreateEventW
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileA
UnmapViewOfFile
GetDateFormatA
FileTimeToSystemTime
GetLocaleInfoA
GetUserDefaultUILanguage
GlobalUnlock
GlobalLock
GlobalAlloc
GetFullPathNameA
lstrcmpiA
LoadLibraryA
GetModuleHandleA
CreateFileMappingA
GetVersionExA
FormatMessageA
GetModuleFileNameA
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitThread
ResumeThread
GetFileAttributesW
GetFileAttributesA
WriteConsoleW
GetFileType
GetStdHandle
HeapReAlloc
GetSystemTimeAsFileTime
ExitProcess
LockFile
UnlockFile
FileTimeToLocalFileTime
CreateDirectoryA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetDriveTypeA
CreateProcessA
DuplicateHandle
MoveFileA
DeleteFileA
GetTimeFormatA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
CompareStringA
CompareStringW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
HeapSize
HeapCreate
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadFile
SetFilePointer
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetFileInformationByHandle
RemoveDirectoryA

user32

SetWindowPos
SetWindowLongW
SystemParametersInfoW
AdjustWindowRect
RegisterClassW
LoadIconW
DispatchMessageW
TranslateMessage
PeekMessageW
SetForegroundWindow
CreateWindowExW
EndPaint
BeginPaint
DefWindowProcW
ScreenToClient
SetWindowTextW
SetCursorPos
GetClientRect
PostMessageW
RegisterWindowMessageW
SetCursor
LoadCursorW
MessageBoxA
ReleaseCapture
SetCapture
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
ShowWindow
DestroyWindow
UnregisterClassW
EnumDisplaySettingsExW
GetCursorPos
GetAsyncKeyState
MessageBoxW
GetDC
ReleaseDC
ClipCursor
ClientToScreen
GetWindowPlacement

shell32

SHCreateDirectoryExW
ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW

shlwapi

PathAppendW
PathFindFileNameW
PathFindExtensionW
PathIsRelativeW
PathRemoveFileSpecW
PathCombineW
PathFileExistsW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

d3d9

Direct3DCreate9

gdi32

GetDeviceCaps
DeleteObject

advapi32

AllocateAndInitializeSid
FreeSid
SetNamedSecurityInfoW
SetEntriesInAclW

ole32

CoInitialize
CoCreateInstance
CoCreateGuid

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 221KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5adc1d039f141cdc9dc71f6dd46deda2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

shlwapi

winmm

d3d9

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 504KB - Virtual size: 504KB

.data Size: 221KB - Virtual size: 523KB

.rsrc Size: 245KB - Virtual size: 245KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 504KB - Virtual size: 504KB

.data
Size: 221KB - Virtual size: 523KB

.rsrc
Size: 245KB - Virtual size: 245KB