2024-05-20_f3401274aa920c55cce050be3d779257_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-20_f3401274aa920c55cce050be3d779257_magniber
Size

5.4MB
MD5

f3401274aa920c55cce050be3d779257
SHA1

273bb1e267f3a27530a04d59c075569c7a209572
SHA256

8c0c450421f52d8ab173781a38aacffa314a7bebaaeb6ea1836e4118bed5d7f3
SHA512

d8d90e487bcc7d7b456cff4db40c55d54f8e5596e39bcd3c606168b1d73c7c7baeecd627b6f10ba2638a1783de665d426d46159b058c4f8f081935e874c8e58b
SSDEEP

98304:N5H9myYbTpYozfXc5ST92fd6oF8GtmXwap0RsgACwSDjNpMRpj1yPbk8P07JatWW:N5H9my4+g92fd6oOHX30RsgACwSDjNpL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-20_f3401274aa920c55cce050be3d779257_magniber

Files

2024-05-20_f3401274aa920c55cce050be3d779257_magniber
.exe windows:5 windows x86 arch:x86

0f511b670925ffbed2c6b4bc2a163e97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\DeViL_boy\prg\MagicFarmDeluxe\magic_farm.pdb

Imports

kernel32

SetPriorityClass
FileTimeToLocalFileTime
FileTimeToSystemTime
GetExitCodeThread
Sleep
WaitForSingleObject
CreateThread
SetThreadPriority
OutputDebugStringA
QueryPerformanceFrequency
CreateFileA
GetFileInformationByHandle
CloseHandle
QueryPerformanceCounter
GetTickCount
lstrlenA
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
GetFileTime
GetSystemDirectoryA
WideCharToMultiByte
MulDiv
FreeLibrary
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
FindClose
FindNextFileA
FindFirstFileA
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
DeleteFileA
GetCurrentThreadId
GetCurrentThread
GlobalFree
GlobalUnlock
MultiByteToWideChar
GlobalLock
GlobalAlloc
GetVersionExA
GetCommandLineA
GetLastError
CreateMutexW
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentProcess
IsBadWritePtr
VirtualQuery
GetThreadPriority
InitializeCriticalSection
DeleteCriticalSection
VirtualProtect
InterlockedDecrement
GetFileSize
GetFileAttributesA
InterlockedIncrement
MoveFileA
CopyFileA
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
FlushFileBuffers
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
GetSystemInfo
FormatMessageA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetTempPathA
GetShortPathNameW
GetModuleFileNameW
IsDebuggerPresent
GetThreadContext
TerminateThread
DuplicateHandle
IsBadStringPtrW
IsBadStringPtrA
IsBadReadPtr
SetThreadAffinityMask
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
HeapFree
GetStartupInfoA
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
GetLocalTime
ExitThread
ResumeThread
GetDriveTypeA
GetFullPathNameA
HeapReAlloc
HeapAlloc
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetStdHandle
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetPriorityClass

user32

ClientToScreen
GetWindowInfo
GetSystemMetrics
OffsetRect
ReleaseDC
GetDC
DrawTextExW
DestroyCursor
DestroyWindow
SetWindowLongA
MessageBoxW
ShowWindow
ChangeDisplaySettingsA
EnumWindows
GetWindowRect
IsWindowVisible
IsIconic
GetWindowPlacement
SystemParametersInfoA
ReleaseCapture
DefWindowProcW
EndPaint
BeginPaint
DefWindowProcA
GetWindowLongA
DialogBoxIndirectParamA
EndDialog
SendMessageA
GetDlgItem
AdjustWindowRectEx
SetWindowTextA
PostMessageA
SetForegroundWindow
WindowFromPoint
SetCapture
SetTimer
GetActiveWindow
CreateWindowExW
CreateWindowExA
AdjustWindowRect
SetCursor
LoadCursorA
DispatchMessageA
TranslateMessage
PeekMessageA
SetFocus
EnumDisplaySettingsA
CreateCursor
RegisterClassW
RegisterClassA
RegisterWindowMessageW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetSysColorBrush
GetMessageA
SetCaretPos
ShowCaret
CreateCaret
DestroyCaret
HideCaret
GetCursor
PostQuitMessage
GetLastActivePopup
GetDesktopWindow
SetWindowPos
TrackMouseEvent
GetKeyState
CallWindowProcA
GetCursorInfo
MoveWindow
MessageBoxA
GetWindowTextA
GetAsyncKeyState
SetCursorPos
GetCursorPos
ShowCursor
GetClientRect
ScreenToClient
SetWindowTextW
SetClassLongA
LoadIconA

dbghelp

SymGetTypeInfo
SymCleanup
StackWalk64
SymGetSymFromAddr64
SymSetContext
SymEnumSymbols
SymInitialize
MiniDumpWriteDump

winmm

PlaySoundA
timeGetTime
mixerSetControlDetails
mixerOpen
mixerGetDevCapsA
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerClose
timeBeginPeriod
timeEndPeriod

wsock32

ioctlsocket
gethostbyname
htons
connect
WSAGetLastError
send
recv
socket
__WSAFDIsSet
select
WSACleanup
closesocket
WSAStartup
inet_ntoa

gdi32

DeleteObject
CreateFontIndirectA
SetTextColor
SetBkMode
CreateFontA
GetTextMetricsA
GetDeviceCaps
GetObjectA
SelectObject
CreateRectRgn
SelectClipRgn
GetTextExtentPoint32W
IntersectClipRect
TextOutW

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ShellExecuteA

ole32

CoCreateInstance
CoInitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 570KB - Virtual size: 570KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f511b670925ffbed2c6b4bc2a163e97

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

dbghelp

winmm

wsock32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 4.5MB - Virtual size: 4.5MB

.rdata Size: 570KB - Virtual size: 570KB

.data Size: 90KB - Virtual size: 341KB

.rsrc Size: 228KB - Virtual size: 227KB

.text
Size: 4.5MB - Virtual size: 4.5MB

.rdata
Size: 570KB - Virtual size: 570KB

.data
Size: 90KB - Virtual size: 341KB

.rsrc
Size: 228KB - Virtual size: 227KB