General

Malware Config

Signatures

Files

• 2024-05-22_d696d51f5e67f7e1ccc1465c2f933a3a_magniber

  .exe windows:6 windows x86 arch:x86

  3e7eaabdcc06953bd659619538a2a041

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shell32

  ShellExecuteExW

  DuplicateIcon

  SHGetFolderPathW

  ExtractIconExW

  version

  VerQueryValueW

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  wsock32

  socket

  connect

  send

  htonl

  htons

  gethostbyname

  select

  ntohl

  recv

  WSAStartup

  ioctlsocket

  gdiplus

  GdipCreateFromHDC

  GdipDisposeImage

  GdipCreateSolidFill

  GdipCloneBrush

  GdipDeleteBrush

  GdipSetCompositingQuality

  GdipFree

  GdiplusShutdown

  GdiplusStartup

  GdipDeleteGraphics

  GdipSetSmoothingMode

  GdipDrawImageRectI

  GdipLoadImageFromStream

  GdipCloneImage

  GdipGetImageBounds

  GdipAlloc

  kernel32

  GetLocaleInfoW

  LCMapStringW

  CompareStringW

  SetFilePointerEx

  lstrlenW

  Sleep

  SetLastError

  EnterCriticalSection

  LeaveCriticalSection

  GetCurrentThreadId

  RaiseException

  DeleteCriticalSection

  GetLastError

  InitializeCriticalSectionAndSpinCount

  ResetEvent

  WaitForSingleObject

  GlobalUnlock

  GlobalFree

  MulDiv

  DecodePointer

  GetCommandLineW

  GetLongPathNameW

  GetModuleFileNameW

  GetTempPathW

  CreateMutexW

  CreateEventW

  CloseHandle

  CreateThread

  GetProcAddress

  LocalFree

  GetCurrentProcessId

  GetModuleHandleW

  SizeofResource

  CreateFileW

  GetFileAttributesW

  LockResource

  QueryPerformanceFrequency

  LoadResource

  FindResourceW

  GetWindowsDirectoryW

  FreeLibrary

  QueryPerformanceCounter

  LoadLibraryExW

  MultiByteToWideChar

  WideCharToMultiByte

  InitializeCriticalSectionEx

  GlobalAlloc

  GlobalLock

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  SystemTimeToFileTime

  GetDateFormatW

  GetVolumeInformationW

  DeviceIoControl

  GetVersionExW

  LoadLibraryW

  GlobalReAlloc

  GetUserDefaultLCID

  TlsFree

  TlsAlloc

  GetSystemDirectoryW

  GetFileSizeEx

  GetConsoleMode

  GetConsoleOutputCP

  WriteFile

  GetStdHandle

  ExitProcess

  GetTimeZoneInformation

  PeekNamedPipe

  GetFileType

  GetFileInformationByHandle

  CreateDirectoryW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  SetEnvironmentVariableW

  GetFullPathNameW

  GetDriveTypeW

  GetModuleHandleExW

  FreeLibraryAndExitThread

  ExitThread

  RemoveDirectoryW

  DeleteFileW

  SystemTimeToTzSpecificLocalTime

  FindNextFileW

  FindFirstFileExW

  FindClose

  GetFileAttributesExW

  GetCommandLineA

  TlsSetValue

  RtlUnwind

  GetStartupInfoW

  SetEvent

  TerminateProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCPInfo

  GetSystemTimeAsFileTime

  LCMapStringEx

  EnumSystemLocalesW

  HeapSize

  HeapReAlloc

  ReadFile

  ReadConsoleW

  SetStdHandle

  IsValidCodePage

  GetACP

  IsValidLocale

  GetOEMCP

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  FlushFileBuffers

  SetEndOfFile

  WriteConsoleW

  GetSystemTime

  TlsGetValue

  TryAcquireSRWLockExclusive

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  InitializeSRWLock

  GetStringTypeW

  WaitForSingleObjectEx

  OutputDebugStringW

  IsDebuggerPresent

  LoadLibraryExA

  VirtualFree

  VirtualAlloc

  IsProcessorFeaturePresent

  FlushInstructionCache

  GetCurrentProcess

  InterlockedPushEntrySList

  InterlockedPopEntrySList

  InitializeSListHead

  GetProcessHeap

  HeapFree

  HeapAlloc

  EncodePointer

  user32

  MessageBoxW

  SendMessageW

  GetDC

  GetClientRect

  MoveWindow

  SetWindowTextW

  GetWindowRect

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  OpenClipboard

  UnhookWindowsHookEx

  SetWindowsHookExW

  CallNextHookEx

  GetAsyncKeyState

  GetDialogBaseUnits

  SetTimer

  HideCaret

  EndPaint

  BeginPaint

  GetDlgCtrlID

  SetForegroundWindow

  GetSystemMetrics

  ClientToScreen

  KillTimer

  EnumWindows

  GetClassNameW

  GetWindowThreadProcessId

  PostMessageW

  FindWindowW

  PostThreadMessageW

  DialogBoxParamW

  CallWindowProcW

  LoadCursorW

  GetClassInfoExW

  RegisterClassExW

  RedrawWindow

  ReleaseDC

  GetWindowDC

  FillRect

  GetMessageW

  DialogBoxIndirectParamW

  DestroyIcon

  GetActiveWindow

  GetWindowTextW

  SetFocus

  CreateDialogParamW

  UnregisterClassW

  DestroyWindow

  GetWindow

  GetWindowLongW

  MonitorFromWindow

  GetMonitorInfoW

  GetParent

  MapWindowPoints

  SetWindowPos

  DispatchMessageW

  InvalidateRect

  ShowWindow

  PeekMessageW

  UpdateWindow

  IsWindow

  SetWindowLongW

  DefWindowProcW

  EndDialog

  CreateWindowExW

  ScreenToClient

  gdi32

  SetBkColor

  GetStockObject

  CreateSolidBrush

  CreateFontIndirectW

  GetDeviceCaps

  CreateFontW

  GetTextExtentPoint32W

  DeleteDC

  DeleteObject

  SelectObject

  comdlg32

  GetSaveFileNameW

  advapi32

  RegOpenKeyExA

  RegQueryValueExA

  RegCreateKeyExA

  RegSetValueExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExW

  IsTextUnicode

  ole32

  CoInitializeSecurity

  CoSetProxyBlanket

  CreateStreamOnHGlobal

  CoCreateInstance

  CLSIDFromProgID

  CLSIDFromString

  CoUninitialize

  CoInitialize

  oleaut32

  CreateErrorInfo

  SysFreeString

  SysStringByteLen

  SysAllocStringByteLen

  SysAllocString

  VariantClear

  VariantInit

  VariantCopy

  SysStringLen

  VariantChangeType

  OleLoadPicture

  Sections

  .text

  Size: 588KB - Virtual size: 588KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 147KB - Virtual size: 147KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 27KB - Virtual size: 172KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 25.1MB - Virtual size: 25.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 30KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ