Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_789ffbc834667bd9943514f9d93243c0_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_789ffbc834667bd9943514f9d93243c0_magniber.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-05-22_789ffbc834667bd9943514f9d93243c0_magniber
-
Size
6.8MB
-
MD5
789ffbc834667bd9943514f9d93243c0
-
SHA1
6322beb5307ae9178f5b1405810be7309b1df0a6
-
SHA256
a09c991e787c2905331b1f797eac71a863458d21f2c22accbab94c406329de86
-
SHA512
67c923a82d9e0bc4766f3c334559814da997ac9d92fca0c36ee1be22a2c9da75bc80b5f68b1f75a6fc0cf2be177a800fca6295dbf8fff0011c96c96dd51299eb
-
SSDEEP
196608:TbY1tFOL07WDM0y1AWHiBrTFdiSv1HVBt4sKT5qst18bkbh8jQkwD2MDQL:TbY/rW/y1AWHkrT+Sv34sKTNgoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-22_789ffbc834667bd9943514f9d93243c0_magniber
Files
-
2024-05-22_789ffbc834667bd9943514f9d93243c0_magniber.exe windows:6 windows x86 arch:x86
6d41f92c30200ec8780dc678c45b84fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
hoengine
?Launch@@YAHPAD@Z
kernel32
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
ucrtbase
_Exit
__p__commode
__setusermatherr
_c_exit
_cexit
_configthreadlocale
_configure_narrow_argv
_controlfp_s
_crt_atexit
_get_narrow_winmain_command_line
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
_set_fmode
_set_new_mode
exit
terminate
vcruntime140
__current_exception
__current_exception_context
_except_handler4_common
memset
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 896KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Geddon Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE