2024-05-24_a625042a7ec0631000a8132bbdb845d6_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-24_a625042a7ec0631000a8132bbdb845d6_magniber
Size

2.0MB
MD5

a625042a7ec0631000a8132bbdb845d6
SHA1

014f588d4327f23a98a001b0820ec0c7879645b1
SHA256

3e276756d05a1eea02e833ad6ca9874cc24fe9bc8e74c55c07b483fabd2bc2d7
SHA512

62ae92595ef6d7ae111f13f40da4f3cc7d4c77bdb667554e9e4cb4c6884beb332ef942b9492b7e2d4c4ac244dd43db64f453c55e237a28f747bac589a6656576
SSDEEP

24576:il/60ISPn3+cAay3aUy46fbQB3o907YhURbvmsj+G3pAJbYPIRJJaUNm2/csc:itcclJLbCUypAVRJJaUNm2/c3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-24_a625042a7ec0631000a8132bbdb845d6_magniber

Files

2024-05-24_a625042a7ec0631000a8132bbdb845d6_magniber
.exe windows:5 windows x86 arch:x86

42befab945f73333b533e4e26e474d35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

wglShareLists
wglCreateContext
wglDeleteContext
glGetTexLevelParameteriv
glTexSubImage2D
glGetIntegerv
glLoadIdentity
glGenTextures
wglGetProcAddress
glTranslatef
glViewport
glTexEnvi
glMatrixMode
glScalef
glTexEnvfv
glTexParameteri
glDepthMask
glShadeModel
glTexImage2D
glColorMask
glOrtho
glTexParameterf
glClear
glClearDepth
glDeleteTextures
glClipPlane
glEnable
glGetFloatv
glColor4f
wglMakeCurrent
glDisable
glVertex3i
glVertex3f
glBlendFunc
glBegin
glBindTexture
glEnd
glTexCoord2f

shell32

ShellExecuteA
SHGetFolderPathA

user32

GetSystemMetrics
ShowWindow
GetDC
SetForegroundWindow
SetCursor
FindWindowA
LoadIconA
SetClassLongA
DestroyIcon
MessageBoxA
GetWindowRect
SetWindowPos
SetWindowTextA
LoadCursorA

fmodex

?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNELINDEX@@PAVSound@2@_NPAPAVChannel@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?close@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getMasterChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setVolume@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setLoopCount@Sound@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
FMOD_System_Create
?stop@Channel@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?isPlaying@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

kernel32

GetVersionExA
IsProcessorFeaturePresent
CreateFileW
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetFileAttributesA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
SetUnhandledExceptionFilter
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
Sleep
GetModuleHandleA
OpenMutexA
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
CreateDirectoryA
GetLastError
SetThreadAffinityMask
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
GetModuleFileNameA
IsValidCodePage
GetOEMCP
GetACP
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
GetFileType
GetStdHandle
SetHandleCount
VirtualFree
HeapCreate
GetCPInfo
LCMapStringW
LCMapStringA
HeapReAlloc
RaiseException
RtlUnwind
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
DuplicateHandle
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
MultiByteToWideChar
DeleteCriticalSection
InterlockedExchange
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
GetProcAddress
FreeLibrary
CloseHandle
ReadFile
CreateFileA
DeleteFileA

sdl

SDL_Init
SDL_GetWMInfo
SDL_WM_SetCaption
SDL_GetError
SDL_Quit
SDL_WM_GetCaption
SDL_GetMouseState
SDL_WarpMouse
SDL_SetVideoMode
SDL_GetAppState
SDL_PollEvent
SDL_Delay
SDL_GetTicks
SDL_GL_SetAttribute
SDL_GetVideoInfo
SDL_VideoModeOK
SDL_GetKeyState
SDL_FreeSurface
SDL_EnableUNICODE
SDL_RWFromFile
SDL_ReadLE32
SDL_WriteLE32
SDL_ReadLE16
SDL_WriteLE16
SDL_UpdateRects
SDL_GL_SwapBuffers
SDL_FillRect
SDL_MapRGB
SDL_GetRGBA
SDL_CreateRGBSurfaceFrom
SDL_MapRGBA
SDL_LoadFunction
SDL_LoadObject
SDL_FreeWAV

pthread

pthread_mutex_destroy
pthread_mutex_unlock
pthread_mutex_lock
pthread_attr_destroy
pthread_create
pthread_setschedparam
sched_get_priority_min
pthread_attr_setdetachstate
pthread_cancel
pthread_attr_init
pthread_mutex_init

lua51

luaL_newstate
lua_pushnumber
lua_getmetatable
lua_type
lua_gettable
lua_settable
lua_setfield
lua_pushlstring
lua_toboolean
lua_newuserdata
lua_touserdata
lua_tolstring
lua_insert
lua_createtable
lua_rawset
lua_call
lua_rawget
lua_getupvalue
lua_pushfstring
lua_replace
lua_error
lua_pushlightuserdata
lua_equal
lua_rawseti
lua_getinfo
lua_pushnil
lua_objlen
lua_settop
lua_gettop
lua_concat
lua_setmetatable
lua_pushvalue
lua_close
luaL_openlibs
lua_gc
lua_pushstring
lua_atpanic
lua_remove
lua_rawgeti
lua_isnumber
lua_next
lua_pushboolean
lua_tonumber
lua_pushcclosure
lua_pcall
luaL_loadfile
lua_getstack
lua_tocfunction

d3d8

Direct3DCreate8

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42befab945f73333b533e4e26e474d35

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

shell32

user32

fmodex

winmm

kernel32

sdl

pthread

lua51

d3d8

advapi32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 224KB - Virtual size: 223KB

.data Size: 205KB - Virtual size: 256KB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 41KB - Virtual size: 41KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 224KB - Virtual size: 223KB

.data
Size: 205KB - Virtual size: 256KB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 41KB - Virtual size: 41KB