Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_670be0431f0bada78181bdab2832c2ea_mafia_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-24_670be0431f0bada78181bdab2832c2ea_mafia_magniber.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-24_670be0431f0bada78181bdab2832c2ea_mafia_magniber
-
Size
698KB
-
MD5
670be0431f0bada78181bdab2832c2ea
-
SHA1
f9d957e6471d8222586de2b4925f104eeaf85c9a
-
SHA256
21499d972cd804bcaeb2858965c8df23a553016721240754d0bed70a04547c6f
-
SHA512
51cb6e5abd1341d6c7b827663d474043a7e4fd66c385a58b4c2e92f22bd57302f8a97ee4274e6654b2b3752b8a76e633d8128e4e42882cff115557637f5e18f4
-
SSDEEP
12288:dAxBUf3GvMfT+Xhd01yse61UffkAxcPWhrX49k6mnfjsC7V7+my6+K:qxaGn0ose61UffXKp9k6yfAaIZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-24_670be0431f0bada78181bdab2832c2ea_mafia_magniber
Files
-
2024-05-24_670be0431f0bada78181bdab2832c2ea_mafia_magniber.exe windows:5 windows x86 arch:x86
bacd58ce092719a9322d7dd0da093d94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
GetVersionExW
GetTempPathW
DeleteFileW
GetTickCount
Sleep
GetSystemDirectoryW
CreateFileW
CloseHandle
SetLastError
GlobalHandle
GlobalFree
GlobalAlloc
LockResource
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
GlobalUnlock
GlobalLock
MulDiv
lstrcmpW
InitializeCriticalSectionAndSpinCount
lstrlenA
ExitProcess
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
GetCommandLineW
LocalFree
lstrcpyW
FreeResource
CreateDirectoryW
GetProcessId
RemoveDirectoryW
TerminateProcess
CreateSemaphoreW
ReleaseSemaphore
InitializeCriticalSection
ReadFile
GetPrivateProfileIntW
WriteFile
MoveFileW
WritePrivateProfileStringW
GetPrivateProfileStringW
LoadLibraryW
FindFirstFileW
FindClose
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
SetConsoleCtrlHandler
GetCurrentThreadId
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointer
GetFileType
SetHandleCount
FatalAppExitA
FlushFileBuffers
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetTimeZoneInformation
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapReAlloc
GetConsoleMode
GetConsoleCP
HeapDestroy
HeapCreate
GetStdHandle
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetCPInfo
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
GetProcessAffinityMask
GetLastError
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
lstrlenW
IsValidLocale
user32
GetClientRect
ScreenToClient
PtInRect
GetForegroundWindow
IsWindow
GetWindowThreadProcessId
LoadIconW
KillTimer
MessageBoxW
InvalidateRect
SetActiveWindow
GetDlgItem
CharNextW
UnregisterClassA
GetDC
ReleaseDC
GetDesktopWindow
SendMessageW
IsChild
wsprintfW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
ShowWindow
DestroyWindow
MoveWindow
SetWindowPos
SetWindowLongW
GetWindowLongW
DialogBoxIndirectParamW
RegisterClassExW
LoadCursorW
DefWindowProcW
GetSystemMetrics
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PostThreadMessageW
SendDlgItemMessageW
MapDialogRect
SetWindowContextHelpId
EndDialog
RegisterWindowMessageW
BeginPaint
EndPaint
CallWindowProcW
GetFocus
SetFocus
GetWindow
GetClassNameW
GetSysColor
RedrawWindow
GetClassInfoExW
CreateWindowExW
CreateAcceleratorTableW
ClientToScreen
GetParent
SetCapture
ReleaseCapture
FillRect
InvalidateRgn
DestroyAcceleratorTable
gdi32
CreateFontW
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps
DeleteObject
advapi32
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
shell32
CommandLineToArgvW
Shell_NotifyIconW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
OleUninitialize
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoCreateInstance
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CoReleaseServerProcess
CoAddRefServerProcess
CoUninitialize
CoInitialize
oleaut32
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
UnRegisterTypeLi
RegisterTypeLi
DispCallFunc
SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
VariantInit
SysFreeString
SysAllocString
SafeArrayCreateVector
VariantClear
VariantCopy
VarUI4FromStr
shlwapi
PathFileExistsW
secur32
GetUserNameExW
winhttp
WinHttpReceiveResponse
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpSendRequest
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpOpen
WinHttpCloseHandle
Sections
.text Size: 407KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ