Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_11f28eb54a1906f7f710067f0401c8f1_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-28_11f28eb54a1906f7f710067f0401c8f1_magniber.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-28_11f28eb54a1906f7f710067f0401c8f1_magniber
-
Size
205KB
-
MD5
11f28eb54a1906f7f710067f0401c8f1
-
SHA1
a7c053fb2575408b2771a93eb8746b8e749791cf
-
SHA256
9236d6a1220e6865effbf65a081aa2e0a3bf1b70969bd52d835c6ab2de207fcc
-
SHA512
22f8c6511861acc0552b012562bcdd9ea759261c2c0863989e05f26b90f5c75e2345dba35f55a11bd13fff0d4a5816d1512fa675cae24605655963eefb1f7b22
-
SSDEEP
3072:JqEo7L4ueEp6Bxf3IbgFPJipLgaJ5R56AtCw9THbmQ6h6pxMJJgZOiUZBqZS9Y:IEaLjp6Bybjb5+AhHbmpJJy5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-28_11f28eb54a1906f7f710067f0401c8f1_magniber
Files
-
2024-05-28_11f28eb54a1906f7f710067f0401c8f1_magniber.exe windows:5 windows x86 arch:x86
3ef1fb736697f59fb24e23f356e26c4d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalMemoryStatus
lstrlenA
GetCPInfo
LocalCompact
LocalFlags
GetSystemTimes
GlobalAlloc
AddVectoredContinueHandler
LoadLibraryW
TerminateThread
GetLastError
GetProcAddress
VirtualAllocEx
AddVectoredExceptionHandler
GetExitCodeThread
FindAtomA
OutputDebugStringA
GetFileInformationByHandle
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetLocaleInfoA
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
VirtualAlloc
HeapReAlloc
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
user32
AnimateWindow
IsCharLowerA
CharPrevA
ShowWindow
GetActiveWindow
WindowFromDC
FindWindowA
GetMonitorInfoW
GetDCEx
shell32
DragQueryPoint
DragQueryFileA
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ