h:\Dev\Projects\Glowfish\Main\Release\Glowfish.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-05_24880bb49c8b09d6efc35b9e3ce37d13_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-05_24880bb49c8b09d6efc35b9e3ce37d13_magniber.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-06-05_24880bb49c8b09d6efc35b9e3ce37d13_magniber
-
Size
2.5MB
-
MD5
24880bb49c8b09d6efc35b9e3ce37d13
-
SHA1
e87270789ab83de199bc0a02b4ef2cabab1c0548
-
SHA256
e3f1bad7304eeee6b845b1e60329656480e410910d404c9c1faf325bd3c0c936
-
SHA512
7bf75ec3cfa14d6a6cddbbe39af9c7d39c82d9ff8527caee833e770891df8d09ef228962fb58864a935ee6bfdc6e4dc0fd7cd738eecee14afb9b2d47de4ae225
-
SSDEEP
49152:LW4YxcPBbSIKHL0grR7VLlRkTxYLHkdPekkqeLLTAuZKJX9rBP1j2uB7+A:izBHLdcxYSuZKJX9rBP1jv+A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-05_24880bb49c8b09d6efc35b9e3ce37d13_magniber
Files
-
2024-06-05_24880bb49c8b09d6efc35b9e3ce37d13_magniber.exe windows:5 windows x86 arch:x86
5cf9a2f25098266b8009f04267ef6607
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
SetCursorPos
ClipCursor
GetClientRect
CreateIconIndirect
MessageBoxA
GetMonitorInfoA
MonitorFromWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SetClassLongA
CreateCursor
TrackMouseEvent
DefWindowProcA
ScreenToClient
ShowWindow
LoadIconA
LoadCursorA
SetForegroundWindow
GetActiveWindow
AdjustWindowRectEx
InvalidateRect
SetFocus
SetWindowPos
GetCursorPos
ShowCursor
ReleaseCapture
SetCapture
ClientToScreen
SetWindowLongA
CreateWindowExA
wsprintfA
RegisterClassExA
EnumDisplayMonitors
EnumDisplaySettingsA
RegisterRawInputDevices
ChangeDisplaySettingsExA
winmm
joySetCapture
joyReleaseCapture
joyGetPosEx
joyGetNumDevs
joyGetPos
timeEndPeriod
timeBeginPeriod
timeGetTime
joyGetDevCapsA
fmodex
FMOD_System_SetFileSystem
FMOD_System_Init
FMOD_System_GetVersion
FMOD_System_Create
FMOD_Memory_Initialize
FMOD_Channel_GetIndex
FMOD_Channel_Stop
FMOD_Channel_SetCallback
FMOD_Sound_Release
FMOD_System_CreateStream
FMOD_System_PlaySound
FMOD_DSP_SetActive
FMOD_DSP_SetBypass
FMOD_ChannelGroup_AddDSP
FMOD_System_CreateDSPByType
FMOD_System_CreateChannelGroup
FMOD_ChannelGroup_Release
FMOD_DSP_Release
FMOD_DSP_Remove
FMOD_ChannelGroup_AddGroup
FMOD_ChannelGroup_GetVolume
FMOD_ChannelGroup_GetNumChannels
FMOD_ChannelGroup_GetPaused
FMOD_System_Release
FMOD_ChannelGroup_SetVolume
FMOD_ChannelGroup_Stop
FMOD_Channel_IsPlaying
FMOD_Channel_GetLoopCount
FMOD_Memory_GetStats
FMOD_Sound_GetLength
FMOD_Channel_GetCurrentSound
FMOD_Channel_GetPosition
FMOD_Channel_GetPaused
FMOD_Channel_SetPaused
FMOD_Channel_SetPan
FMOD_Channel_SetVolume
FMOD_Channel_SetPosition
FMOD_Channel_SetChannelGroup
FMOD_Channel_SetLoopCount
FMOD_Channel_SetPriority
FMOD_Channel_GetMode
FMOD_ChannelGroup_SetPaused
FMOD_System_Update
FMOD_System_CreateSound
d3d8
Direct3DCreate8
ws2_32
WSACleanup
WSAStartup
kernel32
SetLastError
EnterCriticalSection
InterlockedDecrement
IsProcessorFeaturePresent
GetVersionExA
CompareStringW
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
SetFilePointer
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapReAlloc
GetCurrentProcessId
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetStdHandle
HeapSize
GetCPInfo
LCMapStringW
LCMapStringA
GetProcAddress
GetModuleHandleW
GetStartupInfoA
GetCommandLineA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
ExitProcess
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameA
Sleep
GetDiskFreeSpaceExA
LocalFree
GetLastError
LocalAlloc
CloseHandle
WriteFile
SetFilePointerEx
SetEndOfFile
CreateDirectoryW
DeleteFileW
GetFileSizeEx
CreateFileW
GetFileAttributesW
ReadFile
CopyFileW
MoveFileW
SetCurrentDirectoryW
FormatMessageA
GetModuleFileNameW
GetCurrentDirectoryW
FindClose
FindNextFileW
SetFileAttributesW
FindFirstFileW
RemoveDirectoryW
CreateMutexA
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex
ExitThread
GetSystemInfo
GetProcessTimes
GetCurrentProcess
TlsGetValue
SetThreadPriority
CreateThread
TlsSetValue
OpenThread
TlsAlloc
GetThreadTimes
ResumeThread
TerminateThread
TlsFree
GetModuleHandleA
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VirtualAlloc
VirtualFree
GetSystemTimeAsFileTime
CreateEventA
SetEvent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedExchange
InterlockedIncrement
gdi32
DeleteDC
GetDeviceCaps
CreateBitmap
CreateDCA
advapi32
InitializeAcl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyA
RegQueryValueExA
RegCloseKey
GetNamedSecurityInfoW
GetAclInformation
GetAce
AddAccessAllowedAce
SetFileSecurityW
shell32
SHGetSpecialFolderPathW
ShellExecuteA
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 33B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ