2024-06-08_07fd2a32c41e158658314015462e02be_magniber

General

Target

2024-06-08_07fd2a32c41e158658314015462e02be_magniber
Size

13.7MB
MD5

07fd2a32c41e158658314015462e02be
SHA1

885216ae0190124eab2b26f139e7c7bd35cbeae4
SHA256

cac454c387637162d133675368c26d353f9f710a64ee3752be4aa10672718c99
SHA512

837e7876ad8aff1f9c13c2d871ade7acb66727bfd1c1cd2c3c4af4bc944acb4f89af92930ed09fe6d82528c2f130b347d3a9f403459f1246054248e74b092f83
SSDEEP

393216:0R4czxdta8iJXjJ+QifYLMiQcQrMZxZUz+vFpd4dyk:0+CwxJwQTMiQc3XHuyk

Score

10^/10

vmprotect

Malware Config

Signatures

Detects executables packed with VMProtect. 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_VMProtect

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-08_07fd2a32c41e158658314015462e02be_magniber

Files

2024-06-08_07fd2a32c41e158658314015462e02be_magniber
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

zip_archive_set_tempdir
zip_close
zip_dir_add
zip_discard
zip_error_get_sys_type
zip_fclose
zip_file_add
zip_file_replace
zip_fopen_index
zip_fopen_index_encrypted
zip_fread
zip_get_archive_flag
zip_get_name
zip_get_num_entries
zip_name_locate
zip_open
zip_set_archive_comment
zip_source_buffer
zip_source_filep
zip_source_free
zip_source_function
zip_stat_index
zip_stat_init

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 76.6MB - Virtual size: 76.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Silvana
Size: 494B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 467KB - Virtual size: 467KB

.data Size: 60KB - Virtual size: 84KB

.vmp0 Size: 608KB - Virtual size: 607KB

.vmp1 Size: 57KB - Virtual size: 56KB

.reloc Size: 98KB - Virtual size: 97KB

.rsrc Size: 76.6MB - Virtual size: 76.6MB

.Silvana Size: 494B - Virtual size: 4KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 467KB - Virtual size: 467KB

.data
Size: 60KB - Virtual size: 84KB

.vmp0
Size: 608KB - Virtual size: 607KB

.vmp1
Size: 57KB - Virtual size: 56KB

.reloc
Size: 98KB - Virtual size: 97KB

.rsrc
Size: 76.6MB - Virtual size: 76.6MB

.Silvana
Size: 494B - Virtual size: 4KB