2024-06-12_b444f9fd199f28078c868b27ba7e4cd9_karagany_magniber_silence

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-12_b444f9fd199f28078c868b27ba7e4cd9_karagany_magniber_silence
Size

74.7MB
MD5

b444f9fd199f28078c868b27ba7e4cd9
SHA1

d0373ef9f969f9e921ed7f59ef86748e7537cc28
SHA256

7dda157679f34b4217e2234ff553d045ab5a2f9d6d1c4d6b582577cf6601d2af
SHA512

ce839ae9ffb3580007f7adabddea7f5406a981f95f9ba562ef910affccb6c9ca611a395287eac734772f88ccfdd35d8f2f8ef0b1a89c1292f33d9ef71759effa
SSDEEP

786432:nz0dlEwKta++wK1ukan/SvMQqVsniinkjpxMN5bxturydhSTb2uTeYOEkeLCh:nmlEOZuZQSekj0GGbSTRjOEVLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-12_b444f9fd199f28078c868b27ba7e4cd9_karagany_magniber_silence

Files

2024-06-12_b444f9fd199f28078c868b27ba7e4cd9_karagany_magniber_silence
.exe windows:5 windows x86 arch:x86

79c9fc305e9507c57209870c7746bf73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Build\Bamboo\TUU2014-SU1\tuneup\Setup\TUStub\Release\TUStub.pdb

Imports

msi

ord92
ord190
ord16
ord113
ord141
ord32
ord70
ord88
ord169
ord8
ord118
ord160
ord159

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_Add
ord17

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetLocaleInfoW
GetNativeSystemInfo
GetSystemDefaultLCID
GetUserDefaultLCID
GetPrivateProfileStringW
LoadResource
SizeofResource
LockResource
WriteFile
GetCurrentProcess
CreateDirectoryW
LocalFree
GetTickCount
Sleep
GetExitCodeProcess
SetFileAttributesW
FindFirstFileW
FindClose
lstrlenW
lstrcpyW
lstrcatW
SystemTimeToFileTime
OpenProcess
lstrcmpiW
ExpandEnvironmentStringsW
GetVersion
GetWindowsDirectoryW
SetCurrentDirectoryW
GetFileAttributesW
CopyFileW
GetCommandLineW
CreateMutexW
MultiByteToWideChar
FormatMessageW
GetTempPathW
GetTempFileNameW
AttachConsole
FreeConsole
FindNextFileW
GetProcAddress
EnumResourceNamesW
GetDiskFreeSpaceExW
IsValidCodePage
GetProcessHeap
GetModuleHandleW
GetEnvironmentStringsW
HeapSize
GetFileAttributesExW
IsValidLocale
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
GetCommandLineA
HeapAlloc
HeapReAlloc
AreFileApisANSI
GetModuleHandleExW
LoadLibraryW
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
GetStringTypeW
InterlockedIncrement
FreeLibrary
GetModuleFileNameW
InterlockedDecrement
GetModuleFileNameA
GetOEMCP
GetCurrentThreadId
GetStdHandle
WideCharToMultiByte
UnmapViewOfFile
CloseHandle
VirtualQuery
MapViewOfFile
CreateFileMappingW
CreateFileW
GetSystemTime
FreeEnvironmentStringsW
FileTimeToSystemTime
QueryPerformanceCounter
GetCurrentProcessId
SetEnvironmentVariableW
GetConsoleCP
GetConsoleMode
GetLastError
GetVersionExW
FindResourceExW
EnumSystemLocalesW
DeleteFileW
SetFilePointerEx
OutputDebugStringW
FlushFileBuffers
SetStdHandle
WriteConsoleW
SetEndOfFile
ReadFile
ReadConsoleW
LoadLibraryExW
GetUserDefaultUILanguage
GetACP
GetFileType

user32

SetWindowPos
ReleaseDC
GetWindowTextLengthW
GetWindowDC
LoadBitmapW
PostMessageW
KillTimer
SetTimer
EnableMenuItem
GetSystemMenu
LoadImageW
SetCursor
GetDlgCtrlID
IsDlgButtonChecked
SetFocus
UpdateWindow
InvalidateRect
GetDC
SetParent
AttachThreadInput
SetForegroundWindow
GetForegroundWindow
DrawTextW
GetWindowTextW
ScreenToClient
GetWindowRect
EndDialog
DialogBoxParamW
SendInput
ShowWindow
GetDlgItem
SetWindowTextW
SendMessageW
SetWindowLongW
GetClientRect
GetDesktopWindow
CreateDialogParamW
ExitWindowsEx
GetWindowThreadProcessId
IsWindow
FindWindowW
wsprintfW
DestroyWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
MessageBoxW
LoadStringW
GetSystemMetrics
BringWindowToTop

gdi32

GetDeviceCaps
SetBkMode
Rectangle
SelectObject
CreatePen
CreateSolidBrush
GetStockObject
SetTextColor
CreateFontW

advapi32

StartServiceW
OpenSCManagerW
EqualSid
AdjustTokenPrivileges
OpenProcessToken
DuplicateTokenEx
IsValidSid
GetTokenInformation
FreeSid
AllocateAndInitializeSid
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
CloseServiceHandle
ControlService
QueryServiceStatusEx
RegOpenKeyA
LookupPrivilegeValueW
OpenServiceW

shell32

ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CoCreateGuid
StringFromGUID2
IIDFromString

oleaut32

SysFreeString
VariantInit
SysAllocString

Sections

.text
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74.0MB - Virtual size: 74.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79c9fc305e9507c57209870c7746bf73

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msi

comctl32

wtsapi32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 325KB - Virtual size: 325KB

.rdata Size: 139KB - Virtual size: 139KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 74.0MB - Virtual size: 74.0MB

.reloc Size: 232KB - Virtual size: 232KB

.text
Size: 325KB - Virtual size: 325KB

.rdata
Size: 139KB - Virtual size: 139KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 74.0MB - Virtual size: 74.0MB

.reloc
Size: 232KB - Virtual size: 232KB