2024-06-12_1934e44653530bc41e2aafe4736e0440_magniber

Sharing

Copy URL Twitter E-mail

General

Target
2024-06-12_1934e44653530bc41e2aafe4736e0440_magniber
Size 1.5MB
Sample240612-m56ceswbql
SHA256 8fc64c1e37452e82d681c9ba5e6e293663e85894f703e8ae48b4b23bf4698448
MD5 1934e44653530bc41e2aafe4736e0440
SHA1 dc7e492571fbb7742e2fe1aaa245f1f3bbbd6e5d
SHA512 15e750ac624c4ee37e6b65c5ae4b337cca9ce54484cf0ff3cb325fab0734323d8ca3c28cf240421ee08fb391988785db7cae023c191afcc4fdedb8ec2e2176e7
SSDEEP 24576:v3wAEILt+BL/H9xKeTLiIRYY7grQWP/fxA9ImEeG:vgA/w1MeT2sY8k3X+w
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2024-06-12_1934e44653530bc41e2aafe4736e0440_magniber

.exe 1.5MB

2024-06-12_1934e44653530bc41e2aafe4736e0440_magniber

IMPHASH f7ddb99ad9bc5c3c96dbbb625992cf62
SHA256 8fc64c1e37452e82d681c9ba5e6e293663e85894f703e8ae48b4b23bf4698448
MD5 1934e44653530bc41e2aafe4736e0440
SHA1 dc7e492571fbb7742e2fe1aaa245f1f3bbbd6e5d
SHA512 15e750ac624c4ee37e6b65c5ae4b337cca9ce54484cf0ff3cb325fab0734323d8ca3c28cf240421ee08fb391988785db7cae023c191afcc4fdedb8ec2e2176e7
SSDEEP 24576:v3wAEILt+BL/H9xKeTLiIRYY7grQWP/fxA9ImEeG:vgA/w1MeT2sY8k3X+w
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ac:8c:54:39:77:8c:3d:45:8a:0e:65:52:63:28:d3:1e:2c:e6:3f:21

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CN

Chains

Jul 13, 2015

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CN

Serial Number

71:70:bd:93:cf:3f:18:9a:e6:45:2b:51:4c:49:34:0e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2013 - Feb 16, 2016

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

618183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\jenkins_Trunk\workspace\10.11Patch_SourceJob\qqpcmgr_proj\Basic\Output\BinFinal\Uninst.pdb

kernel32

SetErrorMode SearchPathW SetUnhandledExceptionFilter FreeResource DeviceIoControl WriteFile SetEvent LocalFree LocalAlloc CreateFileA GetWindowsDirectoryW GetCurrentDirectoryW IsBadReadPtr ExpandEnvironmentStringsW CreateDirectoryW GetModuleFileNameW SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetDriveTypeA GetCurrentDirectoryA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID QueryPerformanceCounter GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount IsValidCodePage GetOEMCP SetLastError lstrcpynW TlsFree TlsSetValue TlsAlloc TlsGetValue LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA RtlUnwind GetStartupInfoW CreateThread ExitThread GetModuleHandleA GetFullPathNameW IsDebuggerPresent UnhandledExceptionFilter VirtualAlloc VirtualFree IsProcessorFeaturePresent InterlockedCompareExchange HeapSize HeapReAlloc HeapDestroy GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetVersionExA GetLocaleInfoW GetUserDefaultUILanguage MoveFileW SetFileAttributesW GetLocalTime GetTempPathW DuplicateHandle CreatePipe GetStdHandle IsDBCSLeadByte GetCPInfo LoadLibraryA VirtualQuery GetSystemDefaultLangID QueryDosDeviceW GetLogicalDriveStringsW ReleaseMutex SetFilePointer HeapAlloc GetProcessHeap VirtualAllocEx TerminateProcess HeapFree WriteProcessMemory CreateEventW GetVersionExW GetPrivateProfileStringW CloseHandle InterlockedIncrement GetCurrentThreadId WaitForSingleObject GetEnvironmentVariableW DeleteFileW CreateProcessW ReadFile CreateFileW GetFileSize GetCommandLineW GetCurrentProcessId GetTickCount CopyFileW CreateToolhelp32Snapshot ExitProcess GetExitCodeProcess Sleep GetTempFileNameW MoveFileExW FindNextFileW FindFirstFileW OpenProcess GetProcessTimes FindClose RemoveDirectoryW GetSystemTimeAsFileTime Process32FirstW GetFileAttributesW GetSystemInfo Process32NextW OutputDebugStringW GlobalUnlock MulDiv GlobalAlloc lstrcmpW HeapCreate GlobalLock InitializeCriticalSection lstrlenW lstrcmpiW MultiByteToWideChar FreeLibrary CreateMutexW LeaveCriticalSection UnmapViewOfFile RaiseException GetSystemDirectoryW EnterCriticalSection GetLastError FindResourceW GetProcAddress LockResource GetVersion LoadLibraryExW WideCharToMultiByte GetModuleHandleW LoadLibraryW GetCurrentProcess FlushInstructionCache lstrlenA LoadResource SizeofResource DeleteCriticalSection MapViewOfFileEx InterlockedDecrement FindResourceExW CreateFileMappingW GetModuleFileNameA DebugBreak

user32

DispatchMessageW UnregisterClassA CloseWindowStation GetKeyState GetMessageW SetWindowLongW GetWindowLongW GetDC CopyRect LoadStringW CopyImage LoadImageW SendMessageW GetForegroundWindow TranslateMessage EnableWindow ShowWindow SetActiveWindow SetRect RegisterWindowMessageW AttachThreadInput MapWindowPoints IsWindowEnabled PeekMessageW GetWindow SetForegroundWindow SetWindowPos GetWindowRect RegisterClassExW GetClientRect MoveWindow GetClassInfoExW ReleaseDC InflateRect IsWindow GetWindowThreadProcessId GetDlgItem GetParent GetActiveWindow SystemParametersInfoW LoadCursorW TrackPopupMenu DestroyIcon PtInRect SetTimer GetUserObjectInformationW UpdateLayeredWindow ShowCursor OffsetRect PostThreadMessageW DrawIconEx GetDlgCtrlID DrawFrameControl EqualRect GetThreadDesktop GetProcessWindowStation CloseDesktop SetCursor mouse_event LoadIconW GetSystemMenu PostQuitMessage GetMonitorInfoW GetSystemMetrics DrawTextW MonitorFromWindow SendMessageTimeoutW FindWindowW MsgWaitForMultipleObjects KillTimer FindWindowExW ScreenToClient IsWindowVisible IsChild EndPaint RedrawWindow FillRect DestroyAcceleratorTable InvalidateRgn GetClassNameW CreateAcceleratorTableW BeginPaint SetFocus ClientToScreen ReleaseCapture SetCapture GetSysColor GetFocus PostMessageW SetWindowTextW FrameRect GetWindowTextLengthW GetWindowTextW CallWindowProcW DefWindowProcW DestroyWindow CreateWindowExW GetDesktopWindow InvalidateRect CharNextW

gdi32

SetBkMode TextOutW SaveDC GetTextExtentPoint32W SelectClipRgn GetDeviceCaps GetCurrentObject CreateSolidBrush DeleteObject BitBlt CreatePen SetTextColor LineTo MoveToEx CreateCompatibleBitmap SetBkColor SelectObject CreateBitmap CreateCompatibleDC Rectangle GetStockObject ExtTextOutW CreateDIBSection CreateFontIndirectW GetObjectW RectInRegion CombineRgn StretchBlt RoundRect CreateRectRgnIndirect RestoreDC CreateRectRgn DeleteDC GetClipRgn

advapi32

RegOpenKeyExW FreeSid AllocateAndInitializeSid RegRestoreKeyW SetSecurityDescriptorDacl InitializeSecurityDescriptor OpenServiceW DeleteService OpenSCManagerW CloseServiceHandle ControlService QueryServiceStatus RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyW OpenProcessToken RegUnLoadKeyW RegDeleteValueW RegQueryInfoKeyW RegCloseKey RegCreateKeyExW RegSetValueExW RegDeleteKeyW RegEnumKeyExW SetEntriesInAclW SetNamedSecurityInfoW IsTextUnicode

shell32

ShellExecuteW SHGetSpecialFolderPathW SHChangeNotify

ole32

CreateStreamOnHGlobal StringFromGUID2 CLSIDFromProgID CoGetClassObject OleLockRunning OleUninitialize CoUninitialize CoInitializeEx CLSIDFromString OleInitialize CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoCreateInstance

oleaut32

LoadRegTypeLi SysStringLen SysFreeString VarUI4FromStr VarBstrCmp OleLoadPicture VariantClear DispCallFunc VariantInit OleCreateFontIndirect LoadTypeLi SysAllocStringLen SysAllocString SysStringByteLen

shlwapi

wnsprintfW PathRemoveFileSpecW StrToIntA PathAddBackslashW PathAppendW PathFileExistsW SHDeleteKeyW SHDeleteValueW

comctl32

_TrackMouseEvent

ws2_32

htonl htons WSCEnumProtocols WSCDeinstallProvider

psapi

GetProcessImageFileNameW GetModuleFileNameExW GetProcessMemoryInfo

gdiplus

GdipFree GdipAlloc GdipLoadImageFromStream GdipSetImageAttributesColorMatrix GdipDisposeImageAttributes GdipCreateImageAttributes GdipDisposeImage GdiplusShutdown GdipGetImageWidth GdiplusStartup GdipDrawImageRectRectI GdipGetImageHeight GdipDrawImageRectI GdipCreateHBITMAPFromBitmap GdipDeleteGraphics GdipCloneImage GdipCreateBitmapFromStream GdipDrawImageI GdipCreateFromHDC

wininet

InternetOpenUrlW InternetOpenW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

fltlib

FilterUnload

crypt32

CryptQueryObject CryptMsgGetParam CertFindCertificateInStore CertGetNameStringW

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-12_1934e44653530bc41e2aafe4736e0440_magniber

PE Signature issue

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

ws2_32

psapi

gdiplus

wininet

version

fltlib

crypt32

netapi32

generic