C:\BuildAgent\work\ea4504451a4e11dd\bin\wgc\Win32\Release\wgc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-15_3d0dacf48a2510382eed18b4b4983576_magniber.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-15_3d0dacf48a2510382eed18b4b4983576_magniber.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-15_3d0dacf48a2510382eed18b4b4983576_magniber
-
Size
2.2MB
-
MD5
3d0dacf48a2510382eed18b4b4983576
-
SHA1
7b449c1ddf0853814869d496a6757a391c6c252f
-
SHA256
a69683a12a7a9732fcf271002e9e81d1802f9ce3cf1aeacc7697ff717b890fea
-
SHA512
1bc8acde1b7031410856cfcfd59ed3cc64b751ccb29ce1b0a65927f4a580e3c4e08b52d4655f7b5ca087f49ccbbb16cdd8545c762bd5c7d88862b5d36d73c26a
-
SSDEEP
49152:kQDGG8CYAUnHCW9RnaxKoRn0udXyJdbidSHcJh87Ncb1NF2:kKYCwdmSJW132
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-15_3d0dacf48a2510382eed18b4b4983576_magniber
Files
-
2024-06-15_3d0dacf48a2510382eed18b4b4983576_magniber.exe windows:6 windows x86 arch:x86
a642b9136b132798657e23fdba077ce8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetLastError
lstrlenW
GetModuleHandleExW
lstrlenA
GetModuleHandleExA
GetLastError
GetProcAddress
GetModuleHandleW
FormatMessageW
WideCharToMultiByte
LocalFree
CreateNamedPipeW
LoadLibraryW
IsProcessInJob
GetCurrentProcess
SetDllDirectoryW
IsDebuggerPresent
CreateMutexA
ReleaseMutex
TerminateProcess
SetErrorMode
GetCommandLineW
CreateSemaphoreA
CreateEventA
DuplicateHandle
ReleaseSemaphore
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
SetEvent
WaitForSingleObjectEx
VirtualProtect
EnterCriticalSection
VirtualAlloc
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
SuspendThread
ResumeThread
Sleep
GetCurrentThread
GetThreadPriority
GetSystemInfo
GetThreadContext
GetCurrentProcessId
FlushInstructionCache
VirtualQuery
OpenThread
InterlockedPopEntrySList
VirtualFree
GetVersionExW
GetThreadTimes
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
RaiseException
FreeLibrary
LoadLibraryExA
GetFileAttributesW
K32GetModuleFileNameExW
OpenProcess
CreateEventW
ResetEvent
DeleteCriticalSection
FindFirstFileW
FindNextFileW
FindClose
MultiByteToWideChar
GetModuleFileNameW
GetSystemTimeAsFileTime
GetProcessTimes
InitializeCriticalSectionEx
DecodePointer
CreateProcessW
GetCurrentDirectoryW
HeapDestroy
HeapReAlloc
HeapSize
GetTempPathW
UnregisterWaitEx
RegisterWaitForSingleObject
GetExitCodeProcess
GetLocaleInfoW
CreateFileW
DeviceIoControl
LocalLock
LocalAlloc
MulDiv
LocalUnlock
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
TryEnterCriticalSection
CreateDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
QueryPerformanceFrequency
GetStringTypeW
GetExitCodeThread
GetNativeSystemInfo
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetCPInfo
CompareStringW
LCMapStringW
SetCurrentDirectoryW
DeleteFileW
GetFullPathNameW
RemoveDirectoryW
MoveFileExW
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
GetLogicalProcessorInformation
GetModuleHandleA
CreateWaitableTimerA
OutputDebugStringW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
RtlUnwind
ExitProcess
GetStdHandle
GetFileType
GetModuleFileNameA
WriteConsoleW
SetConsoleCtrlHandler
WriteFile
GetACP
GetDriveTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
ReadConsoleW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
QueryDepthSList
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 310KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 199KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE