2024-06-20_3bb18a81a8538223f3b146a322f3236b_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-20_3bb18a81a8538223f3b146a322f3236b_magniber
Size

4.5MB
MD5

3bb18a81a8538223f3b146a322f3236b
SHA1

f2bea64a18417fe23c9be9c0bd72d9054963b105
SHA256

940fce996a3696251a6ddc450e2f4602ee942a99b798c88c38b9dd3652cd1cbd
SHA512

db789a3f00cb4e0bc5b48426b9e5002ac10208f72a4c202338c03b1cf84cb5f974f3c4d42abdaa9fe72993bbe348bcbe625c5d66318e7b994291c583e43ae1f5
SSDEEP

98304:iBqqerzde+3FTmC1+pyxK5T44RxJvwArqNsmpM:dLFiA4Rj2ArqNp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-20_3bb18a81a8538223f3b146a322f3236b_magniber

Files

2024-06-20_3bb18a81a8538223f3b146a322f3236b_magniber
.exe windows:5 windows x86 arch:x86

83e3624f06bad326ecb193ab58ea6550

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGraphicsClear
GdiplusShutdown
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipDrawImageI
GdipCreateBitmapFromGraphics
GdipDrawDriverString
GdipSetPenDashArray
GdipSaveImageToStream
GdipCreateBitmapFromHICON
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSetPenDashStyle
GdipSetPenMiterLimit
GdipSetPenLineJoin
GdipSetPenStartCap
GdipSetPenEndCap
GdipCreatePen2
GdipGetFontStyle
GdipAddPathString
GdipDrawString
GdipGetCellDescent
GdipMeasureString
GdipGetFontSize
GdipDeleteFont
GdipGetCellAscent
GdipCreateFontFromDC
GdipGetLineSpacing
GdipGetEmHeight
GdipCreateFontFromLogfontA
GdipGetFamily
GdipDeleteFontFamily
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFillRectangleI
GdipCreatePath
GdipDeletePath
GdipAddPathArcI
GdipAddPathLineI
GdipFillPath
GdipGetClipBoundsI
GdipCreateLineBrush
GdipMultiplyLineTransform
GdipCreateMatrix2
GdipSetLinePresetBlend
GdipSetLineWrapMode
GdipAddPathEllipse
GdipCreatePathGradientFromPath
GdipSetPathGradientPresetBlend
GdipSetPathGradientWrapMode
GdipSetPathGradientCenterPoint
GdipSetPathGradientTransform
GdipCreatePen1
GdipDeletePen
GdipDrawPath
GdipFillRectanglesI
GdipDrawLine
GdipSetClipRectI
GdipTranslateWorldTransform
GdipGetSmoothingMode
GdipSaveGraphics
GdipRestoreGraphics
GdipBeginContainer2
GdipGetImageGraphicsContext
GdiplusStartup
GdipGetPathWorldBounds
GdipClonePath
GdipSetClipRect
GdipAddPathRectangleI
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipSetSmoothingMode
GdipEndContainer
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRect
GdipTransformPoints
GdipMultiplyWorldTransform
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipScaleMatrix
GdipShearMatrix
GdipCreateTexture
GdipFillEllipse
GdipDrawEllipse
GdipFillPie
GdipDrawPie
GdipFillRectangle
GdipDrawRectangle
GdipResetPath
GdipIsVisiblePathPoint
GdipStartPathFigure
GdipAddPathLine
GdipClosePathFigure
GdipSetPathFillMode
ord1
GdipAddPathBezier
GdipSetPageUnit
GdipSetCompositingQuality
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipCreateFromHWND
GdipCreateFromHDC
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipGetFontHeightGivenDPI

psapi

GetProcessImageFileNameW

imagehlp

ImageEnumerateCertificates
ImageGetCertificateData

kernel32

CreateFileW
GetCurrentThreadId
QueryPerformanceCounter
LoadLibraryExW
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetProcAddress
WriteFile
SetFilePointerEx
SetEndOfFile
FormatMessageA
CreateFileA
UnmapViewOfFile
WaitForSingleObject
FindClose
lstrcmpW
ReadConsoleW
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetLastError
SwitchToThread
GetTickCount
Sleep
GetSystemTimeAsFileTime
GetModuleHandleW
OutputDebugStringW
GetVersionExW
FormatMessageW
LocalFree
LocalAlloc
SetEvent
GetCurrentProcess
DuplicateHandle
ReleaseSemaphore
WaitForSingleObjectEx
CloseHandle
CreateEventA
CreateSemaphoreA
ProcessIdToSessionId
GetCommandLineW
GetModuleFileNameW
OpenMutexW
CreateMutexW
GetLastError
GetCurrentProcessId
EnumSystemLocalesW
IsValidLocale
ReadFile
GetACP
HeapReAlloc
WriteConsoleW
GetFileType
GetStdHandle
GetModuleHandleExW
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
VirtualProtect
VirtualFree
VirtualAlloc
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
ExitProcess
FileTimeToLocalFileTime
WaitForMultipleObjects
AllocConsole
QueryDosDeviceW
CreateProcessW
LoadLibraryW
GetExitCodeProcess
TerminateProcess
OpenProcess
FreeLibrary
GetSystemInfo
InterlockedDecrement
InterlockedIncrement
HeapFree
MapViewOfFile
CreateFileMappingW
GetFileSize
FlushViewOfFile
SetFilePointer
GetSystemTime
GetLocalTime
GetTimeZoneInformation
GetThreadLocale
GetDateFormatW
VerifyVersionInfoW
GetComputerNameW
VerSetConditionMask
GetTimeFormatW
GetCurrencyFormatW
GetNumberFormatW
FileTimeToSystemTime
GetUserDefaultLCID
GetLogicalDriveStringsW
GetVolumeInformationW
GetTempFileNameA
GetTempPathA
CompareStringA
CreateThread
ExitThread
LoadLibraryA
GetModuleFileNameA
DeleteTimerQueueTimer
InitializeCriticalSection
EncodePointer
DecodePointer
RaiseException
GetStringTypeW
TryEnterCriticalSection
DeleteCriticalSection
QueryPerformanceFrequency
GetCurrentThread
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
RemoveDirectoryW
SetFileAttributesW
DeviceIoControl
GetWindowsDirectoryW
CreateDirectoryExW
CopyFileW
MoveFileExW
AreFileApisANSI
OpenEventA
WaitForMultipleObjectsEx
ResetEvent
SetWaitableTimer
ResumeThread
GetLogicalProcessorInformation
CreateWaitableTimerA
SystemTimeToFileTime
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GlobalUnlock
GlobalLock
GlobalSize
GlobalFree
GlobalAlloc
MulDiv
CreateTimerQueueTimer
InterlockedCompareExchange

user32

GetSystemMenu
MsgWaitForMultipleObjects
GetQueueStatus
PostThreadMessageW
DrawIconEx
SetActiveWindow
GetIconInfo
ReleaseCapture
SetCapture
BringWindowToTop
SetWindowPos
MoveWindow
ShowWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
EnumWindows
GetShellWindow
CreateIconIndirect
LoadCursorFromFileA
DestroyCursor
MessageBeep
LoadStringW
GetClipboardSequenceNumber
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetSystemMetrics
GetMenu
SendMessageTimeoutW
IsWindowVisible
GetWindowPlacement
DestroyIcon
GetClassNameW
GetWindowTextLengthW
LoadIconW
SetWindowLongW
GetWindowLongW
GetCursorPos
AdjustWindowRect
GetWindowRect
GetWindowTextW
SetWindowTextW
SetForegroundWindow
SwitchToThisWindow
GetMenuItemInfoW
EnableMenuItem
UpdateLayeredWindow
SetCursor
MapWindowPoints
UpdateWindow
SetFocus
GetFocus
EndPaint
BeginPaint
GetForegroundWindow
GetParent
IsWindow
SendMessageW
EnableWindow
ReleaseDC
GetDCEx
InvalidateRect
RegisterWindowMessageW
IsWindowUnicode
SystemParametersInfoW
GetDesktopWindow
KillTimer
GetClassLongW
GetClientRect
SetWindowsHookExW
EnumThreadWindows
EndDeferWindowPos
LoadCursorW
IsRectEmpty
GetMessageTime
UnhookWindowsHookEx
GetDoubleClickTime
ValidateRect
IsChild
PeekMessageW
ClientToScreen
GetMonitorInfoW
SetTimer
GetCapture
GetAsyncKeyState
BeginDeferWindowPos
SetClassLongW
GetActiveWindow
WindowFromPoint
GetScrollInfo
NotifyWinEvent
CallNextHookEx
ScreenToClient
MonitorFromWindow
GetDC
DestroyWindow
GetWindow
MonitorFromPoint
GetKeyState
AdjustWindowRectEx
DeferWindowPos
SetScrollInfo
RegisterClassW
RedrawWindow
EnumDisplayDevicesW
EnumDisplayMonitors
GetSysColor
DestroyCaret
GetKeyboardLayout
CreateCaret
SetCaretPos
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
CloseClipboard
CountClipboardFormats
EnumClipboardFormats
SetClipboardData
IsClipboardFormatAvailable
GetClipboardData
GetWindowThreadProcessId

gdi32

GetObjectA
CreateFontW
EnumFontFamiliesExW
GetFontUnicodeRanges
GetDIBits
CreateBitmap
GetStockObject
DeleteObject
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
SetLayout
GetClipBox
SaveDC
SetViewportOrgEx
RestoreDC
BitBlt
GetDeviceCaps
AddFontMemResourceEx
CreateDCW
StartDocW
SetMapMode
StartPage
EndPage
EndDoc
GetObjectW
GetGlyphIndicesW

advapi32

RegOpenKeyExW
SetSecurityDescriptorDacl
RegCloseKey
SystemFunction036
GetUserNameW
CryptAcquireContextW
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
GetSidSubAuthorityCount
DuplicateTokenEx
CryptAcquireContextA
CryptReleaseContext
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
InitializeSecurityDescriptor
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
CryptGenRandom

shell32

ord155
SHGetPathFromIDListW
SHGetFolderLocation
DragQueryFileW
ord74
SHBrowseForFolderW
ord727
SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteExW
ExtractIconW
CommandLineToArgvW

ole32

OleUninitialize
CoSetProxyBlanket
OleRun
CoCreateInstance
OleInitialize
CreateStreamOnHGlobal
ReleaseStgMedium
CoTaskMemAlloc
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoTaskMemFree
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoInitializeEx
CoCreateGuid

oleaut32

SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
VariantInit
SysFreeString

urlmon

FindMimeFromData

uxtheme

CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
SetWindowTheme
OpenThemeData

oleacc

AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmAssociateContextEx
ImmNotifyIME
ImmIsIME

comctl32

ImageList_Destroy
ImageList_DrawEx
ImageList_GetIconSize

winmm

PlaySoundW
timeBeginPeriod
timeEndPeriod
timeGetTime
timeSetEvent
timeKillEvent

ws2_32

freeaddrinfo
ioctlsocket
gethostbyname
WSACleanup
getaddrinfo
WSAStartup
inet_ntoa
accept
setsockopt
inet_addr
connect
select
recv
listen
closesocket
socket
htons
WSAGetLastError
bind
send
shutdown
__WSAFDIsSet

winspool.drv

EnumPrintersW

comdlg32

PrintDlgW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

wininet

InternetOpenA
InternetSetOptionW
HttpSendRequestA
InternetErrorDlg
InternetQueryOptionW
HttpQueryInfoA
InternetConnectA
HttpOpenRequestA
HttpQueryInfoW
InternetReadFile
InternetCloseHandle

usp10

ScriptFreeCache
ScriptApplyDigitSubstitution
ScriptItemize
ScriptBreak
ScriptShape
ScriptPlace

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 841KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.im_res
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83e3624f06bad326ecb193ab58ea6550

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

psapi

imagehlp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

urlmon

uxtheme

oleacc

imm32

comctl32

winmm

ws2_32

winspool.drv

comdlg32

wininet

usp10

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 841KB - Virtual size: 840KB

.data Size: 267KB - Virtual size: 292KB

.gfids Size: 4KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 21KB - Virtual size: 20KB

.im_res Size: 125KB - Virtual size: 124KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 841KB - Virtual size: 840KB

.data
Size: 267KB - Virtual size: 292KB

.gfids
Size: 4KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 21KB - Virtual size: 20KB

.im_res
Size: 125KB - Virtual size: 124KB