?AddWeave@CNameLabelMakerDlg@@IAEXPAEHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-25_fc78aec5ac408ca42ef41fbe210786d3_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-25_fc78aec5ac408ca42ef41fbe210786d3_magniber.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-25_fc78aec5ac408ca42ef41fbe210786d3_magniber
-
Size
4.0MB
-
MD5
fc78aec5ac408ca42ef41fbe210786d3
-
SHA1
1732605b84fba63a443669b6185977ae0864b51b
-
SHA256
76988eb0c712274fd2a297e30b52046ff524f38e4bcbf665fbc81f54873c2c66
-
SHA512
51502b31bfec39dcdaa36a53690e14dc36260946860e0c79957fe629392ebe4f5e2a39892f41b5d56bc610d2acb2834a15e49fb11412ff2c55a7bb3e487f8a9d
-
SSDEEP
49152:dkwju4omIWrUQdlcVhTdwifi4Fy+lGwRWkdeqcIjKpTwpJJ3k+tTdwpvTLhPQgN3:JuuEhTGiqT+EeddcI2p+J3zTONd1o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-25_fc78aec5ac408ca42ef41fbe210786d3_magniber
Files
-
2024-06-25_fc78aec5ac408ca42ef41fbe210786d3_magniber.exe windows:6 windows x86 arch:x86
655d19b517260709bf7e2e399176dc6d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
IsBadReadPtr
QueryPerformanceCounter
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
GetSystemTime
FileTimeToSystemTime
GetTimeZoneInformation
GetProcAddress
CloseHandle
GetLastError
WaitForSingleObject
OpenProcess
GetStdHandle
GetConsoleMode
Sleep
GetWindowsDirectoryA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateDirectoryA
CreateFileA
RemoveDirectoryA
FlushFileBuffers
GetFileSizeEx
SetEndOfFile
WriteFile
GetDriveTypeA
GetSystemDirectoryA
GetSystemInfo
SetLastError
GetModuleHandleA
LocalFree
MapViewOfFileEx
CreateFileMappingA
ReleaseSemaphore
CreateSemaphoreA
UnmapViewOfFile
ReleaseMutex
CreateMutexA
FindNextFileA
FindFirstFileA
SwitchToThread
GetProcessTimes
SetEnvironmentVariableA
GetCurrentProcess
GetModuleFileNameA
VirtualQuery
SetPriorityClass
TlsFree
SetThreadPriority
GetCurrentThread
TerminateProcess
GetProcessHeap
HeapFree
HeapAlloc
GetCurrentDirectoryA
SetConsoleCtrlHandler
OpenEventA
SetEvent
GetACP
SystemTimeToFileTime
GetTempPathA
GetLocalTime
GetDiskFreeSpaceA
GetUserDefaultUILanguage
GetExitCodeThread
GetCurrentThreadId
DuplicateHandle
GetTickCount
GetVersionExA
GetVersion
CreateFileW
GetCurrentProcessId
FormatMessageA
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
EncodePointer
DecodePointer
GetStringTypeW
RaiseException
RtlUnwind
GetFileType
GetStartupInfoW
ExitProcess
GetModuleHandleExW
GetSystemTimeAsFileTime
GetCPInfo
LoadLibraryExW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
IsValidCodePage
GetOEMCP
GetModuleFileNameW
HeapReAlloc
GetConsoleCP
FindClose
user32
GetSystemMenu
AppendMenuA
MessageBoxA
LoadStringA
CharLowerBuffA
DrawMenuBar
GetSystemMetrics
CharUpperBuffA
advapi32
ReadEventLogA
OpenEventLogA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CloseEventLog
ws2_32
WSACleanup
Exports
Exports
Sections
__wibu00 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
__wibu01 Size: 528KB - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
__wibu02 Size: 31KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
__wibu03 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
__wibu04 Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
__wibu05 Size: 778KB - Virtual size: 780KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
__wibu06 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
__wibu07 Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
__wibu08 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE