2024-07-01_f87c622e6787372656bef6ba2275cb60_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-01_f87c622e6787372656bef6ba2275cb60_magniber
Size

2.5MB
MD5

f87c622e6787372656bef6ba2275cb60
SHA1

26261da39806327f41c18abea72ce96fee0643d9
SHA256

87f99ab3dc34dcf9f77d5078fa150899b8659460986776c83c9efee9db8293bb
SHA512

cfff414f1586b2b8fbb764bfd0e90a4182e8a28b3edfe2c9336df7ac91c1985a74cbd3d00a6fad8c84d47507471c75507ba0d03a8e468259fec95dddb3813c1c
SSDEEP

49152:85AJEsAG7g44UJ+URqw7E9lVnU6WqUPiKRj41J03abB:82Esd7g++Uk/nU8UPiKFU

Score

1^/10

Malware Config

Signatures

Files

2024-07-01_f87c622e6787372656bef6ba2275cb60_magniber
.exe windows:5 windows x86 arch:x86

5db0891521a2ea6174c8d5fea6bb4cb8

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:7d:bd:10:a3:a2:b8:7a:48:11:b1:1b:44:e5:0a:09
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

15/02/2023, 00:00

Not After

10/05/2024, 23:59

Subject

CN=沧州句号网络科技有限公司,O=沧州句号网络科技有限公司,L=沧州市,ST=河北省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:7d:bd:10:a3:a2:b8:7a:48:11:b1:1b:44:e5:0a:09
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

15/02/2023, 00:00

Not After

10/05/2024, 23:59

Subject

CN=沧州句号网络科技有限公司,O=沧州句号网络科技有限公司,L=沧州市,ST=河北省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:6f:64:53:eb:c8:1e:4d:42:47:19:4e:6c:f2:8d:49:63:e5:23:f2:1d:21:a7:cc:24:4b:f7:a4:bd:17:0b:db
Signer

Actual PE Digest

55:6f:64:53:eb:c8:1e:4d:42:47:19:4e:6c:f2:8d:49:63:e5:23:f2:1d:21:a7:cc:24:4b:f7:a4:bd:17:0b:db

Digest Algorithm

sha256

PE Digest Matches

true

7b:3d:51:c1:57:79:c6:68:bc:a5:69:c1:e1:08:dd:3f:f9:c4:d0:88
Signer

Actual PE Digest

7b:3d:51:c1:57:79:c6:68:bc:a5:69:c1:e1:08:dd:3f:f9:c4:d0:88

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\hudson\jobs\GreenZip_1.0.11.230410\workspace\GreenZip\Software\GreenZip\Bin\Release\GUI.pdb

Imports

comctl32

ord17
_TrackMouseEvent
InitCommonControlsEx

kernel32

IsProcessorFeaturePresent
AreFileApisANSI
LockResource
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
FindResourceW
FindResourceExW
GetSystemDefaultLangID
GetUserDefaultLangID
ReleaseMutex
WaitForMultipleObjects
Sleep
CreateMutexW
SetPriorityClass
lstrcatW
FreeResource
ExitProcess
SetUnhandledExceptionFilter
GetCommandLineW
DecodePointer
ExpandEnvironmentStringsA
LoadLibraryA
GetACP
GlobalLock
GlobalUnlock
MulDiv
SystemTimeToFileTime
LocalFileTimeToFileTime
VerSetConditionMask
OpenProcess
VerifyVersionInfoW
GlobalAlloc
GetLocalTime
lstrcmpiW
lstrcpynW
InterlockedIncrement
InterlockedDecrement
lstrcpyW
GetProcAddress
VirtualAlloc
VirtualFree
GetModuleHandleW
WriteConsoleW
GetConsoleCP
FlushFileBuffers
LeaveCriticalSection
OutputDebugStringA
SetConsoleCtrlHandler
OpenEventW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStringTypeW
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
GetModuleFileNameA
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
LoadLibraryExA
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
OutputDebugStringW
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
MapViewOfFile
DeleteCriticalSection
EnterCriticalSection
GetProcessTimes
SetStdHandle
GetVersionExW
GetLastError
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CloseHandle
SetProcessAffinityMask
GetStdHandle
DosDateTimeToFileTime
FileTimeToDosDateTime
GetSystemTimeAsFileTime
GetSystemInfo
GetProcessAffinityMask
GlobalMemoryStatus
lstrlenW
FileTimeToSystemTime
FileTimeToLocalFileTime
CompareFileTime
GetCurrentProcess
GetVolumeInformationW
GetDiskFreeSpaceW
GetDriveTypeW
GetFileInformationByHandle
SetFilePointer
SetEndOfFile
OpenFileMappingW
DeviceIoControl
ReadFile
WriteFile
GetFileSize
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextFileW
FindFirstFileW
GetFileAttributesW
GetModuleHandleA
GetLogicalDriveStringsW
FindClose
MoveFileW
DeleteFileW
SetFileAttributesW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
GetCurrentDirectoryW
CreateEventW
SetCurrentDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetSystemDirectoryW
GetTickCount
SetFileTime
SetLastError
GetCurrentThreadId
GetCurrentProcessId
FormatMessageW
LocalFree
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
CreateSemaphoreW
SetEnvironmentVariableW

user32

GetCaretPos
SetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
CreateCaret
TrackPopupMenu
AppendMenuW
EnableMenuItem
DestroyMenu
CreatePopupMenu
SetRect
FillRect
DrawTextW
CharPrevW
MonitorFromPoint
GetWindowRgn
UpdateLayeredWindow
GetIconInfo
DrawIconEx
DestroyIcon
PrivateExtractIconsW
AdjustWindowRectEx
GetPropW
SetPropW
GetMenu
GetSystemMetrics
RegisterClassW
LoadImageW
PtInRect
IsRectEmpty
IntersectRect
GetSysColor
GetCursorPos
GetUpdateRect
EndPaint
UpdateWindow
EqualRect
DrawTextA
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
SetForegroundWindow
GetKeyboardLayout
CharUpperW
SendMessageW
CallWindowProcW
IsWindow
GetWindowDC
ReleaseDC
GetWindowRect
GetWindowLongW
GetKeyNameTextW
ShowWindow
MoveWindow
CreateDialogParamW
DialogBoxParamW
GetDlgItem
BeginPaint
GetDC
ReleaseCapture
SetCapture
GetActiveWindow
CharNextW
IsWindowVisible
DestroyWindow
MapVirtualKeyExW
GetDialogBaseUnits
ScreenToClient
MapDialogRect
SystemParametersInfoW
CreateWindowExW
LoadStringW
GetWindowTextW
GetWindowTextLengthW
MessageBoxW
wsprintfW
PostMessageW
EndDialog
SetDlgItemTextW
SetFocus
GetFocus
GetKeyState
EnableWindow
InvalidateRect
SetWindowTextW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowEnabled
DefWindowProcW
PostQuitMessage
UnregisterClassW
RegisterClassExW
GetClassInfoExW
IsChild
SetWindowPos
IsIconic
IsZoomed
SetWindowRgn
GetClientRect
MapWindowPoints
CopyRect
OffsetRect
GetParent
GetWindow
LoadCursorW
MonitorFromWindow
GetMonitorInfoW
CheckDlgButton
IsDlgButtonChecked
SetTimer
KillTimer
SetCursor
ClientToScreen
SetWindowLongW
wsprintfA
UnionRect
InflateRect
LoadIconW

gdi32

CreateSolidBrush
PlayEnhMetaFile
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreatePatternBrush
SetTextColor
CreateRectRgn
PtInRegion
CreateDIBSection
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateRoundRectRgn
DeleteObject
GetTextExtentPoint32W
LineTo
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
GetObjectA
MoveToEx
TextOutW
GdiFlush
GetTextExtentPointA
GetBitmapBits
SetBitmapBits
PatBlt
SelectObject
GetClipBox
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreatePen
DeleteDC
GetDeviceCaps
GetStockObject
AddFontMemResourceEx
RemoveFontMemResourceEx
Rectangle
RestoreDC
SaveDC
CloseEnhMetaFile
CreateEnhMetaFileW
SetBkMode
GetCharABCWidthsW
GetEnhMetaFileHeader

comdlg32

GetSaveFileNameW
CommDlgExtendedError

advapi32

RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExA
RegQueryValueExA
GetFileSecurityW
SetFileSecurityW
RegSetValueExW
RegQueryValueExW
OpenProcessToken
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

shell32

SHGetFileInfoW
DragFinish
SHGetMalloc
SHGetSpecialFolderLocation
DragQueryFileW
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
ReleaseStgMedium
OleDuplicateData
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysAllocStringLen
VariantClear
VariantCopy
SysStringLen
SysFreeString
VariantInit
GetErrorInfo
VariantChangeType
SetErrorInfo
SysStringByteLen
CreateErrorInfo

gdiplus

GdipRotateWorldTransform
GdipSetSmoothingMode
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipDrawRectangleI
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
ord1
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

shlwapi

PathRemoveBackslashW
PathIsDirectoryW

dbghelp

MiniDumpWriteDump

ws2_32

WSAStartup
gethostname
gethostbyname

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 937KB - Virtual size: 937KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5db0891521a2ea6174c8d5fea6bb4cb8

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

03:7d:bd:10:a3:a2:b8:7a:48:11:b1:1b:44:e5:0a:09Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:7d:bd:10:a3:a2:b8:7a:48:11:b1:1b:44:e5:0a:09Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

55:6f:64:53:eb:c8:1e:4d:42:47:19:4e:6c:f2:8d:49:63:e5:23:f2:1d:21:a7:cc:24:4b:f7:a4:bd:17:0b:dbSigner

7b:3d:51:c1:57:79:c6:68:bc:a5:69:c1:e1:08:dd:3f:f9:c4:d0:88Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

gdiplus

imm32

shlwapi

dbghelp

ws2_32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 266KB - Virtual size: 266KB

.data Size: 14KB - Virtual size: 29KB

.rsrc Size: 937KB - Virtual size: 937KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

03:7d:bd:10:a3:a2:b8:7a:48:11:b1:1b:44:e5:0a:09
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:7d:bd:10:a3:a2:b8:7a:48:11:b1:1b:44:e5:0a:09
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

55:6f:64:53:eb:c8:1e:4d:42:47:19:4e:6c:f2:8d:49:63:e5:23:f2:1d:21:a7:cc:24:4b:f7:a4:bd:17:0b:db
Signer

7b:3d:51:c1:57:79:c6:68:bc:a5:69:c1:e1:08:dd:3f:f9:c4:d0:88
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 266KB - Virtual size: 266KB

.data
Size: 14KB - Virtual size: 29KB

.rsrc
Size: 937KB - Virtual size: 937KB