2024-07-04_2eff821641fb2b2331293d103070acde_magniber | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-04_2eff821641fb2b2331293d103070acde_magniber
Size

49.2MB
MD5

2eff821641fb2b2331293d103070acde
SHA1

ea459e45ca7aaa35b6bcf35c60e78dc8bc62ea2e
SHA256

4d86c3c93092e1b47ee850b496bcc82c2e31a2aabbe5cea155c16220a23a6230
SHA512

3ae73a3ba6c69f731f5c64032f1b6811578877e32d78cf7faea47edf5055a466f9637a1b96cd3c1bece61d71c4d1af0d762aaa8f9a5643a08eda329197a5df71
SSDEEP

393216:8pVpaWzp71n5Jn8lplzLA7Nc/8Fhq95z9pYmCL3Tl+r/BaVlBXgsNSf9J:8h3zp7T7NWShqrZML3mBaGH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-04_2eff821641fb2b2331293d103070acde_magniber

Files

2024-07-04_2eff821641fb2b2331293d103070acde_magniber
.exe windows:6 windows x86 arch:x86

ff66a4acdd0e04094ba9813691b7a441

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
IsWow64Process
OpenProcess
GetLastError
DuplicateHandle
GetCommandLineW
OpenFileMappingW
MapViewOfFile
SetEvent
UnmapViewOfFile
CloseHandle
GetCommandLineA
CreateFileW
CreateFileMappingW
GetFileSizeEx
VirtualAlloc
VirtualFree
LoadLibraryW
SetEnvironmentVariableW
ExitProcess
GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcpad
Size: - Virtual size: 1.3MB

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ