C:\ns_build\windows-vpn\win2\nswcc\Win32\Release\nswcc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-23_3cc976262c6a13d87cbb4aa4c0c8d858_magniber.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-07-23_3cc976262c6a13d87cbb4aa4c0c8d858_magniber.exe
Resource
win10v2004-20240709-en
General
-
Target
2024-07-23_3cc976262c6a13d87cbb4aa4c0c8d858_magniber
-
Size
5.7MB
-
MD5
3cc976262c6a13d87cbb4aa4c0c8d858
-
SHA1
4bd1d3dc98866aeecf2c5288b2327e4e099601f7
-
SHA256
f2c4cd188a316d854f83b1310a637218de6fbe931d43215a18f55ecc7a0a4ea1
-
SHA512
f0f49c992dedb0fc4fba50dfe9b1de1871a5c3a63912383611b174214c398fcdcc75dfe2bbb70147254d91ccf9b5012e1d81107f3c33e69400ed39ab8e188c3d
-
SSDEEP
98304:caF+f/g0GlqoYZGX+5dRl2cZI0V7zkJ+djJALokUebxVGqCaJq0mgYJga:XF+3g0IQHdPtjOLokUebxVGqQGYJl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-23_3cc976262c6a13d87cbb4aa4c0c8d858_magniber
Files
-
2024-07-23_3cc976262c6a13d87cbb4aa4c0c8d858_magniber.exe windows:6 windows x86 arch:x86
ee21118b8561c7350d80e584e479a7a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetSetOptionA
FindCloseUrlCache
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
InternetCanonicalizeUrlA
InternetCrackUrlA
FindNextUrlCacheEntryA
crypt32
CryptMsgOpenToDecode
CryptMsgClose
CryptMsgUpdate
CryptMsgGetParam
CertFindCertificateInStore
CertDeleteCertificateFromStore
CertCloseStore
CertGetNameStringA
CertEnumCertificatesInStore
CertOpenSystemStoreA
CryptSignMessage
CryptStringToBinaryA
CryptBinaryToStringA
CryptProtectData
CryptUnprotectData
CertGetNameStringW
CryptQueryObject
iphlpapi
GetAdaptersInfo
GetAdaptersAddresses
kernel32
ExitThread
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
CreateDirectoryW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
GetTimeZoneInformation
GetFileType
CreateFileW
DeleteFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
CompareStringEx
CreateSymbolicLinkW
GetFileInformationByHandleEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
FreeLibraryAndExitThread
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
GetTempPathW
SetFileInformationByHandle
LCMapStringEx
GetLocaleInfoEx
QueryPerformanceFrequency
GetStringTypeW
RaiseException
LCMapStringW
IsValidLocale
EnumSystemLocalesW
ReadConsoleW
FindFirstFileExW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleExW
HeapQueryInformation
SetStdHandle
ExitProcess
SetConsoleCtrlHandler
SetEnvironmentVariableW
GetStdHandle
CreateThreadpoolTimer
GetDateFormatW
FormatMessageA
GetProcessHeap
HeapFree
CloseHandle
GetLastError
MultiByteToWideChar
CreateFileA
ReadFile
FindFirstFileA
FileTimeToLocalFileTime
FindNextFileA
GetTimeFormatW
FindFirstFileW
WideCharToMultiByte
FindNextFileW
SizeofResource
LockResource
LoadResource
FindResourceW
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
LocalFree
CopyFileA
HeapAlloc
GetCurrentProcess
Sleep
ResumeThread
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetSystemTime
GetLocalTime
MoveFileW
VerSetConditionMask
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LocalUnlock
LocalLock
GetTickCount
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
SearchPathA
GetProfileIntA
FindResourceExW
lstrcpyA
GetWindowsDirectoryA
SystemTimeToTzSpecificLocalTime
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
SetErrorMode
GetCPInfo
GetOEMCP
VirtualProtect
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
GetACP
GlobalFlags
GetUserDefaultUILanguage
ExpandEnvironmentStringsA
SetFilePointer
GetTempPathA
FindClose
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryA
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
GetAtomNameA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
EncodePointer
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileIntA
SuspendThread
SetThreadPriority
CreateEventA
SetEvent
CompareStringA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetCurrentThread
OutputDebugStringA
SetLastError
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetSystemDirectoryW
Process32NextW
ProcessIdToSessionId
Process32FirstW
CreateToolhelp32Snapshot
IsWow64Process
VerifyVersionInfoA
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStructA
GetPrivateProfileStructA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetPrivateProfileStringA
TerminateProcess
GetFileSize
WaitNamedPipeA
WriteFile
GetUserDefaultLCID
GetLocaleInfoA
WTSGetActiveConsoleSessionId
VerifyVersionInfoW
CreateNamedPipeA
FindResourceA
QueryFullProcessImageNameW
OpenMutexA
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetSystemWow64DirectoryA
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
GetNativeSystemInfo
GetVersionExA
GetTickCount64
OpenProcess
CreateProcessW
CreateProcessA
CreateThread
WaitForSingleObject
ConnectNamedPipe
OutputDebugStringW
CompareStringW
user32
UpdateLayeredWindow
LockWindowUpdate
GetDCEx
FrameRect
CopyIcon
SetCursorPos
LoadMenuW
IsZoomed
DrawFrameControl
DrawEdge
SetWindowRgn
SetClassLongA
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
DrawFocusRect
PostThreadMessageA
SetParent
GetSystemMenu
UnionRect
MapVirtualKeyA
GetKeyNameTextA
LoadImageW
TrackMouseEvent
GetMenuDefaultItem
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
LoadImageA
InsertMenuItemA
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetAsyncKeyState
GetMenuItemInfoA
DestroyMenu
InflateRect
CharUpperA
DestroyIcon
GetDialogBaseUnits
GetTabbedTextExtentW
GetTabbedTextExtentA
DestroyCursor
GetWindowRgn
PostMessageA
SetRectEmpty
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableA
OffsetRect
CharNextA
InvalidateRect
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
SystemParametersInfoA
CopyImage
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
LoadCursorA
GetSysColorBrush
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetTopWindow
GetClassLongA
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
SendNotifyMessageA
MonitorFromRect
InSendMessage
CreateMenu
WindowFromDC
MonitorFromPoint
GetSysColor
FillRect
GetMessagePos
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
SetFocus
CreateWindowExA
IsMenu
IsChild
FindWindowA
MessageBoxA
EnumWindows
IsWindowVisible
GetWindowTextA
GetWindowThreadProcessId
IsIconic
SendMessageA
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconW
EnableWindow
UnregisterClassA
GetDlgCtrlID
GetKeyState
SetWindowTextW
MessageBoxW
EnumChildWindows
GetClassNameA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
PostQuitMessage
SetWindowPos
SetWindowContextHelpId
GetParent
GetWindow
MapDialogRect
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
GetWindowPlacement
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetDesktopWindow
RegisterWindowMessageA
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
ValidateRect
GetCursorPos
ShowOwnedPopups
SetCursor
GetLastActivePopup
DrawTextA
DrawTextExA
GrayStringA
SetWindowPlacement
BeginDeferWindowPos
TabbedTextOutA
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
DeferWindowPos
SetWindowLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
gdi32
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CreateFontIndirectA
GetTextExtentPoint32A
GetTextMetricsA
CombineRgn
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateCompatibleBitmap
EnumFontFamiliesExA
CreateFontA
GetCharWidthA
StretchDIBits
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateCompatibleDC
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
CreateDIBPatternBrushPt
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
BitBlt
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
LineTo
CreateDIBitmap
GetObjectA
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterA
DocumentPropertiesA
GetJobA
ClosePrinter
advapi32
RegDeleteValueW
CopySid
OpenProcessToken
GetTokenInformation
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegOpenKeyExA
RegCloseKey
RegSetKeySecurity
RegQueryInfoKeyA
RegEnumKeyA
RegEnumKeyExA
CreateProcessAsUserA
AdjustTokenPrivileges
DuplicateTokenEx
ImpersonateLoggedOnUser
GetFileSecurityA
SetFileSecurityA
RegEnumValueA
RegQueryValueA
RegDeleteKeyA
RegSetValueA
RegEnumKeyExW
RegCreateKeyExA
RegCreateKeyExW
RegSaveKeyA
RegOpenKeyA
RegDeleteKeyExA
RegDeleteValueA
GetLengthSid
RegSetValueExA
RegSetValueExW
RegOpenCurrentUser
RegQueryValueExW
RegOpenKeyExW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
ConvertStringSidToSidA
RegQueryValueExA
LookupPrivilegeValueA
SetTokenInformation
RevertToSelf
shell32
ShellExecuteExA
ShellExecuteW
SHGetSpecialFolderPathW
SHGetKnownFolderPath
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
DragQueryFileA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragFinish
SHGetFolderPathA
shlwapi
PathRemoveExtensionA
PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
PathIsUNCA
PathFindFileNameA
uxtheme
DrawThemeBackground
GetThemeSysColor
GetWindowTheme
GetThemePartSize
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
ole32
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetIconOfClass
OleIsRunning
CoGetMalloc
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
OleQueryLinkFromData
WriteClassStm
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
OleQueryCreateFromData
OleCreateMenuDescriptor
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoInitializeEx
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleRun
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemAlloc
StringFromCLSID
IIDFromString
CoTaskMemFree
CoSetProxyBlanket
CoUninitialize
CoInitialize
CoCreateInstance
GetRunningObjectTable
OleDestroyMenuDescriptor
GetHGlobalFromILockBytes
PropVariantCopy
oleaut32
SysAllocStringByteLen
VariantChangeType
VariantCopy
VarBstrCmp
LoadRegTypeLi
DispCallFunc
LoadTypeLi
RegisterTypeLi
SysStringLen
SysReAllocStringLen
CreateErrorInfo
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
GetErrorInfo
SetErrorInfo
SafeArrayRedim
oledlg
ord8
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsA
WTSQuerySessionInformationA
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
LoadUserProfileA
ws2_32
inet_pton
ntohl
InetNtopW
rpcrt4
RpcStringFreeA
UuidToStringA
UuidCreate
wintrust
WinVerifyTrust
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
gdiplus
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdiplusStartup
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdiplusShutdown
GdipFree
GdipAlloc
GdipCreateBitmapFromFileICM
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ