2024-07-25_99800a0a08a4c26b8de48f9db3e69b87_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-25_99800a0a08a4c26b8de48f9db3e69b87_magniber
Size

61.5MB
MD5

99800a0a08a4c26b8de48f9db3e69b87
SHA1

d25c458226f23b96ba7af7db42f1b4891cba28ea
SHA256

fef0e138872c1f1c3c975f0588efedbcd0e18f0881102574bb51980d140c6614
SHA512

a72c78d0c3810164791e22b12117664262978dda4b1e33e0bf9e4a678e53b15094918d41fd5bebdc54a180b4f03b5621152424d5d4f480e689867dec9af57dec
SSDEEP

196608:3UeIzB72G2VZJTBYzZ5MqyzyyowBa5SO7v/JBSoLDUI2yl7yut1:uqyWBaLDJ0FI2ycu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-25_99800a0a08a4c26b8de48f9db3e69b87_magniber

Files

2024-07-25_99800a0a08a4c26b8de48f9db3e69b87_magniber
.exe windows:6 windows x86 arch:x86

0fa57cbea850288c0a4dda07492cd098

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\OpenRCT2\OpenRCT2\bin\openrct2-win.pdb

Imports

kernel32

GetSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
QueryPerformanceFrequency
FormatMessageW
lstrcmpiW
GetLastError
LCMapStringEx
MultiByteToWideChar
QueryPerformanceCounter
ReadDirectoryChangesW
CancelIoEx
FindClose
FindNextFileW
SetConsoleMode
CopyFileW
FindFirstFileW
ReadConsoleInputW
SetConsoleTitleW
GetConsoleTitleW
ScrollConsoleScreenBufferW
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
SetConsoleCursorInfo
GetConsoleCursorInfo
WriteConsoleInputW
WriteConsoleW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetLogicalDrives
GetEnvironmentVariableW
GetDateFormatEx
GetTimeFormatEx
GetModuleHandleW
GetProcAddress
GetStdHandle
GetConsoleMode
HeapFree
GetProcessHeap
lstrcmpW
HeapAlloc
GetCurrentProcess
GetLocaleInfoEx
GetFileAttributesExW
CloseHandle
GetFileTime
CreateFileW
GetModuleFileNameW
FileTimeToSystemTime
HeapSize
SetEndOfFile
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetTimeZoneInformation
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
WideCharToMultiByte
SetConsoleOutputCP
SetConsoleCP
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCommandLineW
GetCommandLineA
SetConsoleCtrlHandler
ReadConsoleW
GetConsoleOutputCP
FreeLibraryAndExitThread
ExitThread
TlsFree
SetLastError
InterlockedPushEntrySList
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
InitializeSListHead
GetCPInfo
GetStringTypeW
InitializeCriticalSectionEx
DecodePointer
EncodePointer
AcquireSRWLockShared
ReleaseSRWLockShared
GetNativeSystemInfo
GetExitCodeThread
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
FindFirstFileExW
InitOnceComplete
InitOnceBeginInitialize
IsProcessorFeaturePresent
lstrlenW
ReadFile
WriteFile
PeekNamedPipe
WaitNamedPipeW
GetCurrentProcessId
GetFileType
FreeLibrary
LoadLibraryW
CreateFileA
GetFileSizeEx
HeapReAlloc
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
LoadLibraryA
OutputDebugStringW
SetFilePointer
SetFilePointerEx
SetErrorMode
GetTickCount
EnumResourceNamesW
MulDiv
SetThreadExecutionState
ExitProcess
TerminateProcess
GlobalMemoryStatusEx
GetSystemInfo
CreateDirectoryW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreW
GetEnvironmentVariableA
SetEnvironmentVariableA
IsDebuggerPresent
RaiseException
CreateThread
GetCurrentThread
SetThreadPriority
Sleep
VerSetConditionMask
DeviceIoControl
GetOverlappedResult
CancelIo
ResetEvent
WaitForSingleObject
CreateEventW
LocalFree
VerifyVersionInfoW
TlsAlloc
TlsGetValue
TlsSetValue
LoadLibraryExW
GlobalAlloc
GlobalUnlock
GlobalLock
CompareStringA
GetModuleHandleExW
GetSystemPowerStatus
GetLocaleInfoA
MoveFileExW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
RtlCaptureContext
SetUnhandledExceptionFilter
InitializeCriticalSection
GetProcessId
VirtualQueryEx
SetNamedPipeHandleState
TransactNamedPipe
SetEvent
WaitForMultipleObjects
FormatMessageA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
VirtualQuery

user32

GetDlgItem
EndDialog
DialogBoxIndirectParamW
SetWindowRgn
MonitorFromWindow
SystemParametersInfoA
CreateIconFromResource
UnhookWindowsHookEx
SetWindowsHookExW
GetWindowThreadProcessId
GetParent
GetDesktopWindow
PtInRect
IntersectRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RemovePropW
SetPropW
SetForegroundWindow
SetActiveWindow
GetFocus
SetFocus
FlashWindowEx
SetLayeredWindowAttributes
ShowWindow
CreateWindowExW
GetRawInputDeviceInfoA
GetRawInputDeviceList
SendMessageW
LoadIconW
MessageBoxW
GetMessageW
PostThreadMessageW
DrawTextW
SetWindowLongW
MonitorFromRect
RegisterClassW
AttachThreadInput
RegisterRawInputDevices
SystemParametersInfoW
CreateIconIndirect
CopyImage
LoadCursorW
SetCursorPos
ReleaseCapture
SetCapture
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
EnumDisplayDevicesW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
MessageBoxA
TrackMouseEvent
TranslateMessage
DispatchMessageW
PeekMessageW
GetMessageExtraInfo
PostMessageW
DefWindowProcW
CallWindowProcW
UnregisterClassW
RegisterClassExW
GetClassInfoExW
SetWindowPos
IsIconic
GetKeyState
GetAsyncKeyState
MsgWaitForMultipleObjects
SetTimer
KillTimer
GetSystemMetrics
GetMenu
GetForegroundWindow
GetDC
GetUpdateRect
InvalidateRect
ValidateRect
GetPropW
GetClientRect
GetWindowRect
AdjustWindowRectEx
SetCursor
GetCursorPos
GetClipCursor
ClientToScreen
ScreenToClient
ClipCursor
FillRect
GetWindowLongW
CallNextHookEx
DestroyIcon
GetRawInputData
RegisterWindowMessageA
GetDoubleClickTime
RegisterDeviceNotificationW
UnregisterDeviceNotification
UnregisterClassA
RegisterClassExA
CreateWindowExA
DestroyWindow
OpenClipboard
CloseClipboard
GetClipboardSequenceNumber
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetKeyboardLayout
GetKeyboardState
ToUnicode
MapVirtualKeyW
ReleaseDC

advapi32

GetTokenInformation
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyExW
RegOpenKeyExW
GetSecurityInfo
RegQueryValueExW
RegSetValueExW
OpenProcessToken
GetUserNameW
RegDeleteTreeW
RegCreateKeyW
RegSetValueW
RegCloseKey
RegOpenKeyW
CryptGenRandom

shell32

SHGetKnownFolderPath
SHChangeNotify
ShellExecuteW
SHCreateItemFromParsingName
SHGetFolderPathW
DragFinish
DragQueryFileW
ord190
ord155
DragAcceptFiles
SHOpenFolderAndSelectItems

ole32

CoInitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
PropVariantClear
CoTaskMemFree
CoUninitialize

wininet

HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetSetOptionW
HttpQueryInfoW
InternetCrackUrlW
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetQueryDataAvailable

imm32

ImmSetCompositionWindow
ImmNotifyIME
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmGetIMEFileNameA
ImmSetCandidateWindow

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveInGetNumDevs
waveInGetDevCapsW
waveInOpen
waveInClose
waveInPrepareHeader
waveOutOpen
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInReset
timeBeginPeriod
timeEndPeriod
waveOutGetNumDevs
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutClose

crypt32

CryptStringToBinaryA
CryptBinaryToStringA

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
CM_Get_Device_IDA
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiEnumDeviceInfo

bcrypt

BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptCloseAlgorithmProvider
BCryptGenerateKeyPair
BCryptFinalizeKeyPair
BCryptImportKeyPair
BCryptCreateHash
BCryptGetProperty
BCryptDestroyHash
BCryptHashData
BCryptFinishHash
BCryptVerifySignature
BCryptSignHash
BCryptExportKey

winhttp

WinHttpConnect
WinHttpOpenRequest
WinHttpCrackUrl
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpQueryHeaders

ws2_32

WSAStartup
setsockopt
getsockopt
WSAIoctl
WSACleanup
getnameinfo
ntohs
htons
recvfrom
sendto
inet_ntop
recv
send
shutdown
select
connect
closesocket
bind
listen
ioctlsocket
accept
WSAGetLastError
socket
freeaddrinfo
getaddrinfo

gdi32

DescribePixelFormat
DeleteObject
CreateCompatibleDC
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleBitmap
CreateDCW
GetDeviceCaps
GetDIBits
CreateBitmap
GetICMProfileW
GetDeviceGammaRamp
SetDeviceGammaRamp
CombineRgn
CreateRectRgn
CreateFontIndirectW
GetTextExtentPoint32A
GetTextMetricsW
ChoosePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers
BitBlt
CreateSolidBrush

oleaut32

SysFreeString

Sections

.text
Size: 10.2MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47.6MB - Virtual size: 62.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fa57cbea850288c0a4dda07492cd098

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shell32

ole32

wininet

imm32

version

winmm

crypt32

setupapi

bcrypt

winhttp

ws2_32

gdi32

oleaut32

Sections

.text Size: 10.2MB - Virtual size: 10.2MB

.rdata Size: 3.3MB - Virtual size: 3.3MB

.data Size: 47.6MB - Virtual size: 62.4MB

.rsrc Size: 77KB - Virtual size: 77KB

.reloc Size: 408KB - Virtual size: 408KB

.text
Size: 10.2MB - Virtual size: 10.2MB

.rdata
Size: 3.3MB - Virtual size: 3.3MB

.data
Size: 47.6MB - Virtual size: 62.4MB

.rsrc
Size: 77KB - Virtual size: 77KB

.reloc
Size: 408KB - Virtual size: 408KB