2024-08-05_6f05f93ef07feed0a4e2f9dcdd4664ce_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-05_6f05f93ef07feed0a4e2f9dcdd4664ce_magniber
Size

14.2MB
MD5

6f05f93ef07feed0a4e2f9dcdd4664ce
SHA1

3397d35c1136683e2b8230af9e2fcf04af3098d7
SHA256

af863aaf9b7c40b57acd0bd1bd9465e28767f70f4458c83a879a5b1f3529eb10
SHA512

93933a0c1cc936e2fb02c22ce45869811b1389e75f82833ba891e49f4625c75cdf18ce33f1598436e862a8815fc7046ebd5882f4d6ada93f0b160d4427b0e9ac
SSDEEP

393216:Vb6kYVFTV9SvuVrOET/oksxvMdm2LOUiXWxcW:Vbav9KuVr1qzHUiQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-05_6f05f93ef07feed0a4e2f9dcdd4664ce_magniber

Files

2024-08-05_6f05f93ef07feed0a4e2f9dcdd4664ce_magniber
.exe windows:5 windows x86 arch:x86

bb6ba2c9a88e05adf668b1cd098cf12e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\mra.mail.ru.v6_0\Installer\Release\magentsetup.pdb

Imports

shlwapi

PathIsUNCW
PathStripToRootW
PathRemoveExtensionW
PathFindExtensionW
PathRemoveFileSpecW
SHDeleteKeyW
SHStrDupW
PathIsRootW
PathIsRelativeW
PathIsDirectoryW
SHDeleteValueW
PathFindFileNameW

psapi

GetModuleFileNameExW
EnumProcesses
EnumProcessModules
GetModuleBaseNameW

ws2_32

WSAGetLastError
setsockopt
WSAEnumNetworkEvents
connect
WSAEventSelect
WSACreateEvent
getnameinfo
recv
send
select
socket
ioctlsocket
closesocket
inet_addr
gethostbyname
inet_ntoa
htons
htonl

msimg32

AlphaBlend

wininet

FindCloseUrlCache
InternetGetCookieExW
FindNextUrlCacheEntryA
DeleteUrlCacheEntryA
InternetQueryOptionW
FindFirstUrlCacheEntryA
InternetSetCookieExW

kernel32

lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FormatMessageW
GetModuleHandleA
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
SetThreadPriority
ResumeThread
SuspendThread
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GlobalGetAtomNameW
GetAtomNameW
GetThreadLocale
FileTimeToSystemTime
SystemTimeToFileTime
GetCurrentDirectoryW
MoveFileW
GetStringTypeExW
lstrcmpiW
FlushFileBuffers
GetVersionExA
UnlockFile
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
FileTimeToLocalFileTime
GetFileAttributesExW
LocalFileTimeToFileTime
SetFileTime
GetFileTime
SetErrorMode
GetStartupInfoW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
FindFirstFileA
FindNextFileA
GetConsoleCP
GetConsoleMode
HeapAlloc
ExitThread
CreateThread
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FatalAppExitA
LCMapStringW
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
SetLastError
FindFirstFileExW
GetProcessHeap
HeapFree
lstrlenA
ExitProcess
GetStringTypeW
TryEnterCriticalSection
WaitForMultipleObjects
GetTickCount
WritePrivateProfileStringW
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetShortPathNameW
CreatePipe
SetHandleInformation
GetExitCodeProcess
GetStdHandle
CreateProcessW
GetFileSizeEx
GetModuleHandleW
GetCurrentThread
InterlockedDecrement
GlobalSize
GlobalLock
GlobalUnlock
CompareStringW
MultiByteToWideChar
FindResourceExW
GetModuleFileNameW
CreateEventW
ResetEvent
GetSystemTimeAsFileTime
TerminateThread
SetEvent
RemoveDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentProcess
GetTempPathW
MoveFileExW
ExpandEnvironmentStringsW
GetSystemDirectoryW
GetWindowsDirectoryW
OpenFile
_lclose
_lwrite
CopyFileA
LoadLibraryW
GetProcAddress
GetEnvironmentVariableW
GetSystemDefaultLCID
GetUserDefaultLCID
CopyFileW
SetFileAttributesW
DeleteFileW
_lread
_llseek
WaitForSingleObject
GetCurrentProcessId
LoadLibraryExW
FreeLibrary
OpenProcess
TerminateProcess
GlobalAlloc
GlobalFree
GetLastError
LocalAlloc
LocalFree
GetFileSize
ReadFile
SetFilePointer
SetEndOfFile
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateDirectoryW
CreateFileW
WriteFile
FreeResource
lstrlenW
WideCharToMultiByte
GetCommandLineW
Sleep
GetVersionExW
CreateSemaphoreW
OpenSemaphoreW
GetFileAttributesW
MulDiv
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersion
GlobalMemoryStatus
FlushConsoleInputBuffer
GetDriveTypeA
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryA
SetCurrentDirectoryA
LockFile

user32

SetParent
GetDCEx
LockWindowUpdate
GetSystemMenu
WindowFromPoint
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
SetRectEmpty
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
DestroyIcon
DeleteMenu
UnregisterClassW
GetDialogBaseUnits
GetSysColorBrush
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
SetTimer
KillTimer
WaitMessage
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
ShowOwnedPopups
TranslateMessage
ValidateRect
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
ScrollWindowEx
MoveWindow
IsDialogMessageW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
GetMenuState
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetFocus
SetFocus
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetClassInfoW
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SystemParametersInfoA
GetWindow
GetClassLongW
SetClassLongW
EnumDisplayMonitors
ScreenToClient
SubtractRect
UnionRect
IntersectRect
RegisterClassW
GetSysColor
IsWindowEnabled
DrawTextW
SetCapture
GetUpdateRect
BeginPaint
EndPaint
CallWindowProcW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetClassInfoExW
RegisterClassExW
GetClassInfoExA
RegisterClassExA
GetWindowPlacement
GetForegroundWindow
SetWindowPlacement
CreateWindowExW
DefWindowProcW
IsZoomed
IsWindowVisible
SetActiveWindow
MonitorFromRect
MonitorFromWindow
GetMonitorInfoW
UpdateLayeredWindow
LoadIconW
GetMenu
AdjustWindowRectEx
InvalidateRect
GetWindowDC
SetWindowLongW
GetParent
GetCursorPos
FillRect
OffsetRect
PtInRect
GetShellWindow
EnumChildWindows
GetDlgCtrlID
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
EndDialog
SetDlgItemTextW
CreateDialogParamW
GetWindowLongW
DialogBoxParamW
DestroyWindow
SetPropW
GetPropW
SetForegroundWindow
RemovePropW
GetClipboardData
CharUpperW
OpenClipboard
EmptyClipboard
SetClipboardData
CharToOemW
CloseClipboard
PostMessageW
GetMessageW
PostThreadMessageW
MapWindowPoints
GetWindowRect
GetWindowThreadProcessId
SendNotifyMessageW
EnumWindows
IsWindow
SendMessageTimeoutW
GetClassNameW
CopyImage
CharLowerW
GetDlgItem
ShowWindow
GetSystemMetrics
GetClientRect
IsIconic
DrawIcon
LoadStringW
RegisterWindowMessageW
LoadCursorW
SetCursor
UpdateWindow
MessageBoxW
ReleaseCapture
GetDesktopWindow
GetDC
ReleaseDC
EnableWindow
LoadImageW
IsDlgButtonChecked
CheckDlgButton
SendMessageW
CopyRect
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
TrackMouseEvent

gdi32

GetTextExtentPoint32W
GetLogColorSpaceW
GetColorSpace
GetPixel
SetDIBits
BitBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
GetDIBits
CreateFontW
CreateHatchBrush
GetCharWidthW
GetRgnBox
GetBkColor
DPtoLP
DeleteDC
CreateCompatibleDC
CreateDIBSection
GetBitmapBits
GetObjectA
CreateDCA
GdiFlush
SetViewportOrgEx
GetStockObject
GetTextColor
SetBkMode
SetTextColor
CreateSolidBrush
SelectObject
DeleteObject
GetDeviceCaps
GetObjectW
PatBlt
CreateFontIndirectW
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetWindowExtEx
GetViewportExtEx
SelectClipPath
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetClipBox
GetDCOrgEx
GdiAlphaBlend
GetTextMetricsW
SetBkColor
CreateRoundRectRgn
CreateRectRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
CreateCompatibleBitmap
SetICMMode
GetMapMode

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueW
RegCreateKeyW
DuplicateTokenEx
GetLengthSid
SetTokenInformation
CreateProcessAsUserW
GetUserNameW
OpenThreadToken
LookupPrivilegeValueW
AdjustTokenPrivileges
EqualSid
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenProcessToken
GetTokenInformation
RegQueryInfoKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
LookupAccountNameW
LookupAccountSidW
ConvertSidToStringSidW
ConvertStringSidToSidW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueW

shell32

SHGetFolderPathW
ShellExecuteW
SHCreateDirectoryExW
FindExecutableW
SHBrowseForFolderW
ExtractIconW
ShellExecuteExW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
CommandLineToArgvW
ord680

oledlg

OleUIBusyW

ole32

PropVariantClear
CoInitializeEx
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
OleRun
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes

oleaut32

RegisterTypeLi
LoadTypeLi
SysStringLen
SysAllocStringLen
CreateErrorInfo
SetErrorInfo
VariantChangeType
GetErrorInfo
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString
SysAllocString
OleLoadPicture
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
OleCreateFontIndirect
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
LoadRegTypeLi
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim

wsock32

WSAAsyncSelect
recvfrom
sendto
WSASetLastError
getpeername
getsockname
bind
accept
WSACleanup
WSAStartup
shutdown
ntohs

rpcrt4

RpcBindingSetOption
RpcBindingFree
RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
NdrClientCall2

netapi32

NetUserGetInfo
NetApiBufferFree
NetUserEnum

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23.8MB - Virtual size: 23.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb6ba2c9a88e05adf668b1cd098cf12e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

psapi

ws2_32

msimg32

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

oleaut32

wsock32

rpcrt4

netapi32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 414KB - Virtual size: 414KB

.data Size: 59KB - Virtual size: 156KB

.tls Size: 512B - Virtual size: 81B

.rsrc Size: 23.8MB - Virtual size: 23.8MB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 414KB - Virtual size: 414KB

.data
Size: 59KB - Virtual size: 156KB

.tls
Size: 512B - Virtual size: 81B

.rsrc
Size: 23.8MB - Virtual size: 23.8MB