Static task
static1
Behavioral task
behavioral1
Sample
2024-08-06_e7311d33a0444528a31c8f40195ce141_magniber.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-06_e7311d33a0444528a31c8f40195ce141_magniber.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-06_e7311d33a0444528a31c8f40195ce141_magniber
-
Size
4.6MB
-
MD5
e7311d33a0444528a31c8f40195ce141
-
SHA1
6b459c13ffc54eae55b0fdd2cc1ee67610abdd37
-
SHA256
f32907bec5b3dfb3a07302167d2ee80a93753c54c274a18950103f533c70c9f3
-
SHA512
3ea39c13583d5bded4c772f5b59ee771d63ee1993543de1b0a0cd4d9e3d558cd9ffd180449c8d17e3b94bf319bf3dfe699d4f4061115ff30cb0d1744d4807cf6
-
SSDEEP
98304:u9yVAkp7bhZVjIf7Z/dOpsnKGFEPPccmEv1YZVjFO:bLVlIfBwpsnKGFEXiEv1YX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-06_e7311d33a0444528a31c8f40195ce141_magniber
Files
-
2024-08-06_e7311d33a0444528a31c8f40195ce141_magniber.exe windows:4 windows x86 arch:x86
5869a3d8d008e5a4a8522e536c61ac11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
HeapCreate
CreateMutexW
GetLastError
HeapDestroy
ExitProcess
GetBinaryTypeW
GetCurrentProcess
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcAddress
FreeLibrary
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
SetLastError
GetCurrentThread
HeapAlloc
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
OutputDebugStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
FindNextFileW
FindClose
MultiByteToWideChar
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
EncodePointer
RaiseException
InitializeCriticalSection
WaitForSingleObject
CreateThread
GetTickCount
GetFileSize
Sleep
LoadLibraryW
DuplicateHandle
CreatePipe
CreateProcessW
PeekNamedPipe
SetFilePointer
SetEndOfFile
DeleteFileW
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GlobalFree
GetVersionExW
SetErrorMode
GetDiskFreeSpaceW
CompareFileTime
GetWindowsDirectoryW
GetLogicalDrives
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
WaitForMultipleObjects
ResetEvent
SetEvent
FindCloseChangeNotification
FindNextChangeNotification
TerminateThread
CreateEventW
FindFirstChangeNotificationW
GetCurrentDirectoryW
GetDriveTypeW
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
CopyFileW
MoveFileW
QueryPerformanceFrequency
MulDiv
CreateEventA
LoadLibraryA
ReleaseSemaphore
GetFileInformationByHandle
CreateFileA
CreateSemaphoreW
SetThreadPriority
UnregisterWait
RegisterWaitForSingleObject
SystemTimeToTzSpecificLocalTime
DecodePointer
GetFullPathNameW
SetCurrentDirectoryW
GetFileSizeEx
GetTimeZoneInformation
user32
GetDC
GetWindowLongW
SetWindowLongW
SetForegroundWindow
GetAsyncKeyState
SendMessageW
InvalidateRect
UpdateWindow
DrawIcon
DestroyIcon
LockWindowUpdate
DrawIconEx
MessageBoxW
DefWindowProcW
DestroyWindow
GetWindowTextLengthW
GetWindowTextW
SetFocus
UnregisterClassW
SystemParametersInfoW
LoadIconW
LoadCursorW
RegisterClassExW
IsWindowEnabled
EnableWindow
GetSystemMetrics
CreateWindowExW
CreateAcceleratorTableW
BringWindowToTop
GetMessageW
TranslateAcceleratorW
IsDialogMessageW
TranslateMessage
DispatchMessageW
DestroyAcceleratorTable
PostMessageW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
EnumWindows
SetWindowPos
ScreenToClient
GetParent
GetClassNameW
GetWindowRect
IntersectRect
GetPropW
RemovePropW
SetPropW
EnumChildWindows
RedrawWindow
GetClientRect
DrawFocusRect
ReleaseDC
ShowWindow
SetWindowTextW
GetWindow
CallWindowProcW
GetFocus
GetIconInfo
BeginPaint
ReleaseCapture
DrawStateW
EndPaint
SetCapture
SetScrollPos
InflateRect
GetWindowDC
GetSysColor
GetSysColorBrush
SetRect
DrawTextW
FrameRect
ValidateRect
MapWindowPoints
CreateDialogParamW
SendDlgItemMessageW
GetDlgItemTextW
SetDlgItemTextW
EndDialog
LoadStringW
MoveWindow
EnumPropsExW
FillRect
GetScrollPos
DrawFrameControl
SetActiveWindow
IsZoomed
IsIconic
SetTimer
PeekMessageW
MsgWaitForMultipleObjects
GetActiveWindow
RegisterClassW
AdjustWindowRectEx
GetMenu
GetKeyState
IsChild
DefFrameProcW
GetCursorPos
TrackPopupMenu
SetMenu
DestroyMenu
GetMenuItemInfoW
GetMenuItemCount
GetSubMenu
ModifyMenuW
SetMenuItemInfoW
AppendMenuW
CreateMenu
CreatePopupMenu
RegisterWindowMessageW
OpenClipboard
GetClipboardData
CloseClipboard
EmptyClipboard
CopyImage
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW
gdi32
GetDeviceCaps
GetStockObject
CreateFontIndirectW
DeleteObject
GetObjectType
GetObjectW
ExcludeClipRect
SelectObject
GetTextExtentPoint32W
SetBkColor
SetTextColor
CreateRectRgn
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
CreateDCW
CreatePen
MoveToEx
LineTo
CreateDIBSection
CreateSolidBrush
GetPixel
SetPixel
SetBkMode
GdiGetBatchLimit
GdiSetBatchLimit
GetDIBits
SetStretchBltMode
SetBrushOrgEx
StretchBlt
CreateBitmap
CreateFontW
SetTextAlign
TextOutW
GetTextMetricsW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
OleUninitialize
OleInitialize
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
shell32
ExtractIconW
ExtractIconExW
ShellExecuteExW
DragQueryFileW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFolderLocation
Shell_NotifyIconW
ws2_32
closesocket
WSACleanup
WSAStartup
shlwapi
PathMatchSpecW
winmm
timeBeginPeriod
gdiplus
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
uxtheme
SetWindowTheme
comdlg32
GetSaveFileNameW
GetOpenFileNameW
comctl32
InitCommonControlsEx
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
Sections
.code Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ