D:\a\Magpie\Magpie\publish\x64\Magpie.pdb
Static task
static1
1 signatures
General
-
Target
Magpie.exe
-
Size
467KB
-
MD5
9e178939fbd5120c5260b80d4ecfd3fb
-
SHA1
4beb1ff470dadfcb6d2a3f45bd337e21a36a16a5
-
SHA256
2443bb8b526e0b882a6693d8cdb3f2deb06c23973b5fa33359cf61ab445ffe50
-
SHA512
5bd38499a78c8ca4b6e4ef2bcdad6962de62b1e94e500a6c8c9e97090999ce23690de16ab26b4af4e2f9be747e14cdebe455aba29df5da6333fbbb4afea3d2ab
-
SSDEEP
12288:wCqv9zaC/TVINAz0wGQZ186eM6ckX2JWPjj6HP:zqv9mC/xjz0pQZ1WMRcaH
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Magpie.exe
Files
-
Magpie.exe.exe windows:6 windows x64 arch:x64
935d0663357a4907d322a012ee685a60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetModuleHandleW
LocalFree
SetLastError
K32GetModuleFileNameExW
GetModuleFileNameW
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
DebugBreak
SetCurrentDirectoryW
HeapSetInformation
GetFileAttributesW
CreateFileW
CreateDirectoryW
FindStringOrdinal
CopyFileW
Sleep
DeleteFileW
RemoveDirectoryW
SetFileInformationByHandle
FindNextFileW
SetFileAttributesW
GetFileInformationByHandleEx
FindClose
FindFirstFileW
GetFullPathNameW
LocalAlloc
SetProcessInformation
GetCurrentProcess
GetDynamicTimeZoneInformation
GetStdHandle
WriteFile
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
ReleaseSRWLockExclusive
LoadLibraryExW
WakeConditionVariable
GetProcAddress
OpenProcess
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
QueryPerformanceFrequency
SwitchToThread
GetExitCodeThread
RtlPcToFileHeader
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
TrySubmitThreadpoolCallback
AcquireSRWLockExclusive
CloseHandle
FormatMessageW
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringW
IsDebuggerPresent
TryAcquireSRWLockExclusive
GetLastError
user32
DestroyWindow
DestroyIcon
CreatePopupMenu
AppendMenuW
RegisterWindowMessageW
IsZoomed
DestroyMenu
FindWindowW
GetMessageW
DispatchMessageW
TranslateMessage
GetAncestor
TrackPopupMenuEx
GetWindowThreadProcessId
GetWindowPlacement
GetClientRect
ClientToScreen
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
SetForegroundWindow
GetForegroundWindow
AttachThreadInput
BringWindowToTop
PostQuitMessage
ChangeWindowMessageFilter
AdjustWindowRectExForDpi
UpdateWindow
InvalidateRect
SetClassLongPtrW
GetKeyState
EndPaint
ShowWindow
FillRect
BeginPaint
IsWindowVisible
GetDpiForWindow
GetSystemMetricsForDpi
MoveWindow
ReleaseCapture
SetCapture
WindowFromPoint
GetCursorPos
TrackMouseEvent
SendMessageW
ScreenToClient
DefWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
MonitorFromPoint
PostMessageW
TrackPopupMenu
SetMenuDefaultItem
GetSystemMenu
PtInRect
SetMenuItemInfoW
IsIconic
SetLayeredWindowAttributes
CreateWindowExW
SetWindowPlacement
SetWindowPos
RegisterClassExW
LoadCursorW
LoadIconW
GetWindowLongW
gdi32
GetStockObject
DeleteObject
CreateSolidBrush
advapi32
CreateWellKnownSid
CheckTokenMembership
shell32
SHGetKnownFolderPath
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteExW
ole32
CoInitializeEx
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoGetApartmentType
CoGetObjectContext
oleaut32
SysFreeString
SetErrorInfo
GetErrorInfo
SysStringLen
api-ms-win-core-path-l1-1-0
PathAllocCanonicalize
PathCchSkipRoot
PathAllocCombine
PathCchRemoveFileSpec
api-ms-win-core-errorhandling-l1-1-0
RaiseException
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
api-ms-win-core-memory-l1-1-0
VirtualProtect
VirtualQuery
api-ms-win-core-libraryloader-l1-2-0
FreeLibrary
LoadLibraryExA
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
abort
_set_app_type
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_c_exit
_invalid_parameter_noinfo_noreturn
_initterm_e
_register_onexit_function
_errno
_beginthreadex
terminate
_cexit
_crt_atexit
exit
_exit
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
ceilf
__setusermatherr
_dsign
lroundf
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
_callnewh
malloc
calloc
api-ms-win-crt-string-l1-1-0
isdigit
strcpy_s
wcscpy_s
wcsncmp
iswspace
api-ms-win-crt-stdio-l1-1-0
_wfopen_s
__stdio_common_vswprintf
_fileno
fwrite
fclose
_set_fmode
__acrt_iob_func
_fsopen
__stdio_common_vfprintf
_filelengthi64
fflush
__p__commode
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_localtime64_s
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
rename
remove
_mkdir
api-ms-win-crt-locale-l1-1-0
setlocale
___lc_codepage_func
localeconv
_lock_locales
___lc_locale_name_func
__pctype_func
___mb_cur_max_func
_unlock_locales
_configthreadlocale
dwmapi
DwmExtendFrameIntoClientArea
DwmSetWindowAttribute
DwmGetWindowAttribute
comctl32
ord380
uxtheme
BufferedPaintInit
BeginBufferedPaint
EndBufferedPaint
BufferedPaintSetAlpha
api-ms-win-shcore-scaling-l1-1-1
GetDpiForMonitor
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-0
RoTransformError
RoFailFastWithErrorContext
Sections
.text Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ