2024-08-11_00d86ab19223770633db681817f74fd1_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-11_00d86ab19223770633db681817f74fd1_magniber
Size

4.6MB
MD5

00d86ab19223770633db681817f74fd1
SHA1

058c975a342c93aa92905926ed9c30a21535650e
SHA256

765225d6b084f48979c013b312860d9450535c0547493b67095eb9ade43a00fd
SHA512

666da0fc94e2e6210d93bb90f7e84985d50c2c8c8b0583df42bac8a9b156a88998c1ad3c4bc3df6235a55e695199bcd19133d890032bba59be77637abaae6207
SSDEEP

98304:EpL3daTEh8f3UWc7tdtzhFPuZDMzgK+PtI:M78EafJ6dDs7nI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-11_00d86ab19223770633db681817f74fd1_magniber

Files

2024-08-11_00d86ab19223770633db681817f74fd1_magniber
.exe windows:4 windows x86 arch:x86

7ea7372e9708c9349decd91e96fc6e2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\jenkins_Trunk\workspace\12.11Patch_SourceJob\qqpcmgr_proj\Basic\Output\BinFinal\QQPCMgrPacket.pdb

Imports

kernel32

OutputDebugStringW
Module32FirstW
Module32NextW
SetThreadPriority
ReleaseMutex
OpenThread
SuspendThread
VirtualAlloc
VirtualFree
ReleaseSemaphore
CreateSemaphoreW
GetStdHandle
GetTempFileNameW
SetEndOfFile
MoveFileW
GetFullPathNameW
GetSystemInfo
SetFilePointer
CreateDirectoryW
GetDriveTypeA
GetCurrentDirectoryA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
RemoveDirectoryW
IsValidCodePage
GetOEMCP
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
LCMapStringW
LCMapStringA
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetModuleHandleA
VirtualProtect
ExitThread
GetStartupInfoW
IsProcessorFeaturePresent
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreatePipe
LoadLibraryA
GetSystemDefaultLangID
VirtualQuery
CreateFileA
GlobalAlloc
GlobalLock
GetCPInfo
GetLocalTime
MoveFileExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LocalAlloc
SetCurrentDirectoryW
lstrcmpiW
CreateFileMappingW
MapViewOfFileEx
CreateMutexW
OpenMutexW
LoadLibraryExW
GlobalMemoryStatus
GetPrivateProfileIntW
CreateThread
WideCharToMultiByte
FreeResource
GetDriveTypeW
GetLogicalDriveStringsW
FreeLibrary
WriteFile
GetDiskFreeSpaceExW
RaiseException
DeviceIoControl
GetVersion
GetExitCodeProcess
lstrcmpW
GetPrivateProfileStringW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
FlushInstructionCache
MultiByteToWideChar
QueryDosDeviceW
GetFileAttributesW
FindNextFileW
lstrlenW
GetCurrentDirectoryW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
WritePrivateProfileStringW
GetCommandLineW
lstrcpynW
VirtualAllocEx
WriteProcessMemory
SetUnhandledExceptionFilter
TerminateProcess
CreateProcessW
OpenProcess
SearchPathW
InitializeCriticalSection
SetErrorMode
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW
SetLastError
LocalFree
FindResourceExW
LoadResource
LockResource
SetFileAttributesW
SizeofResource
FindResourceW
FindClose
FindFirstFileW
GetCurrentThread
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetCurrentProcess
GetLastError
InitializeCriticalSectionAndSpinCount
HeapAlloc
InterlockedIncrement
GetProcessHeap
HeapFree
DeleteCriticalSection
GlobalFree
InterlockedDecrement
WaitForMultipleObjects
SetEvent
WaitForSingleObject
ResetEvent
CreateEventW
GetVersionExW
CopyFileW
Sleep
GetTickCount
ReadFile
CloseHandle
GetFileSize
CreateFileW
DeleteFileW
GetTempPathW
lstrlenA

user32

UnregisterClassA
LoadStringW
CharLowerW
LoadIconW
CreateWindowExW
SetWindowLongW
DestroyWindow
FindWindowW
MessageBoxW
RegisterClassExW
SetWindowPos
InvalidateRect
LoadImageW
PostQuitMessage
GetWindowPlacement
PostThreadMessageW
GetKeyState
SendMessageTimeoutW
SetActiveWindow
DefWindowProcW
PostMessageW
IsWindow
GetClassInfoExW
GetMessageW
TranslateMessage
TrackPopupMenu
GetSystemMenu
GetMonitorInfoW
MonitorFromWindow
SetWindowRgn
CopyImage
mouse_event
GetSystemMetrics
OffsetRect
DrawFrameControl
UpdateLayeredWindow
EqualRect
GetDlgCtrlID
DrawIconEx
IsWindowVisible
EndPaint
ReleaseCapture
BeginPaint
SetCursor
SetCapture
PtInRect
GetWindowDC
ClientToScreen
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
FrameRect
FillRect
CallWindowProcW
SetTimer
KillTimer
DrawTextW
CharUpperW
InflateRect
SetForegroundWindow
AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
CharNextW
ReleaseDC
GetDC
GetWindow
GetClientRect
SystemParametersInfoW
DispatchMessageW
GetWindowRect
MapWindowPoints
GetWindowLongW
PeekMessageW
SendMessageW
SetRect
MsgWaitForMultipleObjectsEx
EnableWindow
IsWindowEnabled
CopyRect
GetDesktopWindow
GetActiveWindow
MoveWindow
GetDlgItem
GetParent
ShowWindow
LoadCursorW

gdi32

GetClipRgn
SetBkColor
DeleteDC
ExtTextOutW
CreateFontIndirectW
CreatePen
Rectangle
SelectObject
CreateCompatibleBitmap
CreateRectRgn
GetObjectW
GetStockObject
CreateDIBSection
BitBlt
CreateBitmap
StretchBlt
DeleteObject
AddFontResourceW
RestoreDC
TextOutW
CreateRectRgnIndirect
SelectClipRgn
SetBkMode
RoundRect
GetTextMetricsW
CreateSolidBrush
ExtSelectClipRgn
OffsetRgn
GetTextExtentPoint32W
LineTo
MoveToEx
CombineRgn
CreateCompatibleDC
RectInRegion
SetTextColor
SaveDC

advapi32

FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
DeleteService
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegEnumKeyExW
RegQueryInfoKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteKeyW
RegLoadKeyW
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
RegOpenKeyW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExW
GetSecurityInfo
GetNamedSecurityInfoW
GetTokenInformation
AdjustTokenPrivileges
IsValidSid
GetLengthSid
RegCloseKey
RegOpenKeyExW
GetAce
LookupAccountNameW
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
GetAclInformation
SetNamedSecurityInfoW
AddAce
SetSecurityInfo
CopySid
InitializeAcl

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetSpecialFolderPathW
ord680
SHCreateDirectoryExW

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoTaskMemRealloc
CoUninitialize

oleaut32

VariantInit
VariantCopy
VariantClear
SysAllocString
SysFreeString
VarUI4FromStr
OleLoadPicture

shlwapi

PathAppendW
PathIsDirectoryW
StrStrW
StrChrW
StrCatW
PathAddBackslashW
StrToIntExW
StrToIntA
PathFindFileNameW
PathQuoteSpacesW
PathRemoveBackslashW
PathFileExistsW
PathRemoveFileSpecW
wnsprintfW

comctl32

_TrackMouseEvent
InitCommonControlsEx

ws2_32

htonl
ntohl
htons

wininet

InternetOpenW
InternetGetConnectedState
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
InternetOpenUrlW

userenv

UnloadUserProfile

psapi

GetModuleFileNameExW
GetProcessImageFileNameW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

crypt32

CryptMsgGetParam
CertFindCertificateInStore
CryptQueryObject
CertGetNameStringW

netapi32

Netbios

Sections

.text
Size: 848KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ea7372e9708c9349decd91e96fc6e2d

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

ws2_32

wininet

userenv

psapi

version

crypt32

netapi32

Sections

.text Size: 848KB - Virtual size: 844KB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 20KB - Virtual size: 36KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 848KB - Virtual size: 844KB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 20KB - Virtual size: 36KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB