2024-08-20_d6dd7bd44926f8c8dcfc612ba777e4f7_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_d6dd7bd44926f8c8dcfc612ba777e4f7_magniber
Size

26.9MB
MD5

d6dd7bd44926f8c8dcfc612ba777e4f7
SHA1

ef14ae6005e2a9da1d2f481c718980dfceeee3ae
SHA256

a12e1d3ce61b92b9f64cd2d04ae2f7de2f12aa0ec1f05d84e52c95df0dc4a860
SHA512

561ca18cf0c410388277b367fdbf1276c5e31f22d50379d4b1de323d7ff1ef676c5177937617884c715e5e69bca7c3b3220d91a77964c9d1047269fdbe429eaf
SSDEEP

786432:Mgl05SKkrYOKt9/4xTbzysirdJUNOOUtEm2IWn:p0rMYOe/ubu7Xqmby

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_d6dd7bd44926f8c8dcfc612ba777e4f7_magniber

Files

2024-08-20_d6dd7bd44926f8c8dcfc612ba777e4f7_magniber
.exe windows:5 windows x86 arch:x86

35fd7a8b7844c566491e02551fbb2a86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\build1\TUU2013Update0HF1\Setup\TUStub\Release\TUStub.pdb

Imports

msi

ord92
ord16
ord113
ord141
ord159
ord32
ord70
ord88
ord169
ord8
ord118
ord160

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_Add
ord17

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GetModuleHandleW
GetLocaleInfoW
GetNativeSystemInfo
GetSystemDefaultLCID
GetUserDefaultLCID
GetPrivateProfileStringW
LoadResource
SizeofResource
LockResource
WriteFile
GetCurrentProcess
CreateDirectoryW
LocalFree
GetTickCount
Sleep
GetExitCodeProcess
SetFileAttributesW
lstrlenW
lstrcpyW
lstrcatW
SystemTimeToFileTime
OpenProcess
lstrcmpiW
ExpandEnvironmentStringsW
GetVersion
GetWindowsDirectoryW
SetCurrentDirectoryW
GetCommandLineW
CreateMutexW
MultiByteToWideChar
FormatMessageW
AttachConsole
FreeConsole
GetUserDefaultUILanguage
EnumResourceNamesW
GetDiskFreeSpaceExW
SetHandleCount
GetProcAddress
VirtualFree
WideCharToMultiByte
HeapCreate
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLastError
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
CompareStringW
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetFileType
HeapFree
ExitProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
FreeEnvironmentStringsA
UnmapViewOfFile
CloseHandle
VirtualQuery
MapViewOfFile
CreateFileMappingW
CreateFileW
GetSystemTime
FileTimeToSystemTime
GetFileAttributesExW
LoadLibraryW
FreeLibrary
DeleteFileW
GetModuleFileNameW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
SetFilePointer
GetConsoleCP
GetVersionExW
FindResourceExW
GetTempFileNameW
GetModuleFileNameA
GetTempPathW
GetConsoleMode
CreateFileA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
ReadFile
GetModuleHandleA
VirtualAlloc
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId

user32

SetWindowPos
ReleaseDC
GetWindowTextLengthW
GetWindowDC
LoadBitmapW
PostMessageW
KillTimer
SetTimer
EnableMenuItem
GetSystemMenu
LoadImageW
SetWindowLongW
SetCursor
GetDlgCtrlID
IsDlgButtonChecked
UpdateWindow
InvalidateRect
SendMessageW
GetDC
SetParent
ShowWindow
AttachThreadInput
BringWindowToTop
SetForegroundWindow
GetForegroundWindow
DrawTextW
GetWindowTextW
ScreenToClient
GetWindowRect
GetClientRect
EndDialog
GetDlgItem
SetWindowTextW
DialogBoxParamW
SendInput
ExitWindowsEx
GetWindowThreadProcessId
IsWindow
FindWindowW
wsprintfW
DestroyWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
MessageBoxW
LoadStringW
GetSystemMetrics
SetFocus

gdi32

GetDeviceCaps
SetBkMode
Rectangle
SelectObject
CreatePen
CreateSolidBrush
GetStockObject
SetTextColor
CreateFontW

advapi32

LookupPrivilegeValueW
QueryServiceStatusEx
ControlService
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
EqualSid
OpenProcessToken
DuplicateTokenEx
IsValidSid
GetTokenInformation
FreeSid
AllocateAndInitializeSid
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
AdjustTokenPrivileges

shell32

ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CoCreateGuid
StringFromGUID2
IIDFromString

oleaut32

VariantInit
SysAllocString
SysFreeString

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26.4MB - Virtual size: 26.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35fd7a8b7844c566491e02551fbb2a86

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msi

comctl32

wtsapi32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 327KB - Virtual size: 327KB

.rdata Size: 117KB - Virtual size: 116KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 26.4MB - Virtual size: 26.4MB

.reloc Size: 88KB - Virtual size: 88KB

.text
Size: 327KB - Virtual size: 327KB

.rdata
Size: 117KB - Virtual size: 116KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 26.4MB - Virtual size: 26.4MB

.reloc
Size: 88KB - Virtual size: 88KB