2024-08-23_b40defe6b493307502d65d9f20a7e8a8_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-23_b40defe6b493307502d65d9f20a7e8a8_magniber
Size

3.6MB
MD5

b40defe6b493307502d65d9f20a7e8a8
SHA1

7e134cc4156d188bdbf691b5ebc4354f04cff35a
SHA256

0bee10daf4bbff189bae907268c9e7b7c9022446fac3c0fd95adaea9cf49336f
SHA512

9b0c68d38d36a708b563586a37a5ca8ae3bc510e1d26f0d44bfb10b6ed3ba417419879804b5f1493747116bf9e76825ab64084f2d93ebeec420402b7b26c6f16
SSDEEP

49152:ajzej3SgWNVr+QU+kPQX6rBjXgLS6oa2VNBo/WImwTx804Z+ZfUg11ep7DbHpPSV:eyMnkPQKeS22TIWsB4ifU61e9jZj8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-23_b40defe6b493307502d65d9f20a7e8a8_magniber

Files

2024-08-23_b40defe6b493307502d65d9f20a7e8a8_magniber
.exe windows:6 windows x86 arch:x86

5cc85de3588fcea991202373321aa77f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Sirius\Old Projects\trunk\lxApplicationStartup\Release\lxapp.pdb

Imports

kernel32

InitializeCriticalSectionAndSpinCount
GetLogicalDriveStringsW
DeviceIoControl
GetDriveTypeW
CreateFileW
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
SetFileAttributesW
CreateThread
MultiByteToWideChar
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
OutputDebugStringW
GetCurrentThread
GetFileTime
GetComputerNameW
GetSystemTime
SetEvent
FileTimeToSystemTime
GetFileInformationByHandle
GetFileSize
SetFilePointer
ReadFile
CreateFileMappingW
MapViewOfFile
WriteFile
UnmapViewOfFile
GetLocalTime
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetFileTime
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
SetLastError
DeleteCriticalSection
InitializeCriticalSectionEx
WriteConsoleW
SetEndOfFile
GetLastError
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetConsoleCtrlHandler
HeapReAlloc
HeapSize
ReadConsoleW
SetStdHandle
GetFullPathNameW
SetCurrentDirectoryW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
HeapAlloc
HeapFree
RaiseException
DecodePointer
GetBinaryTypeW
GetModuleHandleW
GetCurrentThreadId
Sleep
CreateEventW
WaitForSingleObject
ResetEvent
CloseHandle
GetTempPathW
CreateDirectoryW
GetCommandLineW
GetModuleFileNameW
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetStdHandle
GetModuleHandleExW
ExitProcess
PeekNamedPipe
GetFileType
GetFileAttributesW
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
GetSystemTimeAsFileTime
TlsFree
FreeLibrary
FlushFileBuffers
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
EncodePointer
FormatMessageW
GetStringTypeW
LocalFree

user32

GetWindowLongW
EndDialog
UnregisterClassW
SendMessageW
GetWindow
GetClientRect
GetDlgItem
SetRect
FillRect
DrawIconEx
EndPaint
GetSysColorBrush
LoadCursorW
SetCursor
CallWindowProcW
DialogBoxParamW
IsWindow
BeginPaint
MessageBoxW
GetForegroundWindow
SetForegroundWindow
GetDesktopWindow
GetClassNameW
GetWindowThreadProcessId
GetSysColor
PostMessageW
SetWindowTextW
wsprintfW
LoadImageW
GetCursorPos
AppendMenuW
CreatePopupMenu
LoadStringW
SetWindowPos
SetWindowLongW
ScreenToClient
GetWindowRect
MoveWindow
ShowWindow
EnableWindow
GetDlgItemTextW
SetFocus
GetFocus
SetDlgItemTextW
DestroyIcon
TrackPopupMenu

advapi32

MapGenericMask
RegQueryValueExW
RegCloseKey
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
CryptDestroyHash
CryptDeriveKey
CryptHashData
CryptCreateHash
RevertToSelf
AccessCheck
GetFileSecurityW
OpenThreadToken
ImpersonateSelf
RegOpenKeyExW

ole32

CoCreateInstance
CLSIDFromProgID
StgOpenStorageEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoInitialize
CoUninitialize
StgCreateStorageEx

shell32

ShellExecuteW
CommandLineToArgvW

oleaut32

SysAllocString
SysFreeString
SysStringByteLen
CreateErrorInfo
GetErrorInfo
SysAllocStringByteLen
VariantInit
VariantClear
VariantChangeType
VariantCopy
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SetErrorInfo

shlwapi

SHDeleteKeyW

iphlpapi

GetAdaptersInfo

ws2_32

send
connect
inet_addr
htons
socket
gethostbyname
WSACleanup
WSAStartup
htonl
ntohl
select
closesocket
recv

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle

gdi32

CreatePen
DeleteObject
SetTextColor
SelectObject
MoveToEx
LineTo
SetBkMode

Sections

.text
Size: 901KB - Virtual size: 901KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cc85de3588fcea991202373321aa77f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

iphlpapi

ws2_32

wininet

gdi32

Sections

.text Size: 901KB - Virtual size: 901KB

.rdata Size: 168KB - Virtual size: 167KB

.data Size: 7KB - Virtual size: 17KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 35KB - Virtual size: 34KB

.text
Size: 901KB - Virtual size: 901KB

.rdata
Size: 168KB - Virtual size: 167KB

.data
Size: 7KB - Virtual size: 17KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 35KB - Virtual size: 34KB