Static task
static1
Behavioral task
behavioral1
Sample
2024-09-04_217f8515a9c5519e2abdaf217cef5dc6_hijackloader_magniber_viking.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-04_217f8515a9c5519e2abdaf217cef5dc6_hijackloader_magniber_viking.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-04_217f8515a9c5519e2abdaf217cef5dc6_hijackloader_magniber_viking
-
Size
1.9MB
-
MD5
217f8515a9c5519e2abdaf217cef5dc6
-
SHA1
8291d31da1e3cc71806f3f1ba4a8779912a7e355
-
SHA256
0e941264e8036a16ece8c07cfdfeee06435f5e1fd5cf63507007bfb7afc5f9f5
-
SHA512
44449d94b09d22b4904559ca352b907ef493a98f0ff836ef2a19a87c9aee51aad4f5b3ae5c4b083a33a7dc5eace6809fe7f06178822939b4f8e40ca9638f4b89
-
SSDEEP
49152:B7BDkda/oYTCXUSJWJfAb4OuZdzAGNuU5gUxEMTEaKq0:ndOuZpAUpTu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-04_217f8515a9c5519e2abdaf217cef5dc6_hijackloader_magniber_viking
Files
-
2024-09-04_217f8515a9c5519e2abdaf217cef5dc6_hijackloader_magniber_viking.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE