E:\Project\dtl_dep\PC\driverthelife8\trunk\Build\Release\DrvUpgChk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-06_dfb814c43c9413524664770c2031bda5_magniber.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-06_dfb814c43c9413524664770c2031bda5_magniber.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-06_dfb814c43c9413524664770c2031bda5_magniber
-
Size
1.4MB
-
MD5
dfb814c43c9413524664770c2031bda5
-
SHA1
675e5adbfb3bbae46c3a1c299f11fb3e9e8efcdb
-
SHA256
a1d54545b0e7cf5297efd48d87f7369675335103fdd96d630be0625ce073e496
-
SHA512
d97a76196fbf4c8e7ade280e099ee534033d782b199cbb28e0d76f5db9d6cd08ac5038aa95cf45b39cf9ec522384a604176341c95811ced039f3b0c58d096014
-
SSDEEP
24576:8/10DaVtyw8xzy35eMKVGn9sFXvY1Jowu:ljWeMP9+vY1Jowu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-06_dfb814c43c9413524664770c2031bda5_magniber
Files
-
2024-09-06_dfb814c43c9413524664770c2031bda5_magniber.exe windows:5 windows x86 arch:x86
e8a0d46a39439e043203840d3c8a8497
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetStdHandle
ReadConsoleW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
SetEndOfFile
InterlockedDecrement
WaitForMultipleObjects
ReleaseSemaphore
WaitForSingleObject
SetEvent
SetThreadPriority
CreateThread
CreateSemaphoreW
CreateEventW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
GetCurrentThread
GetPrivateProfileIntW
Sleep
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
CreateMutexW
OpenMutexW
GetVersionExW
GetCurrentThreadId
CreateDirectoryW
GetCurrentProcess
WriteFile
CreateFileW
MultiByteToWideChar
CloseHandle
DeleteFileW
GetLastError
GetTickCount
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
ExitProcess
GetFileType
IsDebuggerPresent
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
DuplicateHandle
WaitForSingleObjectEx
GetExitCodeThread
TryEnterCriticalSection
GetStringTypeW
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetCPInfo
CreateFileA
SetFilePointer
InterlockedExchange
GetModuleFileNameA
DeleteFileA
GetFileSize
GetLocalTime
GetCurrentProcessId
GetFileAttributesW
SetFileAttributesW
FindClose
FindNextFileW
TerminateProcess
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
GetThreadTimes
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
LoadLibraryExW
VirtualAlloc
VirtualFree
VirtualProtect
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
GetModuleHandleExW
FindFirstFileExW
user32
SetForegroundWindow
GetWindowRect
PostMessageW
GetMonitorInfoW
MoveWindow
SetWindowPos
MonitorFromWindow
SystemParametersInfoW
GetCursorPos
PostQuitMessage
SendMessageW
FindWindowW
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoInitializeEx
shlwapi
PathIsRelativeW
PathRemoveFileSpecA
PathCombineW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
dtlui
?OnMouseHover@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnMouseLeave@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnSetForegoundWindow@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?OnClose@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?AdjustPostion@WindowImplBaseNew@DuiLib@@UAEXXZ
?CreateWin@WindowImplBaseNew@DuiLib@@UAEXXZ
?CreateDuiWindow@WindowImplBaseNew@DuiLib@@UAEPAUHWND__@@PAU3@PB_WPAVIDialogBuilderCallback@2@KK@Z
?InitWinParam@WindowImplBaseNew@DuiLib@@UAEXPB_W@Z
?GetClassStyle@WindowImplBaseNew@DuiLib@@UBEIXZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?ShowModal@WindowImplBaseNew@DuiLib@@UAEIXZ
?HandleMessage@WindowImplBaseNew@DuiLib@@UAEJIIJ@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
?HandleCustomMessage@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
?SetResType@WindowImplBaseNew@DuiLib@@UAEXW4RESTYPE@2@PB_WH1_N@Z
?SetXmlZip@WindowImplBaseNew@DuiLib@@UAEXPB_W@Z
?WindowInitNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?KillFocusNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?SetFocusNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?ClickNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?DBClickNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?SelectChangedNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?HeaderClickNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?HeaderCheckNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?TextChangedNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?ItemSelectNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?ItemClickNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?ItemDBClickNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?LinkNotify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?GetSkinFile@WindowImplBaseNew@DuiLib@@MAE?AVCDuiString@2@XZ
?GetData@CDuiString@DuiLib@@QBEPB_WXZ
?Format@CDuiString@DuiLib@@QAAHPB_WZZ
??0CDuiString@DuiLib@@QAE@XZ
?PostMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?OnFinalMessage@WindowImplBaseNew@DuiLib@@UAEXPAUHWND__@@@Z
?ResponseDefaultKeyEvent@WindowImplBaseNew@DuiLib@@MAEJI@Z
?UpdateWindowState@WindowImplBaseNew@DuiLib@@MAEXIJ@Z
?Notify@WindowImplBaseNew@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?MessageHandler@WindowImplBaseNew@DuiLib@@UAEJIIJAA_N@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
??0CDuiRect@DuiLib@@QAE@XZ
?GetWidth@CDuiRect@DuiLib@@QBEHXZ
?GetHeight@CDuiRect@DuiLib@@QBEHXZ
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
??0CDuiRect@DuiLib@@QAE@ABUtagRECT@@@Z
?GetWindowClassName@WindowImplBaseNew@DuiLib@@UBEPB_WXZ
?SetBkImage@CControlUI@DuiLib@@QAEXPB_W@Z
?OnTimer@WindowImplBaseNew@DuiLib@@UAEJIIJAAH@Z
??1WindowImplBaseNew@DuiLib@@UAE@XZ
??0WindowImplBaseNew@DuiLib@@QAE@XZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
??1CDuiString@DuiLib@@QAE@XZ
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 596KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE