D:\code\bytedance\installer\LVInstallerCC\VideofusionInstaller\build\CC_RELEASE\JianyingUninstaller.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-07_cf3d7103fd96438e1a2227f9ac1d34fa_magniber.exe
Resource
win7-20240903-en
General
-
Target
2024-09-07_cf3d7103fd96438e1a2227f9ac1d34fa_magniber
-
Size
2.3MB
-
MD5
cf3d7103fd96438e1a2227f9ac1d34fa
-
SHA1
173e0aa49e2185f5cf0247431af7cd9e08c2fb3b
-
SHA256
29f8618bc7af1cee24fae858b2463e1a3bc518fc446bdfa9bc49920db226cf7d
-
SHA512
930c66ed1cd79dc3e4dffcfb73cd812d9a9eabdd46342880889dd7d9cc8f3dc334ed20590a036e0936a398e3008b2338a0ee0bd1af89474142c3994313742763
-
SSDEEP
49152:g18Ezlgpp7oNB89z0lDyLYMCFIYBCYNcj90AP0gwR+ft983Dl3gEe8xA+:geER/bIYBCGXAPDwR+l9EDl3VxA+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-07_cf3d7103fd96438e1a2227f9ac1d34fa_magniber
Files
-
2024-09-07_cf3d7103fd96438e1a2227f9ac1d34fa_magniber.exe windows:6 windows x86 arch:x86
445e1e67622fad8bef9c312da2c6f540
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
powrprof
PowerDeterminePlatformRole
kernel32
GetLogicalDriveStringsW
GetFullPathNameA
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
FindResourceExW
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
FindResourceW
CreateFileW
GetFileSize
ReadFile
WriteFile
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
ExpandEnvironmentStringsW
GetFullPathNameW
GetLongPathNameW
SetFileAttributesW
SetLastError
DeviceIoControl
GetVersionExW
GetModuleHandleW
GetProcAddress
LocalFree
WaitForSingleObject
OpenProcess
GetWindowsDirectoryW
FreeLibrary
LoadLibraryW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentProcess
GetCurrentThread
SetFilePointer
ProcessIdToSessionId
GetCommandLineW
GetEnvironmentVariableW
GetDiskFreeSpaceExW
GetVolumeInformationW
QueryDosDeviceW
GetTempPathW
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetVersion
GetLocalTime
GetTickCount
GetSystemDirectoryW
LocalAlloc
lstrcmpW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CopyFileW
MoveFileExW
WTSGetActiveConsoleSessionId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
CreateEventW
CreateThread
MoveFileW
Sleep
TerminateThread
GetPrivateProfileIntW
GetPrivateProfileStringW
InitializeCriticalSectionAndSpinCount
GetShortPathNameW
SetErrorMode
GetCurrentThreadId
ResumeThread
SetPriorityClass
LoadLibraryExW
SetDefaultDllDirectories
lstrcmpiW
FlushInstructionCache
lstrlenW
GetProcessId
GetModuleHandleA
GetTempFileNameW
MapViewOfFile
UnmapViewOfFile
SetEnvironmentVariableA
GetVolumePathNameW
ReplaceFileW
GetCurrentDirectoryW
CreateFileMappingW
SetCurrentDirectoryW
GetFileAttributesExW
GetNativeSystemInfo
CreateMutexW
FormatMessageA
OutputDebugStringA
ReleaseMutex
RegisterWaitForSingleObject
UnregisterWaitEx
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
QueryPerformanceCounter
GetSystemTimeAsFileTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
QueryPerformanceFrequency
SetEndOfFile
SetFilePointerEx
UnlockFile
LockFile
SetFileTime
FlushFileBuffers
GetFileSizeEx
DuplicateHandle
GetFileInformationByHandle
SetThreadPriority
GetThreadPriority
IsDebuggerPresent
GetUserDefaultLangID
TryEnterCriticalSection
GetModuleHandleExW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
SetInformationJobObject
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
WaitForMultipleObjects
GlobalMemoryStatusEx
RtlCaptureStackBackTrace
QueueUserWorkItem
GetModuleHandleExA
GetProcessHeaps
HeapSetInformation
HeapUnlock
HeapLock
HeapWalk
GetProcessIoCounters
VirtualQueryEx
GetProcessTimes
GetSystemInfo
LoadLibraryExA
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
EncodePointer
RtlUnwind
VirtualProtect
VirtualQuery
GetCPInfo
ExitProcess
AreFileApisANSI
SetConsoleCtrlHandler
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
CreateSemaphoreW
ReadConsoleW
FatalAppExitA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDriveTypeW
Exports
Exports
GetHandleVerifier
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 608KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE