Static task
static1
Behavioral task
behavioral1
Sample
2024-09-09_e711e5ca0ae27c8f3b0835ce21650e11_floxif_magniber.exe
Resource
win7-20240729-en
General
-
Target
2024-09-09_e711e5ca0ae27c8f3b0835ce21650e11_floxif_magniber
-
Size
6.0MB
-
MD5
e711e5ca0ae27c8f3b0835ce21650e11
-
SHA1
6f1bb0b1be76a33afe3c52ff9e8129f1f42ca344
-
SHA256
de5dc6a0a73dfbb5b5ec7aa50ac2f79e0d55aeec9b74f78f04284745cb2980ae
-
SHA512
b02189a58c5367c4493a37d4388afcdf1dcb62ec845e620f106fabac61f48981250c89e69cd2328580f1d05d48b3b916f1661c9ad19da5322d44409c49cda22a
-
SSDEEP
98304:TdNfffffffffffffffG////////pkqPf+f+f+f+f+f+f+f1ffffffffC:TdNHHHHHHH+////////pTmmmmmmmNffC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-09_e711e5ca0ae27c8f3b0835ce21650e11_floxif_magniber
Files
-
2024-09-09_e711e5ca0ae27c8f3b0835ce21650e11_floxif_magniber.exe windows:4 windows x86 arch:x86
4d7648f32a6fb95136f7c5f506f1edcf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AllocateAndInitializeSid
CopySid
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
FreeSid
GetLengthSid
GetTokenInformation
InitializeSecurityDescriptor
OpenProcessToken
RegCloseKey
RegCreateKeyW
RegQueryValueExW
SetEntriesInAclW
SetSecurityDescriptorDacl
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
oleaut32
SysAllocString
user32
GetActiveWindow
MessageBoxW
kernel32
CancelIo
CloseHandle
CompareFileTime
CompareStringA
CompareStringW
ConnectNamedPipe
CreateEventW
CreateFileA
CreateFileW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
FatalAppExitA
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeProcess
GetFileType
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenProcess
Process32FirstW
Process32NextW
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 188KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ