2024-09-12_6fbc3a7e29b8a3e77c4a022b672fbcf4_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-09-12_6fbc3a7e29b8a3e77c4a022b672fbcf4_magniber
Size

532KB
MD5

6fbc3a7e29b8a3e77c4a022b672fbcf4
SHA1

3c1ad860581d39883add4040077f6f1f50db8264
SHA256

a1f1f08a3b291e3c6cf10669038c6fa02a14dada2b0391234baa38023c6e84b6
SHA512

69e27bdd2cd3ce9aa889886f820985369e23794fbeb2c8a0952058370ba9e88c6523e2c7603248945dc3435eaec4bd92baa11801910273884ed2e00fff06ecac
SSDEEP

6144:9KhrsGRZubVktVTZ1mNjqmJk+Lf+n9sQTfioxE2J3nybMOsPvhApvvU:0hrRRZuB8znmyW+ndJxEW3ishc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-12_6fbc3a7e29b8a3e77c4a022b672fbcf4_magniber

Files

2024-09-12_6fbc3a7e29b8a3e77c4a022b672fbcf4_magniber
.exe windows:4 windows x86 arch:x86

b62c1e37720c5b9e17bf1919d5b9f4da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\source\Fun Player\Rel2.4.2\src\plugin\FunScr\FunScr\Release\FunScr.pdb

Imports

wininet

InternetGetConnectedState
InternetOpenA
InternetReadFile
InternetOpenUrlW
HttpQueryInfoA
InternetSetOptionA
HttpQueryInfoW
InternetCloseHandle

shell32

SHGetSpecialFolderPathW

dbghelp

MakeSureDirectoryPathExists

kernel32

FindResourceExW
MultiByteToWideChar
FlushInstructionCache
GetCurrentProcess
GlobalAlloc
DeleteFileW
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
SetLastError
GlobalFree
GlobalHandle
lstrcmpW
MulDiv
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
FreeResource
CloseHandle
WriteFile
CreateFileW
WaitForSingleObject
WideCharToMultiByte
GetPrivateProfileStringW
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
SetConsoleCtrlHandler
FindResourceW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
ExitProcess
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
FatalAppExitA
HeapCreate
GetStartupInfoW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
WriteConsoleA
GetConsoleOutputCP
InterlockedExchange
WriteConsoleW
GetTimeZoneInformation
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetACP
GetLocaleInfoA
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetSystemTimeAsFileTime

user32

UnregisterClassA
PeekMessageW
GetMessageW
TranslateMessage
CharNextW
DefWindowProcW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetParent
SetWindowLongW
GetWindowLongW
ShowWindow
CreateAcceleratorTableW
GetSystemMetrics
LoadImageW
PostQuitMessage
GetCursorPos
GetWindowRect
SystemParametersInfoW
MapWindowPoints
IsDialogMessageW
SetWindowContextHelpId
PostMessageW
CreateWindowExW
MapDialogRect
IsWindow
SendMessageW
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
CallWindowProcW
FillRect
ReleaseCapture
GetClassNameW
GetDlgItem
DestroyWindow
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
GetSysColor
CreateDialogIndirectParamW
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
DispatchMessageW

gdi32

GetStockObject
GetObjectW
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC

advapi32

RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize

oleaut32

CreateErrorInfo
SetErrorInfo
GetErrorInfo
VariantChangeType
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VarUI4FromStr
SysStringByteLen
VariantInit

shlwapi

PathFileExistsA

comctl32

InitCommonControlsEx

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b62c1e37720c5b9e17bf1919d5b9f4da

Headers

File Characteristics

PDB Paths

Imports

wininet

shell32

dbghelp

kernel32

user32

gdi32

advapi32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 212KB - Virtual size: 212KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 268KB - Virtual size: 268KB

.text
Size: 212KB - Virtual size: 212KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 268KB - Virtual size: 268KB