2024-09-16_163197198eea18070d76eb4a5d06494b_floxif_magniber

Sharing

Copy URL Twitter E-mail

General

Target
2024-09-16_163197198eea18070d76eb4a5d06494b_floxif_magniber
Size 4.7MB
Sample240916-srz65svdpm
SHA256 a61c854176f852e2391ce87ff9e3d61a9fdf8e5400397d3131fb27d750e61e5d
MD5 163197198eea18070d76eb4a5d06494b
SHA1 35013ade04cd4bb3d1cfc5419a9e81d0580665e7
SHA512 ab52c4645b7cd41ae14548c53d9f1fa3e623b4a20b8c33ed0cf3a93d3b3e5be1146d5f1a4ae2d3f28a5f99d8afa508104cc11dd45952f901154d29673dc3be19
SSDEEP 98304:wTv98udn7jVemDxOQ+5tusqzoKB6HFiPlKQK4oOXJVW:wxT7jVnxO5ssq6Md+uJo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-16_163197198eea18070d76eb4a5d06494b_floxif_magniber

File Explorer

2024-09-16_163197198eea18070d76eb4a5d06494b_floxif_magniber

.exe 4.7MB

2024-09-16_163197198eea18070d76eb4a5d06494b_floxif_magniber

IMPHASH a215b529a6426ad298ca393c7a359bd2
SHA256 a61c854176f852e2391ce87ff9e3d61a9fdf8e5400397d3131fb27d750e61e5d
MD5 163197198eea18070d76eb4a5d06494b
SHA1 35013ade04cd4bb3d1cfc5419a9e81d0580665e7
SHA512 ab52c4645b7cd41ae14548c53d9f1fa3e623b4a20b8c33ed0cf3a93d3b3e5be1146d5f1a4ae2d3f28a5f99d8afa508104cc11dd45952f901154d29673dc3be19
SSDEEP 98304:wTv98udn7jVemDxOQ+5tusqzoKB6HFiPlKQK4oOXJVW:wxT7jVnxO5ssq6Md+uJo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5645343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

GetLastError CloseHandle CreateMutexA ContinueDebugEvent ResumeThread OutputDebugStringA OutputDebugStringW SetThreadContext GetThreadContext WaitForDebugEvent WriteProcessMemory UnmapViewOfFile InitializeCriticalSection FreeConsole CreateThread SuspendThread DebugActiveProcess SetEnvironmentVariableA GetCurrentProcessId MapViewOfFile DuplicateHandle GetCurrentProcess CreateFileMappingA GetVersionExA GetProcAddress LoadLibraryA GetEnvironmentVariableA VirtualProtect VirtualAlloc SetLastError ReleaseMutex WaitForSingleObject OpenMutexA SetErrorMode GetShortPathNameA GetModuleFileNameA GetShortPathNameW GetModuleFileNameW GlobalUnlock GlobalLock GlobalAlloc WideCharToMultiByte IsBadReadPtr GlobalAddAtomA GlobalAddAtomW GlobalFree GlobalGetAtomNameA GlobalDeleteAtom GlobalGetAtomNameW ExitProcess GetLocalTime MultiByteToWideChar SearchPathA GetTempPathA GetTempPathW GetTempFileNameA GetTempFileNameW GetWindowsDirectoryA CreateFileA GetPrivateProfileStringA WritePrivateProfileStringA DeleteFileA VirtualProtectEx CreateProcessA GetStartupInfoA GetCommandLineA SetEvent CreateEventA GetSystemTimeAsFileTime GetCurrentThreadId ReadFile GetFileSize CompareStringA SetEndOfFile FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoW GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetTimeZoneInformation HeapSize FreeLibrary SetConsoleCtrlHandler QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapReAlloc FatalAppExitA VirtualFree HeapCreate HeapDestroy GetStdHandle WriteFile TlsFree TlsSetValue TlsAlloc TlsGetValue CompareStringW IsValidCodePage GetOEMCP GetACP LCMapStringW LCMapStringA GetCPInfo GetDateFormatA GetTimeFormatA GetProcessHeap HeapAlloc HeapFree IsDebuggerPresent SetUnhandledExceptionFilter EnterCriticalSection ReadProcessMemory LeaveCriticalSection GetExitCodeProcess GetCurrentThread SetThreadPriority Sleep GetTickCount VirtualQueryEx MoveFileA GetModuleHandleA UnhandledExceptionFilter TerminateProcess RaiseException InterlockedIncrement InterlockedDecrement InterlockedExchange DeleteCriticalSection InterlockedCompareExchange GetFileAttributesA GetFileAttributesW GetFileAttributesExW CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW GetFileAttributesExA GetCurrentDirectoryA SetCurrentDirectoryA FindClose GetFileTime SetFileTime GetDiskFreeSpaceExW GetFullPathNameW RemoveDirectoryW DeleteFileW CreateDirectoryW CreateHardLinkW GetDiskFreeSpaceExA GetFullPathNameA RemoveDirectoryA CreateDirectoryA CreateHardLinkA MoveFileW CopyFileW CopyFileA GetFileInformationByHandle FindFirstFileW FindNextFileW FindFirstFileA FindNextFileA LocalFree FormatMessageA RtlUnwind

user32

CreateWindowExA MessageBoxA DispatchMessageA BeginPaint EndPaint KillTimer GetAsyncKeyState DefDlgProcA DrawTextA CreateDialogParamA RegisterClassExA DialogBoxParamA GetWindowTextLengthA GetWindowTextA SetWindowTextA CreateDialogIndirectParamA ShowWindow UpdateWindow InSendMessage UnpackDDElParam FreeDDElParam DefWindowProcW DefWindowProcA LoadCursorA RegisterClassW CreateWindowExW RegisterClassA GetDlgItem GetWindowThreadProcessId SendMessageW PeekMessageA EnumWindows IsWindowUnicode PackDDElParam PostMessageW PostMessageA IsWindow LoadStringA LoadStringW FindWindowA DestroyWindow GetDesktopWindow GetSystemMetrics MoveWindow SendMessageA SetPropA EnumThreadWindows GetPropA WaitForInputIdle SetTimer GetMessageA TranslateMessage

gdi32

SelectObject BitBlt DeleteObject CreatePalette CreateDCA SelectPalette RealizePalette CreateDIBitmap DeleteDC CreateCompatibleDC

comdlg32

GetSaveFileNameA GetOpenFileNameA

Name

CODE

Size

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

63KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

20B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

256KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

656KB

Virtual Size

704KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

52KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

116KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc1

Size

36KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

168KB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2024-09-16_163197198eea18070d76eb4a5d06494b_floxif_magniber

kernel32

user32

gdi32

comdlg32

generic