Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-25_e4786e813bf9e52db0e25567c934b987_magniber.exe
Resource
win7-20240903-en
Target
2024-09-25_e4786e813bf9e52db0e25567c934b987_magniber
Size
9.3MB
MD5
e4786e813bf9e52db0e25567c934b987
SHA1
8f2d79e0b594d874b2118069d3af4731abecb05c
SHA256
8f8b174d1eb853fa2b098cd505a17762d2230b7a40c1594fe1b0e1c12d077813
SHA512
54c6daa586933c0051e8f3e47f465fad8e20e73f7fd9603b0a1667491717fdc587452d3cfea3e7c74a7cd0da1a08b8319ec6016b0ec4a994698a150a74b709e6
SSDEEP
196608:WPAT419hewKRths2LWczBazlfZvWrqufezvyjwU6t:WNitNBazlBvW2uGzZU6t
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\BuildAgent\work\ff5fabc9ec27ac7d\setupexe\Stardust\setupexe.pdb
ord175
ord169
ord70
ord141
ord190
ord88
ord17
GetModuleFileNameExW
WTSFreeMemory
WTSQuerySessionInformationW
WTSEnumerateProcessesW
LsaEnumerateLogonSessions
LsaGetLogonSessionData
HeapFree
GetCurrentProcess
GetTempPathW
WaitForSingleObject
DuplicateHandle
OpenProcess
GetVersion
GetLastError
OutputDebugStringW
LoadLibraryA
CloseHandle
HeapAlloc
GetProcAddress
LocalFree
GetProcessHeap
FreeLibrary
CreateFileW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
VirtualQuery
GetModuleFileNameW
GetVersionExW
CreateToolhelp32Snapshot
MultiByteToWideChar
Process32NextW
Process32FirstW
LoadLibraryW
GetCurrentProcessId
OpenMutexW
CompareStringW
GetCommandLineW
GetUserDefaultUILanguage
FormatMessageW
DeleteFileW
VerSetConditionMask
VerifyVersionInfoW
lstrlenW
WideCharToMultiByte
LCMapStringW
LockResource
LoadResource
SizeofResource
WriteFile
LoadLibraryExW
FindResourceExA
SetFilePointerEx
FindClose
ExpandEnvironmentStringsW
MoveFileExW
HeapReAlloc
HeapSize
GetTempFileNameW
CreateDirectoryW
GetFileAttributesW
GetModuleFileNameA
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
GetACP
GetModuleHandleExW
ExitProcess
GetStdHandle
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindFirstFileExA
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ProcessIdToSessionId
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetCPInfo
GetLocaleInfoW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LoadStringW
MessageBoxW
MessageBoxExW
EndDialog
SetWindowTextW
SetDlgItemTextW
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItem
EnableWindow
DialogBoxParamW
LsaNtStatusToWinError
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
EqualSid
CopySid
ConvertStringSidToSidW
OpenProcessToken
RegOpenKeyExW
ConvertSidToStringSidW
GetLengthSid
DuplicateTokenEx
RegQueryValueExW
LookupAccountNameW
GetTokenInformation
SHGetFolderPathW
CommandLineToArgvW
StringFromGUID2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ