2024-09-28_3ad416dd97a724e3cb87eadc1da8570d_hijackloader_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-28_3ad416dd97a724e3cb87eadc1da8570d_hijackloader_magniber
Size

29.1MB
MD5

3ad416dd97a724e3cb87eadc1da8570d
SHA1

dd0fc3995aba90e862c8a11562e1b1d004b4442b
SHA256

d9ddd2763fbdf68ffca57d9104c944fc3ed3f158156e95ada29e74b183353e78
SHA512

b20127a0f8957c173d11fc7d3efa606e402a3ca1bee6501bc6985a63d353aeaefc8d4a6b52968c8b0506360c3fd7fae004835ef5a04c7c4e61aa9912e9125a51
SSDEEP

786432:znjMR4qHLpizyVp/1q1rINsjsq3gazg7ak:zjBqHBV1q1rImjsQxPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-28_3ad416dd97a724e3cb87eadc1da8570d_hijackloader_magniber

Files

2024-09-28_3ad416dd97a724e3cb87eadc1da8570d_hijackloader_magniber
.exe windows:6 windows x86 arch:x86

b5cdc5501116a5933f87b847ea44476c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Programming\Trillian\Windows\6.5\setup\Release\setup.pdb

Imports

kernel32

GetCommandLineW
FindClose
GetExitCodeProcess
CreateThread
CreateProcessA
CreateProcessW
OpenProcess
GetModuleHandleA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalFree
GetUserDefaultLCID
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileSizeEx
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
ReadFile
SetEndOfFile
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapReAlloc
GetCurrentThread
WriteFile
GetStdHandle
SetConsoleCtrlHandler
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
WaitForSingleObject
GetModuleHandleExW
ExitProcess
GetFileType
SetEnvironmentVariableW
GetFullPathNameW
GetDriveTypeW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
CompareStringEx
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
ReleaseMutex
FormatMessageA
LocalFree
Sleep
CloseHandle
SetFileTime
GetLocaleInfoA
WideCharToMultiByte
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
VerifyVersionInfoA
GetComputerNameW
GetComputerNameA
MoveFileExW
MoveFileExA
MoveFileW
MoveFileA
CopyFileW
CopyFileA
WritePrivateProfileStringW
WritePrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntW
GetPrivateProfileIntA
FindResourceA
MulDiv
LoadLibraryW
LoadLibraryA
FindResourceW
LoadLibraryExW
LoadLibraryExA
GetProcAddress
GetLastError
GetModuleFileNameW
GetModuleFileNameA
FreeLibrary
GetVersionExW
CreateEventW
CreateEventA
CreateMutexW
CreateMutexA
OutputDebugStringW
OutputDebugStringA
GetTempPathA
GetTempPathW
RemoveDirectoryW
RemoveDirectoryA
GetFileAttributesW
GetFileAttributesA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
GetCurrentThreadId
DeleteFileW
DeleteFileA
CreateFileW
CreateFileA
CreateDirectoryW
CreateDirectoryA
GetCurrentDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
GetEnvironmentVariableW
GetEnvironmentVariableA
VerSetConditionMask
MultiByteToWideChar
GetProcessHeap
HeapFree
HeapAlloc
IsBadReadPtr
GetVersionExA
GetTimeZoneInformation
WriteConsoleW

user32

GetClientRect
GetShellWindow
GetWindowThreadProcessId
LoadCursorA
LoadIconA
IsDialogMessageA
IsDialogMessageW
DrawIconEx
GetSysColor
GetDC
ReleaseDC
DrawTextW
SetRect
OffsetRect
GetDesktopWindow
GetKeyboardLayoutNameA
SendMessageA
SendMessageW
RegisterClassA
RegisterClassW
UnregisterClassA
UnregisterClassW
RegisterClassExA
RegisterClassExW
CreateWindowExA
CreateWindowExW
DialogBoxParamA
DialogBoxParamW
GetDlgItem
RegisterClipboardFormatA
RegisterClipboardFormatW
CharUpperW
InsertMenuA
InsertMenuW
AppendMenuA
AppendMenuW
DrawTextA
SetPropA
SetPropW
GetPropA
GetPropW
RemovePropA
RemovePropW
SetWindowTextA
SetWindowTextW
GetWindowTextA
GetWindowTextW
MessageBoxA
MessageBoxW
FrameRect
FindWindowA
FindWindowW
GetClassNameA
GetClassNameW
LoadImageA
LoadImageW
MonitorFromWindow
wsprintfA
GetMessageA
PostMessageA
GetMessageW
TranslateMessage
DispatchMessageA
LockWindowUpdate
InvalidateRect
EndPaint
BeginPaint
SetForegroundWindow
UpdateWindow
GetSystemMetrics
IsWindowEnabled
EnableWindow
KillTimer
SetTimer
SetFocus
SendDlgItemMessageA
GetDlgItemTextW
SetDlgItemTextW
SetWindowPos
ShowWindow
DestroyWindow
PostQuitMessage
DefWindowProcW
DefWindowProcA
DispatchMessageW

gdi32

TextOutA
MoveToEx
LineTo
GetTextExtentPoint32A
GetRgnBox
GetClipRgn
Ellipse
CreateRectRgn
CreateSolidBrush
CreateFontW
AddFontResourceW
AddFontResourceA
GdiFlush
GetTextExtentPoint32W
GetObjectA
CreateDIBSection
SetTextColor
SetStretchBltMode
TextOutW
SetPixel
SetBkMode
SetBkColor
SelectObject
GetTextColor
GetPixel
GetDIBits
GetCurrentObject
GetBkMode
GetBkColor
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
GetStockObject
SetDIBits
Polygon
CreatePalette
GetDeviceCaps
RealizePalette
SelectPalette
StretchBlt
SetDIBitsToDevice
CreatePen
CreateFontA

comdlg32

ChooseFontA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
ChooseFontW

advapi32

RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
ConvertSidToStringSidA
GetTokenInformation
OpenProcessToken
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclA
FreeSid
AllocateAndInitializeSid
RegSetValueExW

shell32

Shell_NotifyIconA
CommandLineToArgvW
SHGetFolderLocation
ord155
SHBrowseForFolderA
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
SHGetPathFromIDListW
DragQueryFileA
DragQueryFileW
ShellExecuteA
ShellExecuteW
ShellExecuteExA
SHGetPathFromIDListA
ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoA
SHGetFileInfoW
SHGetMalloc

ole32

StringFromGUID2
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
OleInitialize
CoCreateGuid

wintrust

WinVerifyTrust

gdiplus

GdipCreateLineBrushI
GdipCreateBitmapFromStream
GdipFillPath
GdipFillEllipseI
GdipFillPolygonI
GdipFillRectangleI
GdipDrawPath
GdipDrawPolygonI
GdipDrawEllipseI
GdipDrawLineI
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipSetCompositingMode
GdipSetPenLineCap197819
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathArcI
GdipDrawImageRectI
GdipClosePathFigure
GdipResetPath
GdipDeletePath
GdipCreateBitmapFromStreamICM
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectRect
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetImageAttributesWrapMode
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipAddPathLineI
GdipCreatePath

Sections

.text
Size: 726KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5cdc5501116a5933f87b847ea44476c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

wintrust

gdiplus

Sections

.text Size: 726KB - Virtual size: 725KB

.rdata Size: 149KB - Virtual size: 149KB

.data Size: 11KB - Virtual size: 23KB

.didat Size: 512B - Virtual size: 56B

.rsrc Size: 54KB - Virtual size: 53KB

.reloc Size: 29KB - Virtual size: 29KB

.text
Size: 726KB - Virtual size: 725KB

.rdata
Size: 149KB - Virtual size: 149KB

.data
Size: 11KB - Virtual size: 23KB

.didat
Size: 512B - Virtual size: 56B

.rsrc
Size: 54KB - Virtual size: 53KB

.reloc
Size: 29KB - Virtual size: 29KB