Static task
static1
Behavioral task
behavioral1
Sample
2024-09-28_c44641c5c7d92bce780cbbb77e898633_hijackloader_magniber_viking.exe
Resource
win7-20240903-en
General
-
Target
2024-09-28_c44641c5c7d92bce780cbbb77e898633_hijackloader_magniber_viking
-
Size
4.7MB
-
MD5
c44641c5c7d92bce780cbbb77e898633
-
SHA1
eaa76dafb333808d17ab156fc0dab07563dee5b7
-
SHA256
d46a602eb44512803bc3ac0b36e98886c687b366b4a77914cf34563007449b01
-
SHA512
f37ac1c6ffb13cfc15f766cb737ff2ae8849b3d4e6de00e22bdecdae47e8438d812d94a92ad115d4443d6427cd4a9429a6d5cbab92512adfe902f0e779f171e1
-
SSDEEP
98304:z+RpKOOSV1teIZ5ys8Ag+7BUqXUahb7oYF9tIwBxurtN3:z+RpPOSdeIZ5yH+7BzLZMYFnIwBxu33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-28_c44641c5c7d92bce780cbbb77e898633_hijackloader_magniber_viking
Files
-
2024-09-28_c44641c5c7d92bce780cbbb77e898633_hijackloader_magniber_viking.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE