2024-10-03_ffe6f42114f324098364ae48179668b2_floxif_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-03_ffe6f42114f324098364ae48179668b2_floxif_magniber
Size

9.4MB
MD5

ffe6f42114f324098364ae48179668b2
SHA1

5d0592212949f7f39ec1aeef89fc46ddc305d283
SHA256

92adf0bec918987999e1664d5c6e2ab0fb686f8061a38c018b2a6d2912c32181
SHA512

5f1cf6f1aa54480ce88fda043da81b2d36c29128e836dfce4f6f599f118c32cd8f4d66c01c1e49da3b91ffe87901fb2a7029de14fbdbf98101b7f0e5c2cd28bc
SSDEEP

196608:fDRWgnYocWO/vYA+8yJcQe/3vVar52YazcgR18uEOZ7P:sYnJ7G3vVCawQquEm7P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-03_ffe6f42114f324098364ae48179668b2_floxif_magniber

Files

2024-10-03_ffe6f42114f324098364ae48179668b2_floxif_magniber
.exe windows:5 windows x86 arch:x86

fa898458ebfbdb823e031be524e0f06b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegFlushKey
RegOpenKeyW
RegSetValueExW

api-ms-win-downlevel-shlwapi-l1-1-0

PathRemoveFileSpecW

bass

BASS_ChannelGetDevice
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelSetAttribute
BASS_ChannelSetPosition
BASS_ChannelStop
BASS_ErrorGetCode
BASS_Free
BASS_GetDeviceInfo
BASS_GetInfo
BASS_Init
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamFree

d3d9

Direct3DCreate9

gdi32

CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetStockObject
SelectObject
SetDIBits
SetStretchBltMode
StretchBlt

kernel32

AreFileApisANSI
CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateFileW
CreatePipe
CreateProcessA
DecodePointer
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTempPathA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MoveFileExW
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetFilePointer
SetFilePointerEx
SetLastError
SetProcessAffinityMask
SetStdHandle
SetThreadExecutionState
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile

ole32

CoCreateInstance
CoInitialize

shell32

ord175
SHFileOperationW
SHGetFolderPathW
ShellExecuteW

user32

CreateWindowExW
DefWindowProcW
DispatchMessageW
EnumDisplayDevicesW
EnumDisplaySettingsW
FindWindowW
GetClientRect
GetCursor
GetForegroundWindow
GetSystemMetrics
GetWindowLongW
GetWindowRect
LoadCursorW
LoadIconW
MessageBoxW
PeekMessageW
PostQuitMessage
RegisterClassExW
SendMessageW
SetCursor
SetFocus
SetForegroundWindow
SetWindowLongW
SetWindowPos
ShowWindow
TrackMouseEvent
TranslateMessage
UnregisterClassW
UpdateWindow

winmm

timeGetTime
waveOutGetNumDevs

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text1
Size: 704KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Geddon
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fa898458ebfbdb823e031be524e0f06b

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

api-ms-win-downlevel-shlwapi-l1-1-0

bass

d3d9

gdi32

kernel32

ole32

shell32

user32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 460KB - Virtual size: 460KB

.data Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 148KB - Virtual size: 148KB

.text1 Size: 704KB - Virtual size: 704KB

.adata Size: 64KB - Virtual size: 64KB

.data1 Size: 128KB - Virtual size: 128KB

.reloc1 Size: 64KB - Virtual size: 64KB

.pdata Size: 3.6MB - Virtual size: 3.6MB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.Geddon Size: 8KB - Virtual size: 8KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 460KB - Virtual size: 460KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 148KB - Virtual size: 148KB

.text1
Size: 704KB - Virtual size: 704KB

.adata
Size: 64KB - Virtual size: 64KB

.data1
Size: 128KB - Virtual size: 128KB

.reloc1
Size: 64KB - Virtual size: 64KB

.pdata
Size: 3.6MB - Virtual size: 3.6MB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.Geddon
Size: 8KB - Virtual size: 8KB