2024-10-09_69105aac1721ab30d7e0062487476bdf_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_69105aac1721ab30d7e0062487476bdf_magniber
Size

1.9MB
MD5

69105aac1721ab30d7e0062487476bdf
SHA1

2e5d1e314c91da727236135fe7c0dcb9cef3dc15
SHA256

8c43fc66e005d616cc1442dbbdc3ae6cc8997c0b7cd9f63cb16538673542b65b
SHA512

02acb993ff243c1c287db976b79cd853ae3d1b5123c0fc6febd58b36ab3cd80e8e163b45053a43cdb27b9eb39d1964f0b86969bd1bf21f3ed3715f4c69ab7459
SSDEEP

49152:aYllLKhU4pdSNcrrZ8xNzP9dGb01REAw:a2aS9Q0XHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-09_69105aac1721ab30d7e0062487476bdf_magniber

Files

2024-10-09_69105aac1721ab30d7e0062487476bdf_magniber
.exe windows:6 windows x86 arch:x86

0f470728c84ef97184244f271a93d017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\用户目录\我的文档\火山源码\内存DLL永久注入\_int\内存DLL永久注入\debug\win32\debuger\内存DLL永久注入.pdb

Imports

kernel32

GetSystemDirectoryW
GetVersionExW
VirtualQuery
GetModuleFileNameW
GlobalFlags
LocalFree
FormatMessageW
CopyFileW
IsBadReadPtr
IsBadWritePtr
SetSystemPowerState
MultiByteToWideChar
WideCharToMultiByte
GenerateConsoleCtrlEvent
GetQueuedCompletionStatus
SetEvent
ResetEvent
CreateEventW
Sleep
CreateThread
SetThreadPriority
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetLocalTime
SetLocalTime
FileTimeToSystemTime
LoadLibraryExW
lstrcmpiW
VerSetConditionMask
VerifyVersionInfoW
CreateFileW
FlushFileBuffers
GetStringTypeW
SetStdHandle
HeapQueryInformation
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
OpenProcess
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileSizeEx
GetConsoleOutputCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetCurrentThread
SetConsoleCtrlHandler
WriteFile
HeapValidate
GetCommandLineA
WriteConsoleW
GetFileType
GetStdHandle
GetModuleHandleExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
QueryPerformanceCounter
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
CreateProcessW
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
WaitForSingleObject
PeekNamedPipe
CreatePipe
CloseHandle
RemoveDirectoryW
ReadFile
GetFileAttributesExW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
GetSystemInfo
SetCurrentDirectoryW
GetCommandLineW
GetUserDefaultLCID
LoadLibraryW
GetProcAddress
FreeLibrary
FindResourceW
SizeofResource
LockResource
LoadResource
FreeResource
GetTickCount
ExitProcess
DebugBreak
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalAlloc
OutputDebugStringW
IsBadStringPtrW
GetModuleHandleW
GetCurrentThreadId
LeaveCriticalSection
IsDebuggerPresent
IsBadStringPtrA
TryEnterCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetEndOfFile
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
SetLastError
GetLastError
RaiseException
FindFirstFileExW
DecodePointer

user32

GetClassInfoExW
RegisterClassExW
PostQuitMessage
CharNextW
wsprintfW
GetCursorPos
TrackPopupMenu
DeleteMenu
ModifyMenuW
AppendMenuW
CallWindowProcW
GetMenuItemCount
GetSubMenu
EnableMenuItem
CheckMenuItem
DestroyMenu
IsWindowVisible
CreateMenu
GetMenu
TranslateAcceleratorW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetDlgItem
GetSysColor
FillRect
IsMenu
InsertMenuW
IsChild
IsIconic
UnregisterClassW
MessageBoxW
IsWindow
DestroyWindow
SetWindowPos
InvalidateRect
GetWindowLongW
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
GetNextDlgTabItem
GetDlgCtrlID
SetFocus
GetFocus
IsWindowEnabled
SetMenu
GetSystemMenu
DrawIcon
BeginPaint
EndPaint
SetWindowRgn
GetWindowTextW
GetWindowTextLengthW
IntersectRect
IsRectEmpty
GetClassNameW
GetLastActivePopup
IsDialogMessageW
IsZoomed
RedrawWindow
ClientToScreen
WinHelpW
ScreenToClient
SetRect
GetTopWindow
DestroyIcon
CreatePopupMenu
GetMonitorInfoW
MonitorFromWindow
EnumDisplaySettingsW
GetWindowThreadProcessId
EnumWindows
PeekMessageW
DefWindowProcW
SendMessageW
ShowWindow
GetKeyState
EnableWindow
SetWindowTextW
AdjustWindowRectEx
SetCursor
GetWindow
GetSystemMetrics
GetDC
GetWindowDC
ReleaseDC
GetClientRect
GetWindowRect
LoadStringW
PostMessageW
RegisterClassW
GetClassInfoW
CreateWindowExW
GetActiveWindow
SetTimer
SetPropW
GetPropW
RemovePropW
GetDesktopWindow
GetParent
SetForegroundWindow
SetActiveWindow
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
MoveWindow
WaitForInputIdle
AttachThreadInput
ExitWindowsEx
CopyImage
LoadImageW
LoadIconW
LoadCursorW

gdi32

GetTextExtentPoint32W
CreateSolidBrush
SetBkColor
SetTextColor
CreateEllipticRgn
CreateRoundRectRgn
GetClipBox
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateHatchBrush
CreateFontIndirectW
CreateRectRgn
ExtCreateRegion
GetObjectType
GetPixel
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
SetMapMode
SetPixel
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
GetObjectW
SetDIBColorTable
CreateDIBSection
GdiAlphaBlend
SetStretchBltMode
StretchBlt
SelectPalette
SelectObject
RealizePalette
GetSystemPaletteEntries
GetStockObject
GetDIBits
GetDeviceCaps
DeleteDC
CreatePalette
CreateCompatibleDC
DeleteObject
CreatePatternBrush
CreateCompatibleBitmap
BitBlt

advapi32

RegSetValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
OpenProcessToken
RegQueryValueExW
RegQueryValueW
RegOpenKeyExW

shell32

ShellExecuteW
DragAcceptFiles
DragFinish
DragQueryFileW
Shell_NotifyIconW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
OleRun
CLSIDFromProgID
IIDFromString
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal

oleaut32

VarUI4FromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
OleCreateFontIndirect
GetActiveObject
RegisterTypeLi
LoadTypeLi
LHashValOfNameSys
VarCmp
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysStringLen
SysAllocString
SysFreeString
OleCreatePictureIndirect

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked
InitCommonControlsEx

uxtheme

SetWindowTheme

ws2_32

WSACleanup
WSAStartup

gdiplus

GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipBitmapUnlockBits
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipBitmapLockBits
GdipDeleteGraphics
GdipDrawImageRectI
GdipSetCompositingMode
GdipGetImageHeight

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f470728c84ef97184244f271a93d017

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

uxtheme

ws2_32

gdiplus

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 690KB - Virtual size: 689KB

.data Size: 36KB - Virtual size: 51KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 690KB - Virtual size: 689KB

.data
Size: 36KB - Virtual size: 51KB

.rsrc
Size: 56KB - Virtual size: 55KB