2024-10-12_1f76c23d7965902c23a901cec543464e_magniber_revil | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_1f76c23d7965902c23a901cec543464e_magniber_revil
Size

4.2MB
MD5

1f76c23d7965902c23a901cec543464e
SHA1

d0a48cb5eed2076205fde00bd7a1118d96433e27
SHA256

f2fe9a3aef5168b8d2b6e2f04ad5cb3b5ecac410ddf89dbbb81ef20a20b7af28
SHA512

d12158362ab945070a30bb1dd947f840e4fc8d952db87dac3c6f19e0908c544620b9ae09547ea80f50ff24ee763e1d7edcd0389460bdcaa961ba045df718f78d
SSDEEP

49152:IJm7SqSqofHLvb6yJ6b+o6mpCt+O7bGK+yMLvh8jGdO7uMpgakJCLAzyTktPcQD1:IJmmJHLvu+6b7obGfdO7uMpgJATkKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_1f76c23d7965902c23a901cec543464e_magniber_revil

Files

2024-10-12_1f76c23d7965902c23a901cec543464e_magniber_revil
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 958KB - Virtual size: 957KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 226KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ