2024-11-21_458b103f3e79b6e9abe0316f4903bec5_hijackloader_luca-stealer_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-11-21_458b103f3e79b6e9abe0316f4903bec5_hijackloader_luca-stealer_magniber
Size

9.9MB
MD5

458b103f3e79b6e9abe0316f4903bec5
SHA1

0016d556c9eea990fe1256d4db13798d74920cec
SHA256

e7f9b1b7ad1e539ff24d86a6e93c20f99e21cdf0a99ae27bba06c8b8440b98af
SHA512

edb202eb7ae97d973c47cd8dba23681b1c0f1a80069824cf97befdb89529748582b8d5ad3ac8e0b3e4e1c7ae36ebf06abada8625128be4026e71a16a464d3eea
SSDEEP

196608:hCYQFwOT2mfUCL6dZefObkEOHhS7C752k6JWu80hWuw4OgboQnG:hUFwOTLUCL6dZem4EO47C75b6JWuVWuq

Score

1^/10

Malware Config

Signatures

Files

2024-11-21_458b103f3e79b6e9abe0316f4903bec5_hijackloader_luca-stealer_magniber
.exe windows:4 windows x86 arch:x86

a7d3b38a275dc1689652e4de7483c8d1

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

26/09/2024, 00:00

Not After

25/11/2035, 23:59

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ff
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

08/04/2024, 00:00

Not After

10/04/2027, 23:59

Subject

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=Dummy issuer

Not Before

01/01/2013, 10:00

Not After

01/04/2013, 10:00

Subject

CN=Dummy certificate

28:08:0d:60:34:c5:2b:67:99:f3:ab:06:e9:b8:f1:fd:74:1e:c2:51:de:ec:41:d1:ba:ee:b2:e5:86:7e:97:21
Signer

Actual PE Digest

28:08:0d:60:34:c5:2b:67:99:f3:ab:06:e9:b8:f1:fd:74:1e:c2:51:de:ec:41:d1:ba:ee:b2:e5:86:7e:97:21

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
SetUnhandledExceptionFilter
GetDriveTypeA
GetCPInfo
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
RaiseException
CompareStringA
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetSystemTime
RtlUnwind
GetSystemTimeAsFileTime
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEnvironmentVariableW
HeapFree
HeapAlloc
HeapReAlloc
GetVersion
GetStartupInfoW
GetModuleHandleA
SetEndOfFile
GetACP
GetOEMCP
SetEnvironmentVariableA
GetTempFileNameW
SetVolumeLabelW
HeapDestroy
CreateMutexW
GetTickCount
GetProfileStringW
GetLocaleInfoW
GetNumberFormatW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetFullPathNameW
GetDiskFreeSpaceW
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetUserDefaultLangID
GetSystemDirectoryW
TerminateProcess
GetTimeFormatW
GetDateFormatW
GetUserDefaultLCID
EnumDateFormatsW
EnumTimeFormatsW
GetShortPathNameW
GetPrivateProfileStringW
GetLocalTime
GetFileSize
SetFilePointer
WaitForMultipleObjects
PeekNamedPipe
ReadFile
CreateProcessW
SetEvent
WaitForSingleObject
TerminateThread
CreatePipe
DuplicateHandle
CreateEventW
GetLastError
GetCurrentProcessId
MulDiv
SizeofResource
GetTimeZoneInformation
lstrcpynA
GetLogicalDrives
InitializeCriticalSection
DeleteCriticalSection
GlobalHandle
FreeResource
Sleep
CreateThread
ExitProcess
SetLastError
CompareStringW
lstrcpyW
FindResourceW
LoadResource
LockResource
GetCurrentProcess
FlushInstructionCache
GetLogicalDriveStringsW
GetDriveTypeW
GetFileAttributesW
lstrcatW
lstrcmpiW
lstrcmpW
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
CreateDirectoryW
WideCharToMultiByte
GetModuleFileNameW
CreateFileW
WriteFile
CloseHandle
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
GetTempPathW
FreeLibrary
GetVersionExW
MultiByteToWideChar
OutputDebugStringW
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
GetWindowsDirectoryW
GetProcAddress
lstrlenA
GetModuleHandleW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
lstrcpynW
lstrlenW
LoadLibraryW
InterlockedExchange

user32

GetScrollPos
MoveWindow
SetScrollInfo
IsRectEmpty
SetScrollPos
DrawIconEx
GetMenuDefaultItem
GetSystemMenu
DrawFrameControl
CallNextHookEx
GetSysColorBrush
ModifyMenuW
WindowFromPoint
IsMenu
TrackPopupMenuEx
PeekMessageW
GetWindowThreadProcessId
SetMenuItemInfoW
SetWindowsHookExW
UnhookWindowsHookEx
MessageBeep
InsertMenuW
CheckMenuItem
EnableMenuItem
GetWindowDC
TranslateAcceleratorW
SetWindowLongW
SendMessageW
CallWindowProcW
GetWindowLongW
wsprintfW
SetWindowTextW
SetTimer
ShowWindow
GetDlgItem
SetWindowPos
MapWindowPoints
IsDialogMessageW
LoadBitmapW
GetIconInfo
SetRect
DrawEdge
SendMessageA
TrackMouseEvent
GetMessagePos
CreatePopupMenu
TrackPopupMenu
IntersectRect
CreateDialogParamW
FrameRect
InflateRect
PostMessageW
CopyRect
IsWindowVisible
SetClassLongW
GetKeyState
ClientToScreen
AppendMenuW
LoadStringA
RemoveMenu
DrawMenuBar
GetMenuStringW
DefFrameProcW
TranslateMDISysAccel
SetForegroundWindow
SetMenu
LoadAcceleratorsW
BringWindowToTop
DeleteMenu
LoadIconW
DefMDIChildProcW
GetClassLongW
IsDlgButtonChecked
CheckDlgButton
CreateDialogIndirectParamW
GetWindowPlacement
mouse_event
MenuItemFromPoint
SetWindowPlacement
GetClientRect
SetMenuDefaultItem
GetWindowRect
GetWindow
GetParent
LoadImageW
GetSystemMetrics
GetFocus
FindWindowExW
RegisterClipboardFormatW
KillTimer
PostQuitMessage
EndDialog
GetAsyncKeyState
EnumChildWindows
MessageBoxW
CharNextW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
LoadStringW
SetRectEmpty
DefWindowProcW
TranslateMessage
DispatchMessageW
GetScrollInfo
DrawIcon
RegisterClassW
ScrollWindowEx
IsZoomed
SendMessageTimeoutW
GetMessageW
SetParent
InvalidateRgn
CreateAcceleratorTableW
GetDesktopWindow
RedrawWindow
IsChild
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
DialogBoxIndirectParamW
IsWindowEnabled
GetSysColor
DrawFocusRect
FillRect
DrawTextW
GetClassNameW
CreateCursor
GetWindowTextLengthW
OffsetRect
LoadMenuW
DestroyMenu
ShowCaret
RemovePropW
EnableWindow
ScreenToClient
SetDlgItemTextW
GetWindowTextW
GetDlgCtrlID
DialogBoxParamW
GetActiveWindow
CharLowerW
ReleaseDC
GetDC
GetMenuItemInfoW
GetMenuItemCount
GetSubMenu
CreateWindowExW
DestroyCursor
GetCursorPos
ReleaseCapture
GetCapture
SetCapture
SetFocus
UpdateWindow
SetCursor
PtInRect
InvalidateRect
BeginPaint
DestroyWindow
IsWindow
EndPaint
CharUpperW
EnumWindows
SystemParametersInfoW

gdi32

CreateEnhMetaFileW
Rectangle
SetPixelV
GetBkColor
DPtoLP
LPtoDP
GetBitmapDimensionEx
GetEnhMetaFileHeader
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetViewportExtEx
GetWindowExtEx
CloseEnhMetaFile
SelectClipRgn
DeleteEnhMetaFile
EndDoc
AbortDoc
EndPage
StartPage
ResetDCW
StartDocW
SetStretchBltMode
StretchBlt
GetCurrentObject
GetPixel
SetDIBitsToDevice
SetPixel
CreateDCW
SetViewportOrgEx
GetViewportOrgEx
SetBrushOrgEx
CreateBitmap
CreatePatternBrush
PatBlt
GetDIBits
GetTextExtentPoint32W
GetClipBox
SaveDC
ExtTextOutW
RestoreDC
CreatePen
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
OffsetWindowOrgEx
SetWindowOrgEx
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
DeleteDC
CreateFontIndirectW
DeleteObject
GetObjectW
CreateDIBSection
CreateCompatibleDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
OffsetViewportOrgEx
SetBkMode
CreateSolidBrush

winspool.drv

GetPrinterW
OpenPrinterW
ClosePrinter

comdlg32

GetOpenFileNameW
PageSetupDlgW
PrintDlgW
GetSaveFileNameW

advapi32

RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
GetUserNameW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CryptCreateHash
CryptAcquireContextW
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptGetHashParam
GetTokenInformation
RegEnumKeyExW

shell32

ord21
SHBrowseForFolderW
ord88
ExtractIconExW
SHGetSettings
ord25
DragQueryFileW
ord17
ord16
SHGetFileInfoW
SHFileOperationW
DragAcceptFiles
ord155
ord18
SHGetDesktopFolder
ord4
ord2
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation
ord190

ole32

RegisterDragDrop
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance
CoInitialize
CoUninitialize
OleSetClipboard
RevokeDragDrop
CoSetProxyBlanket

oleaut32

VariantTimeToSystemTime
VariantChangeType
OleCreatePictureIndirect
DispCallFunc
SafeArrayDestroy
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
LoadRegTypeLi
SysStringLen
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString

comctl32

ImageList_LoadImageW
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetIconSize
ImageList_SetBkColor
InitCommonControlsEx
ImageList_DrawEx
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Destroy
ImageList_Draw
ImageList_AddMasked
ImageList_GetImageInfo
CreateStatusWindowW

msimg32

AlphaBlend

gdiplus

GdipSetImageAttributesGamma
GdipCreateBitmapFromHBITMAP
GdipCloneBrush
GdipCreateFromHDC
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipCreateSolidFill
GdipDeleteBrush
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateHICONFromBitmap
GdipFillPath
GdipCreatePath
GdipAddPathLineI
GdipAddPathArcI
GdipClosePathFigure
GdipDeletePath
GdiplusStartup
GdipSetCompositingQuality
GdipCreateImageAttributes

winmm

timeGetTime

shlwapi

StrCpyW

Sections

.text
Size: 840KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7d3b38a275dc1689652e4de7483c8d1

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04Certificate

Extended Key Usages

Key Usages

0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ffCertificate

Extended Key Usages

Key Usages

01Certificate

28:08:0d:60:34:c5:2b:67:99:f3:ab:06:e9:b8:f1:fd:74:1e:c2:51:de:ec:41:d1:ba:ee:b2:e5:86:7e:97:21Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

gdiplus

winmm

shlwapi

Sections

.text Size: 840KB - Virtual size: 838KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 44KB - Virtual size: 109KB

Shared Size: 4KB - Virtual size: 1KB

.tls Size: 4KB - Virtual size: 16B

.rsrc Size: 864KB - Virtual size: 864KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ff
Certificate

01
Certificate

28:08:0d:60:34:c5:2b:67:99:f3:ab:06:e9:b8:f1:fd:74:1e:c2:51:de:ec:41:d1:ba:ee:b2:e5:86:7e:97:21
Signer

.text
Size: 840KB - Virtual size: 838KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 44KB - Virtual size: 109KB

Shared
Size: 4KB - Virtual size: 1KB

.tls
Size: 4KB - Virtual size: 16B

.rsrc
Size: 864KB - Virtual size: 864KB