2024-12-12_86f176c86c9fe94f44afd1bd42a7206a_luca-stealer_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-12_86f176c86c9fe94f44afd1bd42a7206a_luca-stealer_magniber
Size

4.2MB
MD5

86f176c86c9fe94f44afd1bd42a7206a
SHA1

d69521c9176b44d540d96daabb26941e4990fe48
SHA256

be996dd1b3eabcf0bf0a5162e1048b34e6157dd902da2aa8359b7ae1e919a851
SHA512

2d3ddb99b7c301b60ba8f28410578326fbb5d36343561548dd2a05f2288e0b464a61a23fabf86445f1717efb951a4983ff3e52fbfae988af806c86b256902970
SSDEEP

98304:6v4YUrroxp00AXmWqUZggFlivJ8FLOAkGkzdnEVomFHKnPvDy:6v4trrsKFlivGFLOyomFHKnPvDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-12_86f176c86c9fe94f44afd1bd42a7206a_luca-stealer_magniber

Files

2024-12-12_86f176c86c9fe94f44afd1bd42a7206a_luca-stealer_magniber
.exe windows:5 windows x86 arch:x86

c32fbe956cbbfc74cb5908923615b178

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\work\LenovoPlayer\PDB\LePopAdSe.pdb

Imports

winhttp

WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetACP
ExitProcess
SetEnvironmentVariableA
CreateTimerQueue
SetStdHandle
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringW
TryEnterCriticalSection
OutputDebugStringW
GetStdHandle
WriteConsoleW
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
GetStartupInfoW
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetUserDefaultLCID
SearchPathW
GetProfileIntW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
VirtualProtect
GetFileAttributesW
GetTempPathW
GetTempFileNameW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
DeleteFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
LoadLibraryA
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
GetCurrentProcessId
GlobalAddAtomW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
ResumeThread
SetThreadPriority
GetModuleHandleA
FreeResource
OutputDebugStringA
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
InitializeCriticalSection
FindResourceExW
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
WideCharToMultiByte
MultiByteToWideChar
GetVersionExW
CreateDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntW
GetModuleHandleW
GetModuleFileNameA
GetSystemInfo
GetLocalTime
TerminateProcess
GetCurrentProcess
GetThreadTimes
GetCurrentThread
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetWindowsDirectoryW
LoadLibraryW
GetTickCount
Sleep
GetCurrentThreadId
GetCommandLineW
GetModuleFileNameW
LoadLibraryExW
CloseHandle
GetProcAddress
FreeLibrary
FindResourceW
lstrlenW
lstrcmpiW
SizeofResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
LockResource
DecodePointer
RegisterWaitForSingleObject
UnregisterWait
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GetFileType

user32

SetScrollInfo
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
IsDialogMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetDlgCtrlID
CheckDlgButton
MoveWindow
ShowWindow
IntersectRect
ScreenToClient
SetCursorPos
SetParent
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
SetClassLongW
UnregisterClassW
SendMessageW
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
DrawIconEx
IsRectEmpty
MonitorFromPoint
InflateRect
FillRect
DrawFocusRect
RedrawWindow
SetWindowRgn
DrawStateW
DrawFrameControl
DrawEdge
RegisterWindowMessageW
EnumDisplayMonitors
GetMonitorInfoW
GetScrollInfo
CopyRect
SetRectEmpty
GetSysColorBrush
GetSysColor
MapWindowPoints
GetClassInfoW
DefWindowProcW
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
WinHelpW
MonitorFromWindow
InvalidateRect
RealChildWindowFromPoint
NotifyWinEvent
SendDlgItemMessageA
CopyImage
DeleteMenu
DestroyIcon
CharUpperW
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
CharNextW
CopyAcceleratorTableW
GetLastActivePopup
GetWindowThreadProcessId
InvalidateRgn
SetRect
GetNextDlgGroupItem
MessageBeep
ToUnicodeEx
GetKeyboardLayout
GetAsyncKeyState
GetKeyboardState
MapVirtualKeyW
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
TrackMouseEvent
IsZoomed
LoadMenuW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
LoadImageW
UnionRect
DestroyMenu
EnableScrollBar
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuItemInfoW
GetMenuDefaultItem
SetLayeredWindowAttributes
IsIconic
SetTimer
KillTimer
EnableWindow
GetSystemMetrics
DrawIcon
GetClientRect
GetWindowRect
GetWindowLongW
SetWindowLongW
LoadIconW
SystemParametersInfoW
wsprintfW
GetForegroundWindow
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
UnhookWindowsHookEx
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetParent
LoadBitmapW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetDesktopWindow
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
PostMessageW
PostQuitMessage
ShowOwnedPopups
SetCursor
MessageBoxW
SetMenuDefaultItem
ModifyMenuW
GetUpdateRect
UpdateLayeredWindow
GetSystemMenu
LoadCursorW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
SubtractRect
PostThreadMessageW
CreateMenu
GetComboBoxInfo
HideCaret
InvertRect
DestroyCursor
OffsetRect
GetWindowRgn

gdi32

GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
SetRectRgn
DPtoLP
GetRgnBox
CreateRoundRectRgn
CreateDIBSection
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetClipBox
ExcludeClipRect
Escape
Polyline
Polygon
CreatePolygonRgn
ExtTextOutW
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
GetObjectW
GetTextMetricsW
GetTextCharsetInfo
GetStockObject
EnumFontFamiliesW
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreatePatternBrush
CreatePen
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
OffsetWindowOrgEx
PatBlt
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegGetValueA
RegDeleteKeyValueA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetFileInfoW
SHAppBarMessage
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHBrowseForFolderW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathAppendW
PathFileExistsW
PathRemoveFileSpecW
PathAppendA
PathRemoveFileSpecA
PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
StrCmpIW

uxtheme

IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
GetThemeSysColor
DrawThemeText
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground

ole32

CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoInitialize
OleUninitialize
CoUninitialize

oleaut32

SafeArrayDestroy
SysStringLen
SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
SafeArrayGetUBound
VariantCopy
VarBstrFromDate
VariantChangeType
OleCreateFontIndirect
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrCat

oledlg

OleUIBusyW

gdiplus

GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI

netapi32

Netbios

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 218KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c32fbe956cbbfc74cb5908923615b178

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winhttp

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

netapi32

oleacc

imm32

winmm

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 442KB - Virtual size: 441KB

.data Size: 35KB - Virtual size: 67KB

.gfids Size: 109KB - Virtual size: 109KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 218KB - Virtual size: 220KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 442KB - Virtual size: 441KB

.data
Size: 35KB - Virtual size: 67KB

.gfids
Size: 109KB - Virtual size: 109KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 218KB - Virtual size: 220KB