2024-12-16_352e3e4ec84a805faf4f6df1d7b22e7e_luca-stealer_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-16_352e3e4ec84a805faf4f6df1d7b22e7e_luca-stealer_magniber
Size

1.9MB
MD5

352e3e4ec84a805faf4f6df1d7b22e7e
SHA1

b5aa177c439898fe57a5e0af16fd5f6001020e38
SHA256

00797b000f2387f19e4a3bba5eff419b8012fc82935f25b27c2025c9b3ce0dbe
SHA512

204f4b26f947d6739a2049d48043a1ee9285a257c2cf17dca2f0d0883673a79140b12cd8da6e89d68298ff32dbb8d56e12a282b126fb935194a97594c9ee541e
SSDEEP

49152:MRNRearsd4ANTlYwoXlPY5fAms9cC/VYE5/:wfeOsvNSXlPY5f7CJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-16_352e3e4ec84a805faf4f6df1d7b22e7e_luca-stealer_magniber

Files

2024-12-16_352e3e4ec84a805faf4f6df1d7b22e7e_luca-stealer_magniber
.exe windows:5 windows x86 arch:x86

1ef2f4f7a3bcaf2f326a7ee471f92ff2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\hudson\jobs\AntZip_1.0.0.0\workspace\AntZip\Bin\Release\GUI.pdb

Imports

comctl32

ord17
_TrackMouseEvent
InitCommonControlsEx

kernel32

IsProcessorFeaturePresent
AreFileApisANSI
LockResource
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
FindResourceW
FindResourceExW
GetSystemDefaultLangID
GetUserDefaultLangID
ReleaseMutex
WaitForMultipleObjects
Sleep
CreateMutexW
SetPriorityClass
lstrcatW
FreeResource
ExitProcess
SetUnhandledExceptionFilter
GetCommandLineW
DecodePointer
ExpandEnvironmentStringsA
LoadLibraryA
GetACP
GlobalLock
GlobalUnlock
MulDiv
SystemTimeToFileTime
LocalFileTimeToFileTime
VerSetConditionMask
OpenProcess
VerifyVersionInfoW
GlobalAlloc
GetLocalTime
lstrcpynW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
lstrcpyW
GetProcAddress
VirtualAlloc
VirtualFree
GetModuleHandleW
WriteConsoleW
GetConsoleCP
FlushFileBuffers
LeaveCriticalSection
OutputDebugStringA
SetConsoleCtrlHandler
OpenEventW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStringTypeW
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
GetModuleFileNameA
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
LoadLibraryExA
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
OutputDebugStringW
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
MapViewOfFile
DeleteCriticalSection
EnterCriticalSection
GetProcessTimes
SetStdHandle
GetVersionExW
GetLastError
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CloseHandle
SetProcessAffinityMask
GetStdHandle
DosDateTimeToFileTime
FileTimeToDosDateTime
GetSystemTimeAsFileTime
GetSystemInfo
GetProcessAffinityMask
GlobalMemoryStatus
lstrlenW
FileTimeToSystemTime
FileTimeToLocalFileTime
CompareFileTime
GetCurrentProcess
GetVolumeInformationW
GetDiskFreeSpaceW
GetDriveTypeW
GetFileInformationByHandle
SetFilePointer
SetEndOfFile
OpenFileMappingW
DeviceIoControl
ReadFile
WriteFile
GetFileSize
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextFileW
FindFirstFileW
GetFileAttributesW
GetModuleHandleA
GetLogicalDriveStringsW
FindClose
MoveFileW
DeleteFileW
SetFileAttributesW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
GetCurrentDirectoryW
CreateEventW
SetCurrentDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetSystemDirectoryW
GetTickCount
SetFileTime
SetLastError
GetCurrentThreadId
GetCurrentProcessId
FormatMessageW
LocalFree
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
CreateSemaphoreW
SetEnvironmentVariableW

user32

SetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
CreateCaret
TrackPopupMenu
AppendMenuW
EnableMenuItem
DestroyMenu
CreatePopupMenu
SetRect
FillRect
DrawTextW
CharPrevW
MonitorFromPoint
GetWindowRgn
UpdateLayeredWindow
GetIconInfo
DrawIconEx
DestroyIcon
PrivateExtractIconsW
AdjustWindowRectEx
GetPropW
SetPropW
GetMenu
GetSystemMetrics
RegisterClassW
LoadImageW
PtInRect
IsRectEmpty
IntersectRect
GetSysColor
GetCursorPos
GetUpdateRect
EndPaint
ClientToScreen
UpdateWindow
EqualRect
DrawTextA
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
SetForegroundWindow
CharUpperW
SendMessageW
CallWindowProcW
IsWindow
GetWindowDC
ReleaseDC
GetWindowRect
GetWindowLongW
GetKeyboardLayout
ShowWindow
MoveWindow
CreateDialogParamW
DialogBoxParamW
BeginPaint
GetDC
ReleaseCapture
SetCapture
GetActiveWindow
CharNextW
IsWindowVisible
DestroyWindow
GetKeyNameTextW
GetDlgItem
GetDialogBaseUnits
ScreenToClient
MapDialogRect
SystemParametersInfoW
CreateWindowExW
LoadStringW
GetWindowTextW
GetWindowTextLengthW
MessageBoxW
wsprintfW
PostMessageW
EndDialog
SetDlgItemTextW
SetFocus
GetFocus
GetKeyState
EnableWindow
InvalidateRect
SetWindowTextW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
MapVirtualKeyExW
DefWindowProcW
PostQuitMessage
UnregisterClassW
RegisterClassExW
GetClassInfoExW
IsChild
SetWindowPos
IsIconic
IsZoomed
SetWindowRgn
GetClientRect
MapWindowPoints
CopyRect
OffsetRect
GetParent
GetWindow
LoadCursorW
MonitorFromWindow
GetMonitorInfoW
CheckDlgButton
IsDlgButtonChecked
SetTimer
KillTimer
SetCursor
GetCaretPos
SetWindowLongW
UnionRect
InflateRect
IsWindowEnabled
LoadIconW
wsprintfA

gdi32

CreateSolidBrush
PlayEnhMetaFile
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreatePatternBrush
SetTextColor
CreateRectRgn
PtInRegion
CreateDIBSection
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateRoundRectRgn
DeleteObject
GetTextExtentPoint32W
LineTo
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
GetObjectA
MoveToEx
TextOutW
GdiFlush
GetTextExtentPointA
GetBitmapBits
SetBitmapBits
PatBlt
SelectObject
GetClipBox
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreatePen
DeleteDC
GetDeviceCaps
GetStockObject
AddFontMemResourceEx
RemoveFontMemResourceEx
Rectangle
RestoreDC
SaveDC
CloseEnhMetaFile
CreateEnhMetaFileW
SetBkMode
GetCharABCWidthsW
GetEnhMetaFileHeader

comdlg32

GetSaveFileNameW
CommDlgExtendedError

advapi32

RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExA
RegQueryValueExA
GetFileSecurityW
SetFileSecurityW
RegSetValueExW
RegQueryValueExW
OpenProcessToken
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

shell32

DragFinish
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragQueryFileW
SHBrowseForFolderW

ole32

OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
ReleaseStgMedium
OleDuplicateData
DoDragDrop
RegisterDragDrop
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysAllocStringLen
VariantClear
VariantCopy
SysStringLen
SysFreeString
VariantInit
GetErrorInfo
VariantChangeType
SetErrorInfo
SysStringByteLen
CreateErrorInfo

gdiplus

GdipRotateWorldTransform
GdipSetSmoothingMode
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillPath
GdipFillRectangleI
GdipDrawRectangleI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipDrawPath
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
ord1
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

shlwapi

PathRemoveBackslashW
PathIsDirectoryW
StrChrW

dbghelp

MiniDumpWriteDump

ws2_32

WSAStartup
gethostbyname
gethostname

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ef2f4f7a3bcaf2f326a7ee471f92ff2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

gdiplus

imm32

shlwapi

dbghelp

ws2_32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 262KB - Virtual size: 262KB

.data Size: 14KB - Virtual size: 29KB

.rsrc Size: 380KB - Virtual size: 380KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 262KB - Virtual size: 262KB

.data
Size: 14KB - Virtual size: 29KB

.rsrc
Size: 380KB - Virtual size: 380KB