Static task
static1
Behavioral task
behavioral1
Sample
2025-01-13_274e390c4fb90d52b6eb0dab09ed3f44_magniber.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-13_274e390c4fb90d52b6eb0dab09ed3f44_magniber.exe
Resource
win10v2004-20241007-en
General
-
Target
2025-01-13_274e390c4fb90d52b6eb0dab09ed3f44_magniber
-
Size
277KB
-
MD5
274e390c4fb90d52b6eb0dab09ed3f44
-
SHA1
34e92c0d42740a4dc8cff7c15037363751e637c4
-
SHA256
e7141aa12c5aa728962bf2aaeb37ff59e091335406898f813d593c0b3b30f73c
-
SHA512
036e24b0f00ffd3dad1b57fc12d42b59d860d9b63358c0b45c0d7c45fa2b9fccbc129e2768bfab50848f6954823ec2425629abc6028c28ae12f5bec7656282d8
-
SSDEEP
6144:33nHPDm0jLAu6Y5jEw564aoJxmhuw1AFkHK/:Hvbjf6YNFehQwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-01-13_274e390c4fb90d52b6eb0dab09ed3f44_magniber
Files
-
2025-01-13_274e390c4fb90d52b6eb0dab09ed3f44_magniber.exe windows:5 windows x86 arch:x86
943b550bda838f264a91d1241abb0b14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetModuleFileNameW
GetTimeZoneInformation
lstrcatA
MultiByteToWideChar
lstrlenW
DisconnectNamedPipe
CreateJobObjectA
GetProcAddress
LoadLibraryA
LocalAlloc
SetCalendarInfoW
WriteProfileSectionW
ConvertDefaultLocale
FreeEnvironmentStringsW
RequestWakeupLatency
OutputDebugStringA
_lopen
TransactNamedPipe
GetNumaProcessorNode
lstrcpyA
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetComputerNameExA
GetVersionExW
EnumResourceTypesA
CreateActCtxW
GetCompressedFileSizeW
EnumCalendarInfoExW
GetNumaAvailableMemoryNode
TerminateJobObject
LoadResource
GetStringTypeA
IsValidLocale
TlsFree
lstrlenA
EnumSystemLocalesA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
HeapSize
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
SetEnvironmentVariableA
user32
IsCharAlphaNumericA
GetKeyboardLayoutList
GetUserObjectInformationW
CreateDesktopW
LoadMenuIndirectA
CharUpperBuffW
ImpersonateDdeClientWindow
SetSystemCursor
RegisterClassExA
LoadCursorW
GetClipboardFormatNameA
GetGUIThreadInfo
SetPropA
CharUpperBuffA
PeekMessageA
gdi32
AnimatePalette
GetEnhMetaFileA
CreateDIBSection
EnumFontFamiliesExW
TextOutW
CloseEnhMetaFile
GdiComment
GetMiterLimit
winspool.drv
DeviceCapabilitiesW
advapi32
ReportEventA
ole32
CoInitialize
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ