Static task
static1
Behavioral task
behavioral1
Sample
51cdbed80ca92cb74429b01d57e832beb90d4b6ffbcf7639281e3713761d8879.exe
Resource
win7-20220414-en
General
-
Target
51cdbed80ca92cb74429b01d57e832beb90d4b6ffbcf7639281e3713761d8879
-
Size
958KB
-
MD5
1e36889624db92dfefc58f9bb1946f27
-
SHA1
913eb1a83bb89069697488f98678d2f08f4b26d5
-
SHA256
51cdbed80ca92cb74429b01d57e832beb90d4b6ffbcf7639281e3713761d8879
-
SHA512
51ee65fc1a57689e52ad57d63942593727e650c881c24c350a0dc676dc329bd1e4cf30c2faaf5d7a11c2018ec48e0d2351c6a35418a905199915de788f7e4e3c
-
SSDEEP
12288:Eldc3w1WhjhS7iQUD3BEsZP5bcfE93YZYGQvQAw/u:++wISiQ4ZpcfbZYHR
Malware Config
Signatures
Files
-
51cdbed80ca92cb74429b01d57e832beb90d4b6ffbcf7639281e3713761d8879.exe windows x86
44322359818beb350a418c91e4a20219
Code Sign
01Certificate
IssuerCN=GameRanger developer,O=The GameRanger developer community group,C=PRNot Before29-10-2018 08:31Not After28-10-2022 08:31SubjectCN=GameRanger developer,O=The GameRanger developer community group,C=PR63:92:65:e2:a3:e3:1a:c7:95:d7:d0:72:18:2a:de:68:f3:65:c0:f1Signer
Actual PE Digest63:92:65:e2:a3:e3:1a:c7:95:d7:d0:72:18:2a:de:68:f3:65:c0:f1Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=GameRanger developer,O=The GameRanger developer community group,C=PR15-07-2022 13:06 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaCyForInit
_CIcos
_adj_fptan
__vbaVarMove
ord693
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaCyI2
__vbaStrCmp
__vbaGet3
__vbaVarTstEq
DllFunctionCall
__vbaCySub
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaFpCmpCy
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord714
__vbaFPException
__vbaCyForNext
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
__vbaFpI4
__vbaVarCopy
ord617
_CIatan
__vbaStrMove
ord618
__vbaI4Cy
_allmul
__vbaFpCSngR4
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
Sections
.text Size: 924KB - Virtual size: 923KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ