Static task
static1
Behavioral task
behavioral1
Sample
52512f2c66606ddcdd4eedbaf6bdc89b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52512f2c66606ddcdd4eedbaf6bdc89b.exe
Resource
win10v2004-20231215-en
General
-
Target
52512f2c66606ddcdd4eedbaf6bdc89b
-
Size
164KB
-
MD5
52512f2c66606ddcdd4eedbaf6bdc89b
-
SHA1
028178e7d8db72a7f263c5e4c7e9598c8feb429e
-
SHA256
03f6b2c4eaf2654bae57f7045379f5d326b907e733ed399e22f37712b207d3fe
-
SHA512
9919f4545544688f9d4c9a48704c7ea86384e0d835233bed19d490437ac2097cc864e582e90adb9b291e1ea222583c48f9c2edf7251da664717742150cf625b8
-
SSDEEP
3072:9KzBJci7ZLsNgqx3oXJBYiVCohDoZrdG:0RZLsNgM3oXJBYiVCnZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52512f2c66606ddcdd4eedbaf6bdc89b
Files
-
52512f2c66606ddcdd4eedbaf6bdc89b.exe windows:4 windows x86 arch:x86
91d595510f261b7d4203ef7d67bb87ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetPixelFormat
ChoosePixelFormat
SwapBuffers
glu32
gluLookAt
gluPerspective
opengl32
wglMakeCurrent
glPopMatrix
glHint
glDisable
glLoadIdentity
glPolygonOffset
glShadeModel
glNormal3f
glVertex3f
glTranslatef
glLightfv
glDepthFunc
glClearDepth
glPushMatrix
wglCreateContext
glGetDoublev
glEnd
glClearColor
glScalef
glColor3d
glColor3f
glEnable
glRotatef
glViewport
glBegin
glClear
glMatrixMode
msvbvm60
ord582
ord583
ord585
ord187
ord586
ord589
ord697
ord698
MethCallEngine
ord516
ord517
ord518
ord519
ord660
ord662
ord663
ord558
ord595
ord598
ord306
ord307
ord522
ord524
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord530
ord318
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord571
ord681
ord685
ord578
ord100
ord579
ord614
ord616
ord617
ord618
ord619
ord581
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ