VCF15[.]OCX | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VCF15.OCX
Size

964KB
MD5

ce62176415fb029c82c4d60edadd547f
SHA1

6ff6bb9074fb82158ea7df58868ad6d9b782a34d
SHA256

fa8464982ac9a73515e107897aa7ee0e5036c09b16dda018443dc8a970ef7811
SHA512

93642a80b9fb73c9b916ffe0b268339cf8a0c01cd2364f686a1e83d1a3ba481e964d694179048f481f25dab0645af421e58b5dd324ad2d606f5e264962880e37
SSDEEP

12288:YGqWj8J70YXq1ZCDVUOjADJhF9wYjL/gI8ESaOQ8VVzWNI4Q/1pJDHpD+80iVguK:Ycj8J7Tq1ZJDZ9//lNrQt7DpK8/Vg

Score

1^/10

Malware Config

Signatures

Files

VCF15.OCX
.dll regsvr32 windows x86

4864b664a37badb9fd89f67feb8bac89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

olepro32

ord251
ord248
ord250
ord252

kernel32

SetUnhandledExceptionFilter
HeapSize
GetModuleHandleA
GetEnvironmentStrings
VirtualAlloc
LCMapStringW
GetStringTypeW
IsBadCodePtr
FreeEnvironmentStringsW
GetEnvironmentStringsW
GlobalFree
InterlockedDecrement
lstrcmpiA
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalLock
MultiByteToWideChar
SizeofResource
GetLocalTime
lstrcmpA
lstrcpyA
VirtualFree
FreeEnvironmentStringsA
GetOEMCP
GetStartupInfoA
HeapCreate
HeapDestroy
TerminateProcess
GetStdHandle
SetHandleCount
GetFileType
ExitProcess
HeapCompact
GetCommandLineA
RaiseException
RtlUnwind
EnterCriticalSection
GetWindowsDirectoryA
HeapReAlloc
OpenFile
LeaveCriticalSection
lstrcpynA
GetProcessHeap
GetVersion
InitializeCriticalSection
lstrlenW
DisableThreadLibraryCalls
DeleteCriticalSection
_lopen
HeapAlloc
GetFullPathNameA
HeapFree
_lclose
_lcreat
lstrlenA
lstrcatA
GetModuleFileNameA
IsDBCSLeadByte
GetACP
GetCPInfo
FindResourceA
GetStringTypeA
LCMapStringA
FreeResource
LoadResource
LockResource
SetEvent
TerminateThread
CreateEventA
WaitForSingleObjectEx
GetCurrentProcess
ResetEvent
SetThreadPriority
Sleep
CreateThread
GetTempFileNameA
ResumeThread
GetTempPathA
IsBadWritePtr
GetProfileIntA
IsBadReadPtr
WideCharToMultiByte
GlobalSize
GlobalReAlloc
MoveFileA
GlobalHandle
WriteFile
CreateFileA
DeleteFileA
ReadFile
SetFilePointer
CloseHandle
MulDiv
GetLastError
GetLocaleInfoA
GlobalUnlock
GetVersionExA
GlobalAlloc
FlushFileBuffers
InterlockedIncrement
SetStdHandle
SetEndOfFile

user32

ClientToScreen
CallWindowProcA
WaitForInputIdle
SetTimer
KillTimer
PeekMessageA
GetCursorPos
DialogBoxParamA
CreateDialogParamA
WindowFromPoint
UpdateWindow
ValidateRect
BeginPaint
EndPaint
DrawTextA
OpenClipboard
CloseClipboard
RegisterWindowMessageA
GetFocus
MessageBeep
GetNextDlgGroupItem
OffsetRect
SetCapture
LoadBitmapA
PtInRect
GetActiveWindow
DispatchMessageA
GetCursor
GetClassLongA
CreateWindowExA
DestroyWindow
SetScrollPos
SetScrollRange
EqualRect
GetDC
ReleaseDC
InvalidateRect
FrameRect
RegisterClipboardFormatA
GetWindowRect
ScreenToClient
SendDlgItemMessageA
EndDialog
GetKeyState
SetRect
GetWindowLongA
SetWindowLongA
DrawFocusRect
GetSysColorBrush
FillRect
GetSysColor
GetSystemMetrics
CharLowerA
CharUpperA
wsprintfA
GetWindowPlacement
UnregisterClassA
GetMenuItemInfoA
SetMenuItemInfoA
LoadCursorA
RegisterClassA
GetCapture
IsChild
ReleaseCapture
TranslateAcceleratorA
DrawEdge
GetParent
GetWindow
LoadMenuA
GetMenuItemCount
RemoveMenu
SetMenu
ShowWindow
PostMessageA
LoadAcceleratorsA
IsWindowVisible
SetWindowPos
DefWindowProcA
SetFocus
MessageBoxA
LoadIconA
GetClientRect
EnableWindow
SetWindowTextA
GetWindowTextA
SendMessageA
GetDlgItem
EnumChildWindows
IsDialogMessageA
LoadStringA
TranslateMessage
GetMessageA
CreateDialogIndirectParamA
GetNextDlgTabItem
SetParent
SetWindowRgn
CharNextA
ScrollWindow
SetDlgItemTextA
GetDesktopWindow
IsWindowEnabled
InvalidateRgn
WinHelpA
SetClipboardData
IsClipboardFormatAvailable
IntersectRect
MoveWindow
IsWindow
SetCursor
IsRectEmpty
DrawTextExA
DestroyIcon
GetWindowThreadProcessId

gdi32

SelectObject
DeleteDC
EnumFontFamiliesExA
GetObjectA
ExtTextOutA
DeleteObject
CreateCompatibleDC
GetStockObject
TextOutA
GetPaletteEntries
SetBkMode
SetTextColor
GetTextExtentPointA
CreateSolidBrush
GetBkColor
GetTextColor
LineTo
MoveToEx
Ellipse
Polygon
DeleteMetaFile
GetTextMetricsA
GetMetaFileBitsEx
CreatePenIndirect
SetMetaFileBitsEx
CreateRectRgn
EnumFontFamiliesA
GetDeviceCaps
CreatePatternBrush
CreateBitmap
PatBlt
SetBkColor
Rectangle
BitBlt
Polyline
CreateBrushIndirect
CreatePen
CombineRgn
PlayMetaFileRecord
GetTextExtentPoint32A
IntersectClipRect
GetObjectType
OffsetWindowOrgEx
EnumMetaFile
OffsetViewportOrgEx
RestoreDC
SaveDC
PlayMetaFile
ScaleWindowExtEx
SelectClipRgn
ScaleViewportExtEx
SetMapMode
SetROP2
SetViewportExtEx
SetViewportOrgEx
SetTextAlign
SetWindowOrgEx
CreateDCA
SetWindowExtEx
RealizePalette
SetPaletteEntries
SetRectRgn
OffsetRgn
GetClipBox
CreatePalette
CopyMetaFileA
InvertRgn
DPtoLP
LPtoDP
CreateRectRgnIndirect
GetRgnBox
AbortDoc
EndPage
EndDoc
StartDocA
SetAbortProc
StartPage
GetWindowExtEx
GetViewportExtEx
CreateFontIndirectA
SelectPalette

comdlg32

ChooseColorA
CommDlgExtendedError
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA

ole32

ReleaseStgMedium
RegisterDragDrop
CreateDataAdviseHolder
DoDragDrop
RevokeDragDrop
OleBuildVersion
CoLockObjectExternal
StgOpenStorage
CoCreateInstance
OleSetClipboard
StgCreateDocfile
CoGetMalloc
StringFromCLSID
OleGetClipboard
GetHGlobalFromStream
CoTaskMemFree
CoTaskMemAlloc
CreateOleAdviseHolder
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

VariantChangeType
SysFreeString
VariantInit
VariantClear
SysAllocString
VarR8FromStr
VariantCopy
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayPutElement
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLibEx
SetErrorInfo
CreateErrorInfo
SysAllocStringLen

comctl32

ord6
ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_SSLinkDelete@4
_SSLinkGetData@12
_SSLinkGetTabbedText@12
_SSLinkNewEx@20
_SSLinkNewInternal@20

Sections

.text
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4864b664a37badb9fd89f67feb8bac89

Headers

File Characteristics

Imports

olepro32

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

comctl32

version

Exports

Exports

Sections

.text Size: 648KB - Virtual size: 647KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 30KB - Virtual size: 70KB

.rsrc Size: 199KB - Virtual size: 199KB

.reloc Size: 42KB - Virtual size: 41KB

.text
Size: 648KB - Virtual size: 647KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 30KB - Virtual size: 70KB

.rsrc
Size: 199KB - Virtual size: 199KB

.reloc
Size: 42KB - Virtual size: 41KB