MSCAL[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MSCAL.zip
Size

43KB
MD5

7c2965545615d161f62e1f6bcf61d8cc
SHA1

37719e6f6555d4c53963c8d1c93134bcc2f7850c
SHA256

e0658b920a134bec6c7f0d3465c7a5ae4b7f34932319ea0e3af89863f2920583
SHA512

5a7f518723635b0a035c890ea26fa63171ddc911b62a23bb556cae1f1a5ba09b7e3519806719d6a93284fe27a94f4d922437c00fd17e9003c5402848737089fb
SSDEEP

768:xcYZ1pHNulmqG8lYgRcNsq9xf3k077xSX6qrEeIylBuin48yZeIsbAIMvdvD2:u+VNulm2HR/qw077e6HClB94bZe0IMxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MSCAL.OCX

Files

MSCAL.zip
.zip
MSCAL.OCX
.dll regsvr32 windows:4 windows x86

d7b4856b28ca7023dfd1a515a4e9a904

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

LoadRegTypeLi
VariantClear
SysStringLen
VarDateFromStr
LoadTypeLi
SysAllocString
VariantInit
VariantChangeType
SysAllocStringLen
VariantCopy

kernel32

InterlockedIncrement
GlobalAlloc
GlobalUnlock
GetLastError
GlobalLock
EnterCriticalSection
LeaveCriticalSection
GetWindowsDirectoryA
GetModuleFileNameA
lstrcatA
OpenFile
GetVersion
InitializeCriticalSection
GetProcessHeap
DisableThreadLibraryCalls
DeleteCriticalSection
MulDiv
lstrcpyA
lstrcpynA
lstrlenW
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
HeapAlloc
lstrlenA
MultiByteToWideChar
GetLocaleInfoA
HeapFree
GetSystemDefaultLangID
GetVersionExA
GetLocalTime
HeapReAlloc
InterlockedDecrement

user32

GetSystemMetrics
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
WinHelpA
DestroyWindow
UnregisterClassA
GetDlgItem
SendDlgItemMessageA
MapWindowPoints
GetWindowRect
SetWindowLongA
EqualRect
SetWindowRgn
GetWindowLongA
IsWindowVisible
GetActiveWindow
UpdateWindow
CharNextA
GetWindow
CallWindowProcA
GetCapture
ScrollWindowEx
IsDialogMessageA
GetNextDlgTabItem
IsWindowEnabled
IsChild
LoadAcceleratorsA
SendMessageA
InvalidateRect
ReleaseCapture
PtInRect
SetCapture
GetClientRect
FrameRect
DrawFocusRect
ShowWindow
IsWindow
BeginPaint
TranslateAcceleratorA
EndPaint
DefWindowProcA
CreateDialogParamA
GetWindowDC
CopyRect
FillRect
GetDC
ReleaseDC
IntersectRect
InflateRect
OffsetRect
GetFocus
SystemParametersInfoA
GetSysColor
GetParent
SetParent
SetWindowPos
LoadCursorA
RegisterClassA
EndDialog
wsprintfA
LoadStringA
MessageBeep
CreateWindowExA
MoveWindow
SetFocus
GetKeyState
DialogBoxParamA

ole32

CreateOleAdviseHolder
CreateDataAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
OleSetAutoConvert
CoCreateInstance

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

gdi32

CreateEnhMetaFileA
SetWindowOrgEx
SetWindowExtEx
CreateMetaFileA
CreateRectRgnIndirect
CreateDCA
SetViewportExtEx
SaveDC
LPtoDP
SetViewportOrgEx
SetMapMode
RestoreDC
DeleteDC
GetDeviceCaps
CreateCompatibleDC
DeleteObject
ExtTextOutA
SetTextColor
SetTextAlign
LineTo
MoveToEx
SelectObject
GetStockObject
SetBkMode
CreateSolidBrush
CreatePen
Polygon
DPtoLP
GetTextExtentPoint32A
CreateFontIndirectA
CloseMetaFile
CloseEnhMetaFile

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7b4856b28ca7023dfd1a515a4e9a904

Headers

File Characteristics

Imports

oleaut32

kernel32

user32

ole32

advapi32

gdi32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 13KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 13KB

.reloc
Size: 8KB - Virtual size: 5KB