MSCAL[.]OCX[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

MSCAL.OCX.zip
Size

43KB
MD5

79f6b2c2c08b9a4757cad8dbff19a5d1
SHA1

05c207ce078314448acb77e6d0a5dce00ffd1220
SHA256

4c8f72198e681bab749a1fc3fbd8195f50087baf2ced36a4095f9615126d3ce6
SHA512

5f001259cf4a6d7b7e57e3048b7ed29e0f9a931970c446ad432f17a1e1be39e4df92902a4bb344fcf3f62fde7711c3933b08e1232d6bdf820f6795f9af74cdcf
SSDEEP

768:RZrsWn8f9UJnB54ndgp7sOiE9X0c9rJJoCM1cw+CMZQBEe/GnkCgD:R9sWntJnr4d07saXxvoCMKDDdvkCgD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MSCAL.OCX

Files

MSCAL.OCX.zip
.zip

Password: infected
MSCAL.OCX
.dll regsvr32 windows:4 windows x86

d7b4856b28ca7023dfd1a515a4e9a904

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

LoadRegTypeLi
VariantClear
SysStringLen
VarDateFromStr
LoadTypeLi
SysAllocString
VariantInit
VariantChangeType
SysAllocStringLen
VariantCopy

kernel32

InterlockedIncrement
GlobalAlloc
GlobalUnlock
GetLastError
GlobalLock
EnterCriticalSection
LeaveCriticalSection
GetWindowsDirectoryA
GetModuleFileNameA
lstrcatA
OpenFile
GetVersion
InitializeCriticalSection
GetProcessHeap
DisableThreadLibraryCalls
DeleteCriticalSection
MulDiv
lstrcpyA
lstrcpynA
lstrlenW
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
HeapAlloc
lstrlenA
MultiByteToWideChar
GetLocaleInfoA
HeapFree
GetSystemDefaultLangID
GetVersionExA
GetLocalTime
HeapReAlloc
InterlockedDecrement

user32

GetSystemMetrics
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
WinHelpA
DestroyWindow
UnregisterClassA
GetDlgItem
SendDlgItemMessageA
MapWindowPoints
GetWindowRect
SetWindowLongA
EqualRect
SetWindowRgn
GetWindowLongA
IsWindowVisible
GetActiveWindow
UpdateWindow
CharNextA
GetWindow
CallWindowProcA
GetCapture
ScrollWindowEx
IsDialogMessageA
GetNextDlgTabItem
IsWindowEnabled
IsChild
LoadAcceleratorsA
SendMessageA
InvalidateRect
ReleaseCapture
PtInRect
SetCapture
GetClientRect
FrameRect
DrawFocusRect
ShowWindow
IsWindow
BeginPaint
TranslateAcceleratorA
EndPaint
DefWindowProcA
CreateDialogParamA
GetWindowDC
CopyRect
FillRect
GetDC
ReleaseDC
IntersectRect
InflateRect
OffsetRect
GetFocus
SystemParametersInfoA
GetSysColor
GetParent
SetParent
SetWindowPos
LoadCursorA
RegisterClassA
EndDialog
wsprintfA
LoadStringA
MessageBeep
CreateWindowExA
MoveWindow
SetFocus
GetKeyState
DialogBoxParamA

ole32

CreateOleAdviseHolder
CreateDataAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
OleSetAutoConvert
CoCreateInstance

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

gdi32

CreateEnhMetaFileA
SetWindowOrgEx
SetWindowExtEx
CreateMetaFileA
CreateRectRgnIndirect
CreateDCA
SetViewportExtEx
SaveDC
LPtoDP
SetViewportOrgEx
SetMapMode
RestoreDC
DeleteDC
GetDeviceCaps
CreateCompatibleDC
DeleteObject
ExtTextOutA
SetTextColor
SetTextAlign
LineTo
MoveToEx
SelectObject
GetStockObject
SetBkMode
CreateSolidBrush
CreatePen
Polygon
DPtoLP
GetTextExtentPoint32A
CreateFontIndirectA
CloseMetaFile
CloseEnhMetaFile

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

d7b4856b28ca7023dfd1a515a4e9a904

Headers

File Characteristics

Imports

oleaut32

kernel32

user32

ole32

advapi32

gdi32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 8KB - Virtual size: 5KB