Overview

overview

4

Static

static

3

getword/Ge...rd.dll

windows7-x64

3

getword/Ge...rd.dll

windows10-2004-x64

3

getword/Ge...rd.dll

windows7-x64

1

getword/Ge...rd.dll

windows10-2004-x64

1

getword/Ge...mo.exe

windows7-x64

3

getword/Ge...mo.exe

windows10-2004-x64

3

getword/Ge...NT.dll

windows7-x64

1

getword/Ge...NT.dll

windows10-2004-x64

1

getword/Ge...lp.chm

windows7-x64

1

getword/Ge...lp.chm

windows10-2004-x64

1

getword/Ge...me.htm

windows7-x64

1

getword/Ge...me.htm

windows10-2004-x64

1

getword/Ge...ll.dll

windows7-x64

1

getword/Ge...ll.dll

windows10-2004-x64

1

getword/Ge...ok.dll

windows7-x64

1

getword/Ge...ok.dll

windows10-2004-x64

1

getword/Ge...ok.dll

windows7-x64

1

getword/Ge...ok.dll

windows10-2004-x64

1

getword/Ge...er.bat

windows7-x64

1

getword/Ge...er.bat

windows10-2004-x64

1

getword/Ge...er.bat

windows7-x64

1

getword/Ge...er.bat

windows10-2004-x64

1

getword/Ge...in.exe

windows7-x64

4

getword/Ge...in.exe

windows10-2004-x64

4

getword/Te...rd.dll

windows7-x64

3

getword/Te...rd.dll

windows10-2004-x64

3

getword/Te...rd.dll

windows7-x64

1

getword/Te...rd.dll

windows10-2004-x64

1

getword/Te...NT.dll

windows7-x64

1

getword/Te...NT.dll

windows10-2004-x64

1

getword/Te...lp.chm

windows7-x64

1

getword/Te...lp.chm

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    215a0916919d9528f8472534b43d37c3

  • Size

    794KB

  • MD5

    215a0916919d9528f8472534b43d37c3

  • SHA1

    7226a52a228aaa892ada207763bd210c12132f5b

  • SHA256

    8e1006e5f230f269bb9ce80e5c2b7f3b930cb68f3d975697d45b4e4bae33ce58

  • SHA512

    e196e998ec89678ecb7eddeed765d9102685b1e9e4603fbf1a0ea31f3689af097b94c60a298d9e81dbf9e3a2a1fa1a26b4c462d6c47d6e115887126017798ccb

  • SSDEEP

    12288:27eiliVwg/H+XKUXFYfiDPGxmJ0fCx3luYqORPDajQ1n+QeGAWi3KO5rIkLGAhEG:qj8eXKAFiaFG3Y/R+81evbik+DPkx7x

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 215a0916919d9528f8472534b43d37c3
    .rar
  • getword/GetWordDemo/GetWord.api
    .dll windows:4 windows x86 arch:x86

    065532edfda080bc96202809c301a176


    Headers

    Imports

    Exports

    Sections

  • getword/GetWordDemo/GetWord.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    e49119c0bf5c5f68bae876ad33d75679


    Headers

    Imports

    Exports

    Sections

  • getword/GetWordDemo/GetWordDemo.exe
    .exe .ps1 windows:4 windows x86 arch:x86 polyglot

    81ae694b7741cf0eaae69f7965a256cd


    Headers

    Imports

    Sections

  • getword/GetWordDemo/GetWordNT.dll
    .dll windows:4 windows x86 arch:x86

    3bca79075ac67a24b597d7174e85b589


    Headers

    Imports

    Exports

    Sections

  • getword/GetWordDemo/Help.chm
    .chm
  • getword/GetWordDemo/How_to_Use/readme.htm
    .html
  • getword/GetWordDemo/How_to_Use/register_1.jpg
    .jpg
  • getword/GetWordDemo/How_to_Use/register_2.jpg
    .jpg
  • getword/GetWordDemo/How_to_Use/run_as_admin.jpg
    .jpg
  • getword/GetWordDemo/ICall.dll
    .dll windows:4 windows x86 arch:x86

    21fb0d7af16d5e47eb750aa2fd979336


    Headers

    Imports

    Exports

    Sections

  • getword/GetWordDemo/KeyboardHook.dll
    .dll windows:4 windows x86 arch:x86

    dba6edee7ebe2893bf98c9e9e052176d


    Headers

    Imports

    Exports

    Sections

  • getword/GetWordDemo/MouseHook.dll
    .dll windows:4 windows x86 arch:x86

    3756ecab265617922da92e9ac38bc320


    Headers

    Imports

    Exports

    Sections

  • getword/GetWordDemo/Register.bat
  • getword/GetWordDemo/UnRegister.bat
  • getword/GetWordDemo/install_plugin.exe
    .exe windows:4 windows x86 arch:x86

    63d71b3e661ed3e4bc805a9eba5205af


    Headers

    Imports

    Sections

  • getword/TextCapture/GetWord.api
    .dll windows:4 windows x86 arch:x86

    065532edfda080bc96202809c301a176


    Headers

    Imports

    Exports

    Sections

  • getword/TextCapture/GetWord.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    e49119c0bf5c5f68bae876ad33d75679


    Headers

    Imports

    Exports

    Sections

  • getword/TextCapture/GetWordNT.dll
    .dll windows:4 windows x86 arch:x86

    3bca79075ac67a24b597d7174e85b589


    Headers

    Imports

    Exports

    Sections

  • getword/TextCapture/Help.chm
    .chm
  • getword/TextCapture/ICall.dll
    .dll windows:4 windows x86 arch:x86

    21fb0d7af16d5e47eb750aa2fd979336


    Headers

    Imports

    Exports

    Sections

  • getword/TextCapture/KeyboardHook.dll
    .dll windows:4 windows x86 arch:x86

    dba6edee7ebe2893bf98c9e9e052176d


    Headers

    Imports

    Exports

    Sections

  • getword/TextCapture/MouseHook.dll
    .dll windows:4 windows x86 arch:x86

    3756ecab265617922da92e9ac38bc320


    Headers

    Imports

    Exports

    Sections

  • getword/TextCapture/Register.bat
  • getword/TextCapture/TextCapture.exe
    .exe windows:4 windows x86 arch:x86

    4d90a4e5e6d5c36b6e7d5914dfdb6e4f


    Headers

    Imports

    Sections

  • getword/TextCapture/UnRegister.bat
  • getword/TextCapture/install_plugin.exe
    .exe windows:4 windows x86 arch:x86

    63d71b3e661ed3e4bc805a9eba5205af


    Headers

    Imports

    Sections

  • getword/readme.txt
  • getword/新云软件.url
    .url