GRI-GLyCalc-v4-install-files[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

GRI-GLyCalc-v4-install-files.zip
Size

5.1MB
MD5

002338712915a69743c33267824a7bb0
SHA1

5ebde34884fa5c85cb7b73237c52ccd30f4cd44f
SHA256

e3064b056490a35c4e59e42a39448ac81f47f4f49ca01a360e156f3383ab3c17
SHA512

b575bbb08859414498e1b572d115e8d692f0241a736ab6ccfb103544b81d8417a29b548afb275f96032235ea76541f04a01b8686ae9d9bb9987fbcdb2ed78c52
SSDEEP

98304:DJ3NuRL0rsiVcXv3+ajH6u6yYRGRln0mmqUUc0LxNz2kER/DDijr4nb:DJ9ux0Ri3TjHn6reUpINzOGrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe
unpack001/_ISDel.exe
unpack001/_Setup.dll

Files

GRI-GLyCalc-v4-install-files.zip
.zip
DATA.TAG
GRI-GLYCalc-End-User-License-Agreement.pdf
.pdf
READ_ME_FIRST.txt
SETUP.INI
Setup.exe
.exe windows:4 windows x86 arch:x86

b4973a86f1dc54deac0bcca565e1f7af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerLanguageNameA

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
WriteFile
GetDiskFreeSpaceA
WritePrivateProfileStringA
FindClose
FindFirstFileA
IsDBCSLeadByte
SetFilePointer
ReadFile
GetPrivateProfileIntA
GetLastError
GetTickCount
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
FindResourceA
GlobalHandle
GetUserDefaultLCID
LoadLibraryA
GetProfileStringA
SetErrorMode
GetFileSize
FreeLibrary
CreateFileA
GlobalLock
GlobalAlloc
CloseHandle
GlobalFree
_hread
GlobalUnlock
CreateDirectoryA
lstrlenA
lstrcpyA
WinExec
GetDriveTypeA
SetStdHandle
VirtualAlloc
LCMapStringW
GetProcAddress
HeapFree
HeapAlloc
LCMapStringA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
RtlUnwind
GetStringTypeW
HeapCreate
HeapReAlloc
VirtualFree
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
HeapDestroy
ExitProcess

user32

DestroyWindow
EndDialog
DrawIcon
GetWindowPlacement
GetDlgItem
DialogBoxParamA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
LoadIconA
SetWindowTextA
InflateRect
SendMessageA
SetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
InvalidateRect
LoadCursorA
GetClassInfoA
RegisterClassA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
DrawTextA
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetSystemMetrics
CharNextA
GetParent
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
SetRect
MoveWindow
GetSysColor
PostQuitMessage
CreateWindowExA

gdi32

RestoreDC
SelectObject
DeleteObject
GetObjectA
SaveDC
CreateFontIndirectA
MoveToEx
CreatePen
LineTo
SetBkColor
SetTextColor
ExtTextOutA
CreateSolidBrush
CreateDIBitmap
GetTextMetricsA
SelectPalette
GetDeviceCaps
RealizePalette
GetSystemPaletteEntries
UnrealizeObject
CreatePalette
BitBlt
CreateCompatibleDC
DeleteDC
CreateRectRgn
GetStockObject
SelectClipRgn
GetTextExtentPointA

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_INST32I.EX_
_ISDel.exe
.exe windows:4 windows x86 arch:x86

af417a432744d25669a269c31c292485

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetTickCount
CloseHandle
CreateFileA
SetErrorMode
GetPrivateProfileIntA
lstrcmpiA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
lstrcatA
lstrcpyA
UnhandledExceptionFilter
GetModuleFileNameA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetStringTypeA
HeapAlloc
GetStringTypeW
LCMapStringW
LCMapStringA
HeapFree
RtlUnwind
VirtualFree
WriteFile
HeapDestroy
GetFileType
HeapCreate
GetLastError
SetCurrentDirectoryA
Sleep
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetCPInfo
GetACP
GetOEMCP
GetStdHandle

user32

CharNextA
DefWindowProcA
wsprintfA
IsWindow
RegisterWindowMessageA
SetTimer
PostQuitMessage
RegisterClassA
LoadIconA
LoadCursorA
GetMessageA
GetSystemMetrics
CreateWindowExA
SendMessageA
TranslateMessage
DispatchMessageA

Exports

Exports

WndProc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_Setup.dll
.dll windows:4 windows x86 arch:x86

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_sys1.cab
_sys1.hdr
_user1.cab
_user1.hdr
data1.cab
data1.hdr
glycalc4.doc
.doc windows office2003
handbook4.doc
.doc windows office2003
lang.dat
layout.bin
os.dat
setup.bmp
setup.ins
setup.lid

Sharing

General

Malware Config

Signatures

Files

b4973a86f1dc54deac0bcca565e1f7af

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 14KB - Virtual size: 21KB

.rsrc Size: 3KB - Virtual size: 3KB

af417a432744d25669a269c31c292485

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 10KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 1000B

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 14KB - Virtual size: 21KB

.rsrc
Size: 3KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 1000B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB