a078214c4b4f7830dab5130a5883a72f4550ad530dd06c899bfcf8967d17946b

Sharing

Copy URL

Twitter E-mail

General

Target

a078214c4b4f7830dab5130a5883a72f4550ad530dd06c899bfcf8967d17946b
Size

1.9MB
MD5

8e289ceef4d9b38dfa24565c50bed057
SHA1

947b18ffa9d31f57abd741e9778abc9d6ceb21d0
SHA256

a078214c4b4f7830dab5130a5883a72f4550ad530dd06c899bfcf8967d17946b
SHA512

c0817798fd48817e75e7274331de3ab30942e6c264e1478d53dc3e5d087e9b5921f0ad62fd319717e80137cb7aa51776b7d2f9055c65ba2e834c7a5d46dd4f5a
SSDEEP

24576:f1Bt23U4RT+9fh20vvYpZM3MeHyWU0M6knj0c+VViDboJ+IPDvT:f03V4Df877Q9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a078214c4b4f7830dab5130a5883a72f4550ad530dd06c899bfcf8967d17946b

Files

a078214c4b4f7830dab5130a5883a72f4550ad530dd06c899bfcf8967d17946b
.dll windows:5 windows x86 arch:x86

81528cef86bdcc1bfeac42f752333052

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\logserver\vc_dll_excel\Debug\vc_dll_excel.pdb

Imports

kernel32

LocalLock
MoveFileExA
GetSystemDirectoryA
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
SetEnvironmentVariableA
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
MultiByteToWideChar
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetConsoleMode
GetConsoleCP
GetProcessHeap
InitializeCriticalSectionAndSpinCount
LCMapStringW
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
HeapSize
HeapAlloc
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
SetConsoleCtrlHandler
FatalAppExitA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
VirtualQuery
GetSystemInfo
VirtualAlloc
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
GetModuleFileNameA
ExitThread
CreateThread
ExitProcess
Sleep
RaiseException
IsBadReadPtr
HeapValidate
GetCommandLineA
RtlUnwind
SetFileAttributesW
LocalFileTimeToFileTime
GetFileSizeEx
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
FindResourceExW
GetShortPathNameW
lstrcmpiW
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DeleteFileW
MoveFileW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetCurrentDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
lstrcpyW
lstrcpyA
GetProfileIntW
VirtualProtect
lstrlenA
GetModuleHandleA
InterlockedIncrement
GetAtomNameW
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
InterlockedDecrement
GetCurrentProcessId
CreateEventW
SetEvent
WaitForSingleObject
CloseHandle
CompareStringA
InterlockedExchange
lstrcmpA
GetCurrentThread
GetLocaleInfoW
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
WideCharToMultiByte
MulDiv
GlobalFree
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
CompareStringW
LoadLibraryA
SetLastError
LoadLibraryW
GetVersionExW
FreeResource
lstrcmpW
FreeLibrary
GetLastError
GetCurrentThreadId
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleW
GetProcAddress
GetVersionExA
LoadResource
LockResource
SizeofResource
FindResourceW
LocalUnlock

user32

EndDialog
CreateDialogIndirectParamW
SystemParametersInfoW
DestroyMenu
UnpackDDElParam
GetClipboardFormatNameA
UnregisterClassW
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
ModifyMenuW
InsertMenuItemW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateW
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
GetWindowThreadProcessId
SetCursor
GetCursorPos
GetMessageW
TranslateMessage
PostQuitMessage
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringW
AppendMenuW
InsertMenuW
GetMenuItemID
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
GetAsyncKeyState
CheckDlgButton
OpenIcon
CloseWindow
LoadCursorW
PostThreadMessageW
EnableWindow
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
FindWindowExW
FindWindowW
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
GetDesktopWindow
SetCapture
GetActiveWindow
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
MessageBoxW
GetSystemMetrics
GetWindowRect
GetWindowPlacement
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
SetRectEmpty
ReleaseCapture
LoadAcceleratorsW
CharUpperW
DestroyIcon
TranslateAcceleratorW
ReuseDDElParam
GetMenuBarInfo
GetKeyNameTextW
MapVirtualKeyW
GetDialogBaseUnits
CheckRadioButton
IsIconic
SystemParametersInfoA
IntersectRect
MsgWaitForMultipleObjects
PeekMessageA
IsWindowUnicode
GetMessageA
DispatchMessageA
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
IsRectEmpty
MessageBoxA
OffsetRect
SetWindowPos
SetWindowLongW
GetWindowLongW
IsWindow
GetMessagePos
GetMessageTime
GetMenu
SetMenu
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
TabbedTextOutW
PostMessageW
MapDialogRect
RegisterWindowMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
GetClientRect
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetParent
GetWindow
GetCapture
WinHelpW
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
GetKeyState
DestroyWindow
SendMessageW
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetClipboardFormatNameW

gdi32

PatBlt
SetBkColor
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutW
GetTextExtentPoint32W
GetTextAlign
GetTextFaceW
GetTextMetricsW
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
GetGlyphOutlineW
StartDocW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
RoundRect
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
PolyPolygon
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
StretchDIBits
EnumFontFamiliesExW
GetMiterLimit
Rectangle
Polygon
Pie
Ellipse
Chord
Polyline
Arc
GetCurrentPositionEx
RectVisible
PtVisible
PaintRgn
InvertRgn
FrameRgn
FillRgn
LPtoDP
GetDCOrgEx
GetObjectW
CreateMetaFileW
CloseMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
ExtTextOutW
CreateBitmap
CopyMetaFileW
CreateDCW
GetDeviceCaps
GetStockObject
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateFontW
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetClipBox
ModifyWorldTransform
DPtoLP
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
GetWorldTransform
GetGraphicsMode
GetMapMode
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
UpdateColors
RealizePalette
GetNearestColor
SelectObject
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
CreateCompatibleDC
CreateICW
RectInRegion
PtInRegion
GetRgnBox
OffsetRgn
EqualRgn
CombineRgn
SetRectRgn
GetRegionData
ExtCreateRegion
PathToRegion
CreateRoundRectRgn
SetTextColor

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

SetThreadToken
OpenThreadToken
GetFileSecurityW
SetFileSecurityW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueW
RegCloseKey
RevertToSelf

shell32

DragAcceptFiles
ExtractIconW
DragFinish
DragQueryFileW
SHGetFileInfoW

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathRemoveExtensionW

ole32

CLSIDFromString
StringFromGUID2
CoUninitialize
CoInitializeEx
CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
CLSIDFromProgID
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
CoReleaseMarshalData
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
OleRun
CoRegisterClassObject
CoRevokeClassObject
ReadFmtUserTypeStg

oleaut32

SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
SafeArrayDestroy
VarDateFromStr
SysAllocString
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarBstrFromDate
SafeArrayGetElemsize
SafeArrayGetDim
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarDecFromStr
SystemTimeToVariantTime
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
VarCyFromStr

odbc32

ord4
ord48
ord49
ord20
ord117
ord59
ord108
ord44
ord119
ord46
ord12
ord68
ord43
ord141
ord2
ord1
ord23
ord150
ord145
ord51
ord15
ord9
ord14
ord3
ord111
ord18
ord13
ord61
ord5
ord16
ord110
ord72

Exports

Exports

OpenExcel
WriteToExcel
close_excel
create_excel

Sections

.textbss
Size: - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81528cef86bdcc1bfeac42f752333052

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

odbc32

Exports

Exports

Sections

.textbss Size: - Virtual size: 736KB

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 260KB - Virtual size: 260KB

.data Size: 15KB - Virtual size: 35KB

.idata Size: 21KB - Virtual size: 21KB

.didat Size: 1024B - Virtual size: 793B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 77KB - Virtual size: 77KB

.textbss
Size: - Virtual size: 736KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 260KB - Virtual size: 260KB

.data
Size: 15KB - Virtual size: 35KB

.idata
Size: 21KB - Virtual size: 21KB

.didat
Size: 1024B - Virtual size: 793B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 77KB - Virtual size: 77KB