dizfree[.]rar | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
dizfree.rar
Size 328KB
Sample260727-qkhbmsbb56
SHA256 f2b5c3868e1eeaa4ca75c18bf082b3e4dd25bb869a09e0a961077d4e0dd9f14d
MD5 0e3d38b9642a2b52c074350ce75dfdeb
SHA1 46cb1c1ac702d6334259a1b1b53eb0f6bff5dd28
SHA512 c12de91dcafe0ffa0ffa152fc1176d7380149b9927e73e006e485a85ddd89c63867a1668f49b99a38a703ec778fb5c8281a9cc678482bc106b49bfffd7f6adc0
SSDEEP 6144:GmBJSTpVslBtZdk38AAHe4KmIlpsYwiVakpBLZSdrMeQO1ip6DGwiWEHcQ:ZUnkXyMfLuzwijpBgVU4kWEHP
TLSH
T1646423D2F5273B56B938953E2B7363CFCC26993208A5E1075CD2B32615ACD40C9AA4FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dizfree/dizsubmitfree/DiZsubmit.exe

File Explorer

dizfree.rar

.rar 328KB
dizfree/dizsubmitfree/DiZsubmit.exe

.exe 902KB
dizfree/dizsubmitfree/count.rtf

9B
dizfree/dizsubmitfree/date.rtf

321B
dizfree/dizsubmitfree/index.rtf

398B
dizfree/dizsubmitfree/otvet.rtf

322B
dizfree/dizsubmitfree/type.rtf

1011B
dizfree/dizsubmitfree/url.rtf

3KB
dizfree/dizsubmitfree/zamet.rtf

720B

dizfree.rar

SHA256 f2b5c3868e1eeaa4ca75c18bf082b3e4dd25bb869a09e0a961077d4e0dd9f14d
MD5 0e3d38b9642a2b52c074350ce75dfdeb
SHA1 46cb1c1ac702d6334259a1b1b53eb0f6bff5dd28
SHA512 c12de91dcafe0ffa0ffa152fc1176d7380149b9927e73e006e485a85ddd89c63867a1668f49b99a38a703ec778fb5c8281a9cc678482bc106b49bfffd7f6adc0
SSDEEP 6144:GmBJSTpVslBtZdk38AAHe4KmIlpsYwiVakpBLZSdrMeQO1ip6DGwiWEHcQ:ZUnkXyMfLuzwijpBgVU4kWEHP
TLSH
T1646423D2F5273B56B938953E2B7363CFCC26993208A5E1075CD2B32615ACD40C9AA4FD
MD5 SHA1 SHA512 SSDEEP TLSH

dizfree/dizsubmitfree/DiZsubmit.exe

IMPHASH 0c9e77732475a8109570e36e40c61b04
SHA256 ef2ae11fd472c7b6dba547e2900761bc03a9cbcdf69c0ca621318b09aacefdc9
MD5 34fd990c539d93f9fc14563aea990783
SHA1 cf6b49502a67d4a6220fefa310b58070bd86da9b
SHA512 0a1be3372786ea5f4e33367ee7acfa7c4d3797767e0b3358c139c5843b36a9b68bd36f849ad3b5532d203d0d2bdf4e05fb1352c2b33c990fe57b391dde0da6ad
SSDEEP 12288:SYnCt7csFbAKCxyDzEDLPdNuw3miJsfX4N2GF+UfWiICffuD2Xw+:SYnCPqYwDLPdc/iJswdFn4
TLSH
T190157C22B6928833C17316748D9BA7A1663BFF113A24464B37F52D4C6FB9B803D16397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5140

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CompareStringA CreateEventA CreateFileA CreateThread DebugBreak DeleteCriticalSection EnterCriticalSection EnumCalendarInfoA ExitProcess FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetComputerNameA GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetDiskFreeSpaceA GetEnvironmentStrings GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetProfileStringA GetStartupInfoA GetStdHandle GetStringTypeExA GetStringTypeW GetSystemInfo GetThreadLocale GetTickCount GetUserDefaultLCID GetVersion GetVersionExA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFindAtomA GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalSize GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedIncrement LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource MulDiv MultiByteToWideChar RaiseException ReadFile ResetEvent RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetThreadLocale SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpA lstrcpyA lstrcpynA lstrlenA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

winspool.drv

ClosePrinter DocumentPropertiesA EnumPrintersA OpenPrinterA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write ord17

gdi32

BitBlt CloseEnhMetaFile CombineRgn CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDCA CreateDIBSection CreateDIBitmap CreateEnhMetaFileA CreateFontIndirectA CreateHalftonePalette CreateICA CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject EndDoc EndPage ExcludeClipRect ExtCreatePen ExtTextOutA GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileDescriptionA GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectA GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32A GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LPtoDP LineTo MaskBlt MoveToEx PatBlt PlayEnhMetaFile PolyPolyline Polyline RealizePalette RectVisible Rectangle RestoreDC SaveDC SelectObject SelectPalette SetAbortProc SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetMapMode SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx StartDocA StartPage StretchBlt UnrealizeObject

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginPaint CallNextHookEx CallWindowProcA CharLowerA CharLowerBuffA CharNextA CharUpperBuffA CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumClipboardFormats EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoA GetClassNameA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetMessagePos GetMessageTime GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSystemMenu GetSystemMetrics GetTopWindow GetUpdateRect GetWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsCharAlphaA IsCharAlphaNumericA IsChild IsDialogMessageA IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA LockWindowUpdate MapVirtualKeyA MapWindowPoints MessageBeep MessageBoxA OemToCharA OffsetRect OpenClipboard PeekMessageA PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SetActiveWindow SetCapture SetClassLongA SetClipboardData SetCursor SetFocus SetForegroundWindow SetKeyboardState SetMenu SetMenuItemInfoA SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowPlacement SetWindowPos SetWindowTextA SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnionRect UnregisterClassA UpdateWindow ValidateRect WaitMessage WinHelpA WindowFromPoint wsprintfA GetSysColor

ole32

CoCreateInstance CoGetClassObject CoInitialize CoTaskMemFree CoUninitialize CreateStreamOnHGlobal IsAccelerator IsEqualGUID OleDraw OleSetMenuDescriptor ProgIDFromCLSID StringFromCLSID

oleaut32

GetActiveObject GetErrorInfo SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SysAllocString SysAllocStringLen SysFreeString SysReAllocStringLen VarBoolFromStr VarBstrFromBool VarBstrFromCy VarBstrFromDate VarCyFromStr VarDateFromStr VarI4FromStr VarNeg VarNot VarR8FromStr VariantChangeType VariantChangeTypeEx VariantClear VariantCopy VariantCopyInd VariantInit

@$xp$26Shdocvw_tlb@TCppWebBrowser @$xp$26Shdocvw_tlb@TCppWebBrowser @$xp$26Shdocvw_tlb@TCppWebBrowser @$xp$28Shdocvw_tlb@TCppShellWindows @$xp$28Shdocvw_tlb@TCppShellWindows @$xp$28Shdocvw_tlb@TCppShellWindows @$xp$29Shdocvw_tlb@TCppShellUIHelper @$xp$29Shdocvw_tlb@TCppShellUIHelper @$xp$29Shdocvw_tlb@TCppShellUIHelper @$xp$29Shdocvw_tlb@TCppWebBrowser_V1 @$xp$29Shdocvw_tlb@TCppWebBrowser_V1 @$xp$29Shdocvw_tlb@TCppWebBrowser_V1 @$xp$32Shdocvw_tlb@TCppCScriptErrorList @$xp$32Shdocvw_tlb@TCppCScriptErrorList @$xp$32Shdocvw_tlb@TCppCScriptErrorList @$xp$32Shdocvw_tlb@TCppInternetExplorer @$xp$32Shdocvw_tlb@TCppInternetExplorer @$xp$32Shdocvw_tlb@TCppInternetExplorer @$xp$33Shdocvw_tlb@TCppSearchAssistantOC @$xp$33Shdocvw_tlb@TCppSearchAssistantOC @$xp$33Shdocvw_tlb@TCppSearchAssistantOC @$xp$34Shdocvw_tlb@TCppShellBrowserWindow @$xp$34Shdocvw_tlb@TCppShellBrowserWindow @$xp$34Shdocvw_tlb@TCppShellBrowserWindow @$xp$36Shdocvw_tlb@TShellFavoritesNameSpace @$xp$36Shdocvw_tlb@TShellFavoritesNameSpace @$xp$36Shdocvw_tlb@TShellFavoritesNameSpace @@Shdocvw_ocx@Finalize @@Shdocvw_ocx@Initialize @@Unit1@Finalize @@Unit1@Initialize @@Unit2@Finalize @@Unit2@Initialize @Shdocvw_ocx@Register$qqrv @Shdocvw_tlb@TCppCScriptErrorList@ @Shdocvw_tlb@TCppCScriptErrorList@ @Shdocvw_tlb@TCppCScriptErrorList@ @Shdocvw_tlb@TCppCScriptErrorList@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppCScriptErrorList@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppCScriptErrorList@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppCScriptErrorList@BeforeDestruction$qqrv @Shdocvw_tlb@TCppCScriptErrorList@Connect$qqrv @Shdocvw_tlb@TCppCScriptErrorList@ConnectTo$qqr91%TComInterface$28Shdocvw_tlb@IScriptErrorListpx5_GUID$e&@Shdocvw_tlb@IID_IScriptErrorList$% @Shdocvw_tlb@TCppCScriptErrorList@Disconnect$qqrv @Shdocvw_tlb@TCppCScriptErrorList@GetDefaultInterface$qv @Shdocvw_tlb@TCppCScriptErrorList@GetDunk$qqrv @Shdocvw_tlb@TCppCScriptErrorList@InitServerData$qqrv @Shdocvw_tlb@TCppInternetExplorer@ @Shdocvw_tlb@TCppInternetExplorer@ @Shdocvw_tlb@TCppInternetExplorer@ @Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppInternetExplorer@BeforeDestruction$qqrv @Shdocvw_tlb@TCppInternetExplorer@Connect$qqrv @Shdocvw_tlb@TCppInternetExplorer@ConnectTo$qqr83%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$e&@Shdocvw_tlb@IID_IWebBrowser2$% @Shdocvw_tlb@TCppInternetExplorer@Disconnect$qqrv @Shdocvw_tlb@TCppInternetExplorer@GetDefaultInterface$qv @Shdocvw_tlb@TCppInternetExplorer@GetDunk$qqrv @Shdocvw_tlb@TCppInternetExplorer@InitServerData$qqrv @Shdocvw_tlb@TCppInternetExplorer@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppSearchAssistantOC@ @Shdocvw_tlb@TCppSearchAssistantOC@ @Shdocvw_tlb@TCppSearchAssistantOC@ @Shdocvw_tlb@TCppSearchAssistantOC@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppSearchAssistantOC@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppSearchAssistantOC@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppSearchAssistantOC@BeforeDestruction$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@Connect$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@ConnectTo$qqr97%TComInterface$31Shdocvw_tlb@ISearchAssistantOC3px5_GUID$e&@Shdocvw_tlb@IID_ISearchAssistantOC3$% @Shdocvw_tlb@TCppSearchAssistantOC@Disconnect$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@GetDefaultInterface$qv @Shdocvw_tlb@TCppSearchAssistantOC@GetDunk$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@InitServerData$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppShellBrowserWindow@ @Shdocvw_tlb@TCppShellBrowserWindow@ @Shdocvw_tlb@TCppShellBrowserWindow@ @Shdocvw_tlb@TCppShellBrowserWindow@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellBrowserWindow@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellBrowserWindow@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellBrowserWindow@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@Connect$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@ConnectTo$qqr83%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$e&@Shdocvw_tlb@IID_IWebBrowser2$% @Shdocvw_tlb@TCppShellBrowserWindow@Disconnect$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellBrowserWindow@GetDunk$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@InitServerData$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppShellUIHelper@ @Shdocvw_tlb@TCppShellUIHelper@ @Shdocvw_tlb@TCppShellUIHelper@ @Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellUIHelper@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellUIHelper@Connect$qqrv @Shdocvw_tlb@TCppShellUIHelper@ConnectTo$qqr87%TComInterface$26Shdocvw_tlb@IShellUIHelperpx5_GUID$e&@Shdocvw_tlb@IID_IShellUIHelper$% @Shdocvw_tlb@TCppShellUIHelper@Disconnect$qqrv @Shdocvw_tlb@TCppShellUIHelper@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellUIHelper@GetDunk$qqrv @Shdocvw_tlb@TCppShellUIHelper@InitServerData$qqrv @Shdocvw_tlb@TCppShellWindows@ @Shdocvw_tlb@TCppShellWindows@ @Shdocvw_tlb@TCppShellWindows@ @Shdocvw_tlb@TCppShellWindows@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellWindows@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellWindows@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellWindows@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellWindows@Connect$qqrv @Shdocvw_tlb@TCppShellWindows@ConnectTo$qqr85%TComInterface$25Shdocvw_tlb@IShellWindowspx5_GUID$e&@Shdocvw_tlb@IID_IShellWindows$% @Shdocvw_tlb@TCppShellWindows@Disconnect$qqrv @Shdocvw_tlb@TCppShellWindows@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellWindows@GetDunk$qqrv @Shdocvw_tlb@TCppShellWindows@InitServerData$qqrv @Shdocvw_tlb@TCppShellWindows@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppWebBrowser@ @Shdocvw_tlb@TCppWebBrowser@ @Shdocvw_tlb@TCppWebBrowser@ @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp6HWND__ @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser@CControlData @Shdocvw_tlb@TCppWebBrowser@ClientToWindow$qqrpit1 @Shdocvw_tlb@TCppWebBrowser@CreateControl$qqrv @Shdocvw_tlb@TCppWebBrowser@DEF_CTL_INTF @Shdocvw_tlb@TCppWebBrowser@EventDispIDs @Shdocvw_tlb@TCppWebBrowser@ExecWB$qqr20Shdocvw_tlb@OLECMDID25Shdocvw_tlb@OLECMDEXECOPTp10tagVARIANTt3 @Shdocvw_tlb@TCppWebBrowser@GetDefaultInterface$qqrv @Shdocvw_tlb@TCppWebBrowser@GetProperty$qqrpb @Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri @Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri @Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri @Shdocvw_tlb@TCppWebBrowser@GoBack$qqrv @Shdocvw_tlb@TCppWebBrowser@GoForward$qqrv @Shdocvw_tlb@TCppWebBrowser@GoHome$qqrv @Shdocvw_tlb@TCppWebBrowser@GoSearch$qqrv @Shdocvw_tlb@TCppWebBrowser@InitControlData$qqrv @Shdocvw_tlb@TCppWebBrowser@Navigate$qqrpbp10tagVARIANTt2t2t2 @Shdocvw_tlb@TCppWebBrowser@Navigate2$qqrp10tagVARIANTt1t1t1t1 @Shdocvw_tlb@TCppWebBrowser@OptParam @Shdocvw_tlb@TCppWebBrowser@PutProperty$qqrpb10tagVARIANT @Shdocvw_tlb@TCppWebBrowser@QueryStatusWB$qqr20Shdocvw_tlb@OLECMDID @Shdocvw_tlb@TCppWebBrowser@Quit$qqrv @Shdocvw_tlb@TCppWebBrowser@Refresh$qqrv @Shdocvw_tlb@TCppWebBrowser@Refresh2$qqrp10tagVARIANT @Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio @Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio @Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio @Shdocvw_tlb@TCppWebBrowser@ShowBrowserBar$qqrp10tagVARIANTt1t1 @Shdocvw_tlb@TCppWebBrowser@Stop$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Application$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Container$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Document$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Parent$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@ @Shdocvw_tlb@TCppWebBrowser_V1@ @Shdocvw_tlb@TCppWebBrowser_V1@ @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp6HWND__ @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser_V1@CControlData @Shdocvw_tlb@TCppWebBrowser_V1@CreateControl$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@DEF_CTL_INTF @Shdocvw_tlb@TCppWebBrowser_V1@EventDispIDs @Shdocvw_tlb@TCppWebBrowser_V1@GetDefaultInterface$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoBack$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoForward$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoHome$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoSearch$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@InitControlData$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@Navigate$qqrpbp10tagVARIANTt2t2t2 @Shdocvw_tlb@TCppWebBrowser_V1@OptParam @Shdocvw_tlb@TCppWebBrowser_V1@Refresh$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@Refresh2$qqrp10tagVARIANT @Shdocvw_tlb@TCppWebBrowser_V1@Stop$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Application$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Container$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Document$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Parent$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@ @Shdocvw_tlb@TShellFavoritesNameSpace@ @Shdocvw_tlb@TShellFavoritesNameSpace@ @Shdocvw_tlb@TShellFavoritesNameSpace@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TShellFavoritesNameSpace@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TShellFavoritesNameSpace@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TShellFavoritesNameSpace@BeforeDestruction$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@Connect$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@ConnectTo$qqr89%TComInterface$27Shdocvw_tlb@IShellNameSpacepx5_GUID$e&@Shdocvw_tlb@IID_IShellNameSpace$% @Shdocvw_tlb@TShellFavoritesNameSpace@Disconnect$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@GetDefaultInterface$qv @Shdocvw_tlb@TShellFavoritesNameSpace@GetDunk$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@InitServerData$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% _Form1 _Form2 __GetExceptDLLinfo ___CPPdebugHook

Name

.text

Size

735KB

Virtual Size

736KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

51KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

12KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

37KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dizfree.rar

dizfree/dizsubmitfree/DiZsubmit.exe

advapi32

kernel32

version

winspool.drv

comctl32

gdi32

user32

ole32

oleaut32

generic

dizfree/dizsubmitfree/count.rtf

dizfree/dizsubmitfree/date.rtf

dizfree/dizsubmitfree/index.rtf

dizfree/dizsubmitfree/otvet.rtf

dizfree/dizsubmitfree/type.rtf

dizfree/dizsubmitfree/url.rtf

dizfree/dizsubmitfree/zamet.rtf