?ExtractServices@@YAHPAD@Z
?InitSQLConnectOff@@YAHPAD@Z
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
bf39dab861ba7f58b7569283011ea18fa81a4f0956a349e158a306434c5ee449.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf39dab861ba7f58b7569283011ea18fa81a4f0956a349e158a306434c5ee449.dll
Resource
win10v2004-20220812-en
Target
bf39dab861ba7f58b7569283011ea18fa81a4f0956a349e158a306434c5ee449
Size
120KB
MD5
671345f23591db7aae9816d85a247000
SHA1
3ceb82875669d17873c6b03ac53658af8b5f5568
SHA256
bf39dab861ba7f58b7569283011ea18fa81a4f0956a349e158a306434c5ee449
SHA512
c6cbaf52754602a9f5929a31af1bc5299d514b469747517ef8276dc3e2cee802d3581ce431e05935e56451151c93cad78f6cbd73dd8561b0ee2dc409bd503f4e
SSDEEP
1536:NCyibbbt2Sa9IHVFQsJO+CD/YAinM0/yX9Ev:NCzbt/bLu+CUO/Xev
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
?ExtractServices@@YAHPAD@Z
?InitSQLConnectOff@@YAHPAD@Z
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE