odbcMaincdrom
Static task
static1
Behavioral task
behavioral1
Sample
befbbc95cbd8b800af8c8798b54a8e5f73970a68d459e7d166740e62db0262d2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
befbbc95cbd8b800af8c8798b54a8e5f73970a68d459e7d166740e62db0262d2.dll
Resource
win10v2004-20220812-en
General
-
Target
befbbc95cbd8b800af8c8798b54a8e5f73970a68d459e7d166740e62db0262d2
-
Size
168KB
-
MD5
8dfa4baab354458e4527a07275196a8c
-
SHA1
dde95aeaf25ac61f9357bca585f6844a4698b487
-
SHA256
befbbc95cbd8b800af8c8798b54a8e5f73970a68d459e7d166740e62db0262d2
-
SHA512
c474a19d8698e4464982fd0e4efc95151cdce93df76f524452db537a1c8d9a3d9ff38bb71b2b4a93abe838169891907ff5fb4d2803b195e70e2a90812693d776
-
SSDEEP
3072:dkNIQ2kaTYuiQEshCky1gPJijHglIGlTKSlxzDc4/Qn8ObFN3avk1DA5O:quQRbRQbhSePJAH2IGsSl5onnuvk1De
Malware Config
Signatures
Files
-
befbbc95cbd8b800af8c8798b54a8e5f73970a68d459e7d166740e62db0262d2.dll windows x86
a699fce7a3c23d9870d9da8caa55009b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
LocalFree
GetModuleHandleA
LoadLibraryA
GetProcAddress
CreateProcessA
GetCurrentProcess
user32
TranslateMessage
SetTimer
GetParent
DefWindowProcA
advapi32
RegSetValueExA
DuplicateTokenEx
Exports
Exports
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 566B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ