?ExtractServices@@YAHPAD@Z
?InitSQLConnectOff@@YAHPAD@Z
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
db5d673d3c27df2fb5d07a4ccf31921bc93613aa0d93d2173adddde660ae620c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db5d673d3c27df2fb5d07a4ccf31921bc93613aa0d93d2173adddde660ae620c.dll
Resource
win10v2004-20220901-en
Target
db5d673d3c27df2fb5d07a4ccf31921bc93613aa0d93d2173adddde660ae620c
Size
121KB
MD5
cfda02ed862e2777bc60341c5f7c49d0
SHA1
6043d500021d0a3813b65aa0ee5ba91c6840d9d9
SHA256
db5d673d3c27df2fb5d07a4ccf31921bc93613aa0d93d2173adddde660ae620c
SHA512
6622f8f9a8e32449dd420e6ad56009df1750d2974a39c2188e93620a7282d6297c43bfde1b73cce592f1ffa7807ac1d6ef102740507a4665b5415c2f14d018da
SSDEEP
1536:H5lbIpulHEc0dj7Pt61lP+F8r59xnwIcCmJ0/xee03J:ZlbEcA7VEhwIcCmwxeB5
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
?ExtractServices@@YAHPAD@Z
?InitSQLConnectOff@@YAHPAD@Z
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE