msorcl32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a670a730e71931c00d5c6edf4c6594b0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a670a730e71931c00d5c6edf4c6594b0N.dll
Resource
win10v2004-20240709-en
General
-
Target
a670a730e71931c00d5c6edf4c6594b0N.exe
-
Size
312KB
-
MD5
a670a730e71931c00d5c6edf4c6594b0
-
SHA1
ff14edc32506e30ca4b1783145fc686eba3c9fb7
-
SHA256
31016c7bc51357ae03b943a00178970e743a833fa45c7fc656123714fdae3d07
-
SHA512
f451d01ec28409eff9c64141b4cb6e0ae274047e8506bac7b5638a21f9ca7caead6422c03af8c005ae9031fb47e860fbc01f7d4e1b7189a725a074221f28426d
-
SSDEEP
6144:IAtWSLRnkENqq8tUsNP4etGKjxQPDGNHmmzg6Iihpi7T7:IAt59nkEN7GPVGK86Jg57/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a670a730e71931c00d5c6edf4c6594b0N.exe
Files
-
a670a730e71931c00d5c6edf4c6594b0N.exe.dll regsvr32 windows:6 windows x86 arch:x86
e1e9db0476c717eb63963742b87817b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
fwrite
_tempnam
_open
free
_fdopen
strstr
fseek
strncpy_s
strrchr
isdigit
atol
_strnicmp
isalpha
fclose
fread
ftell
_endthreadex
strchr
isxdigit
strcspn
strncmp
_stricmp
bsearch
_ultoa
strtoul
atoi
_HUGE
strtod
localeconv
floor
_ftol2_sse
atof
_gcvt
tolower
_XcptFilter
malloc
_initterm
_amsg_exit
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
isspace
isalnum
memset
toupper
memcpy
_vsnprintf
_beginthreadex
kernel32
GetSystemDirectoryA
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
GetLocalTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcmpA
lstrcmpiA
LoadLibraryExA
CreateEventA
ResetEvent
SetEvent
ReleaseMutex
HeapAlloc
HeapDestroy
HeapCreate
GetTempPathA
OutputDebugStringA
lstrlenA
SearchPathA
GetDriveTypeA
GetFullPathNameA
GetModuleHandleA
InterlockedExchange
GetProcAddress
FreeLibrary
GetVersion
VirtualQuery
InitializeCriticalSection
GetSystemInfo
DisableThreadLibraryCalls
DeleteCriticalSection
HeapFree
CloseHandle
LoadLibraryA
WaitForSingleObject
HeapReAlloc
IsDBCSLeadByte
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
CreateMutexA
user32
GetDlgItem
SetWindowPos
EnableWindow
CheckDlgButton
SendDlgItemMessageA
IsDlgButtonChecked
SetFocus
GetParent
GetWindowRect
GetClientRect
MapWindowPoints
GetDesktopWindow
MoveWindow
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxA
LoadStringW
GetCursor
DialogBoxParamA
SetCursor
GetWindowLongA
GetDlgItemTextA
EndDialog
LoadStringA
SetWindowTextA
SetWindowLongA
SetDlgItemTextA
CharUpperA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
Exports
Exports
ConfigDSN
DllMain
DllRegisterServer
DllUnregisterServer
LoadByOrdinal
SQLAllocConnect
SQLAllocEnv
SQLAllocStmt
SQLBindCol
SQLBindParameter
SQLBrowseConnect
SQLCancel
SQLColAttributes
SQLColumns
SQLConnect
SQLDescribeCol
SQLDescribeParam
SQLDisconnect
SQLDriverConnect
SQLError
SQLExecDirect
SQLExecute
SQLExtendedFetch
SQLFetch
SQLForeignKeys
SQLFreeConnect
SQLFreeEnv
SQLFreeStmt
SQLGetConnectOption
SQLGetCursorName
SQLGetData
SQLGetInfo
SQLGetStmtOption
SQLGetTypeInfo
SQLMoreResults
SQLNativeSql
SQLNumParams
SQLNumResultCols
SQLParamData
SQLPrepare
SQLPrimaryKeys
SQLProcedureColumns
SQLProcedures
SQLPutData
SQLRowCount
SQLSetConnectOption
SQLSetCursorName
SQLSetPos
SQLSetScrollOptions
SQLSetStmtOption
SQLSpecialColumns
SQLStatistics
SQLTables
SQLTransact
Sections
.text Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdbid Size: 4KB - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ