oddbse32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0fa1def13357185dbced6bc85a39a695d101ba3567c01bca402086b4bbaf4712.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0fa1def13357185dbced6bc85a39a695d101ba3567c01bca402086b4bbaf4712.dll
Resource
win10v2004-20240802-en
General
-
Target
0fa1def13357185dbced6bc85a39a695d101ba3567c01bca402086b4bbaf4712
-
Size
160KB
-
MD5
7cc1db7a7757c25f2edc79c285076955
-
SHA1
69acc73b812f98846f2fe54585cadc9a3dcc34a8
-
SHA256
0fa1def13357185dbced6bc85a39a695d101ba3567c01bca402086b4bbaf4712
-
SHA512
23674a15db9fa15ebbf93cd53c714b2b4b6426d875c794dd1619a80ec2ad2a66622bdd6bb9a2d372896decc924a8829b3a8dfe0b1b811081dc7bc6358cbbc01c
-
SSDEEP
3072:/IPxVRbSYTtLOQjYCmo/6ihpGWSrInXBJ7Sc/4bTn/iM:8BVRgihpGBk7M/V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa1def13357185dbced6bc85a39a695d101ba3567c01bca402086b4bbaf4712
Files
-
0fa1def13357185dbced6bc85a39a695d101ba3567c01bca402086b4bbaf4712.dll windows:6 windows x86 arch:x86
c042dc5285d88b7e542fff1fc34e4ef4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter
kernel32
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
MultiByteToWideChar
InterlockedExchange
odbcjt32
ord514
Exports
Exports
ConfigDSNW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ