CalculateSum
CalculateSumW
Static task
static1
Behavioral task
behavioral1
Sample
sql.tmp.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
sql.tmp.dll
Resource
win10v2004-20230915-en
Target
sql.tmp.dll
Size
318KB
MD5
d8a8cc25bf5ef5b96ff7a64f663cbd29
SHA1
d1e5e29c162566ce1d8a3d9c1a758fdbfef74174
SHA256
aec915753612bb003330ce7ffc67cfa9d7e3c12310f0ecfd0b7e50abf427989a
SHA512
703462497a8a85b00355ba7e572214fe84ea5151cd02adec6e76309fcaf06baf77e2846c3448ffb97ef8d8b0ad8b5edd2e434baad38eaa0f6855b04be461dcc7
SSDEEP
6144:mYu+TNVHFjt0W8zPtkpYrKms8YlTl+0TMKJU/liMTXYBcr4w:I2L0W8zFkpVzFl+08/MMj1X
Checks for missing Authenticode signature.
resource |
---|
sql.tmp.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FreeLibrary
HeapAlloc
HeapFree
VirtualFree
GetProcessHeap
IsBadReadPtr
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
GetLastError
HeapReAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
DecodePointer
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
RtlUnwindEx
Sleep
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetModuleFileNameW
LoadLibraryW
HeapSize
CalculateSum
CalculateSumW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ