Microsoft[.]Data[.]SqlClient[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft.Data.SqlClient.dll
Size

349KB
MD5

4c4ef61723ce40948a3ffdfd038d45af
SHA1

5dd24bff60789beb082120c314b408a8994c768a
SHA256

cee30052034695821d436caa73ac459a671734d995d6ea2223ae6d701f2ce7b4
SHA512

3b91a79c8bb78287ba144ed6561c6c89b82516c6076dd3f7c73162077f65d6ab7e42433e210f2e338fedc9b6301a76a4738f82fde364e9521b8c899579113b27
SSDEEP

6144:7Ot34C0EGIyUEDk7kA7zsD0Bg7g5eeGlYeRCEEuaVvp7gvJLJ0jgrgK6rp7Abo2R:7Ot7QYBg7g5eeGlYeRCEEuaVvp7gvJLj

Score

1^/10

Malware Config

Signatures

Files

Microsoft.Data.SqlClient.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:ef:5b:08:e8:fc:66:db:cf:5b:be:e5:72:d2:f3:50:a1:75:36:0a:ac:04:31:9d:9c:c5:bd:41:f9:f2:47:37
Signer

Actual PE Digest

d0:ef:5b:08:e8:fc:66:db:cf:5b:be:e5:72:d2:f3:50:a1:75:36:0a:ac:04:31:9d:9c:c5:bd:41:f9:f2:47:37

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/Project/obj/Release.AnyCPU/Microsoft.Data.SqlClient/netcore/netcoreapp3.1/Microsoft.Data.SqlClient.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

d0:ef:5b:08:e8:fc:66:db:cf:5b:be:e5:72:d2:f3:50:a1:75:36:0a:ac:04:31:9d:9c:c5:bd:41:f9:f2:47:37Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 338KB - Virtual size: 338KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d0:ef:5b:08:e8:fc:66:db:cf:5b:be:e5:72:d2:f3:50:a1:75:36:0a:ac:04:31:9d:9c:c5:bd:41:f9:f2:47:37
Signer

.text
Size: 338KB - Virtual size: 338KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B