AzSqlExt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AzSqlExt.dll
Resource
win10v2004-20240508-en
General
-
Target
AzSqlExt.dll
-
Size
24KB
-
MD5
4dce6e12e632e9a75cf9597dcd6eb30d
-
SHA1
5164500f4fc2eab81b3af86c0b7e09493e7591c6
-
SHA256
91cc1657ad4a7299809110e86b5c1fb93affd41570a4975450f746cc7ac0d557
-
SHA512
8f155a97ef15b5faffd6f9400fb9d22ac5f44b11abb14e6f912655039140ca126c94970fbc75a21338392c20ba3bdd76ac19f32ef7e88fc203f0867dc1229fbc
-
SSDEEP
384:PVvW1Ip5tt75tI4b9zYN4uxCCpNNzF5zfJ4uaVuusPGe+OBEAtxDD0LsuWMNVWC0:tvWGp5tt75tI4CJlfJNzJvHX0LTwh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AzSqlExt.dll
Files
-
AzSqlExt.dll.dll windows:10 windows x86 arch:x86
1c22a7ae926c7f50432b476837b9d840
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_callnewh
_except_handler4_common
??1type_info@@UAE@XZ
_vsnwprintf
__CxxFrameHandler3
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
malloc
free
_purecall
_stricmp
_wcsicmp
kernel32
TerminateProcess
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetLastError
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
LocalAlloc
EnterCriticalSection
LoadLibraryA
GetProcAddress
LeaveCriticalSection
LocalFree
GetCurrentThread
GetCurrentProcess
Sleep
advapi32
AdjustTokenPrivileges
OpenProcessToken
OpenThreadToken
GetTokenInformation
authz
AuthzReportSecurityEvent
AuthzEnumerateSecurityEventSources
AuthzInstallSecurityEventSource
AuthzRegisterSecurityEventSource
ole32
StringFromCLSID
CoTaskMemFree
odbc32
ord139
ord77
ord9
ord141
ord31
ord176
ord72
ord4
ord26
ord111
ord136
Exports
Exports
AzGenerateAudit
__GetXpVersion
xp_AzManAddRole
xp_AzManAddUserToRole
xp_AzManDeleteRole
xp_AzManRemoveUserFromRole
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ