HealthChecks[.]SqlServer[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HealthChecks.SqlServer.dll
Size

9KB
MD5

0888345f85207351f12464f2e0383ea1
SHA1

89310dc7816d348d07060186b6d9c149093cb075
SHA256

54c4b4bfc33ef1d6ef2c4aebf4b4ff06b418359debb4d57ae8f8ca1f2784c39b
SHA512

b1c6224c138743b7714698713e5a284bd7819a02224782667bf6db133283e82cbccf3425d4b30b258ccaaa5bb8ba595c23d9f68b9f6485379db09c2b74083c69
SSDEEP

192:EQZkhyb/Dp3sJkioTOqRg7Ju0G5rMc6oCSwt19:YhyjDJsilRg7JAuc3CSwt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HealthChecks.SqlServer.dll

Files

HealthChecks.SqlServer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\aspnetcore-diagnostics-healthchecks\src\HealthChecks.SqlServer\obj\Release\net5.0\HealthChecks.SqlServer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ