e:\TMD\SkyPlaformProject\SkyMould\MySqlTools\SkySqlTools\obj\Debug\SkySqlTools.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SkySqlTools.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SkySqlTools.dll
Resource
win10v2004-20240508-en
General
-
Target
SkySqlTools.dll
-
Size
21KB
-
MD5
2959faad47c268850bd40402e5f8e293
-
SHA1
06d4fe85d8947c4800dba54ab8592277b2aec0b1
-
SHA256
d261d0471ea791ed70da07523e36f293a7f86ade281b7ffcd0e5bfcda0af84f1
-
SHA512
ddd13ec1b70ee0884d09b808bb35f61e626a2b2175bcbb7cf1ff775c8bc5bdb1ceac8c9d585a8aef8c5d35ce28c0671d357fc2bde152b609eee1a564bff3a81e
-
SSDEEP
384:a9W6ccg4iYUBN1gDZKQlbN89oLtHHYfML+BD7yWN:aVcsiYUpGTbN89LJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SkySqlTools.dll
Files
-
SkySqlTools.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ