F:\pb2\build\sb_0-11763321-1394824566.8\release\libmysql\RelWithDebInfo\libmysql.pdb
Static task
static1
Behavioral task
behavioral1
Sample
libmysql.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
libmysql.dll
Resource
win10v2004-20240426-en
General
-
Target
libmysql.dll
-
Size
4.5MB
-
MD5
e7c07adf849fc0a94fc4eafeaaf92594
-
SHA1
f0929ab78c9f43507cfe195b83466dceb1e635a6
-
SHA256
c97ef5cfce9b651ac720486b7070b1e08e084a7f70aa69557b4d4b98808b0026
-
SHA512
75b167b5c71d687092518764b1f7640de66242d4f1874aafa10402e206d11e7504cd904a110452b8c9bc5d95b9eacf820d6bb79657c9ce8de7426e665eff236b
-
SSDEEP
49152:bJuCyqxpMH6IfAspntIrEU9jTbaRJVG3U63klDfApq:bTcH6mE19r0VGiD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource libmysql.dll
Files
-
libmysql.dll.dll windows:5 windows x64 arch:x64
daf2d2a9f182a52f9ce83b3cc7675b2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapFree
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
WriteFile
GetModuleFileNameW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
SetCurrentDirectoryA
GetCurrentDirectoryA
FlsAlloc
GetCurrentThread
GetLastError
SetLastError
FlsFree
FlsGetValue
InitializeCriticalSection
FormatMessageA
LoadLibraryExA
EncodePointer
SetNamedPipeHandleState
WaitNamedPipeA
CreateFileA
UnmapViewOfFile
WaitForSingleObject
SetEvent
MapViewOfFile
OpenFileMappingA
OpenEventA
GetConsoleCP
CreateEventA
WaitForMultipleObjects
CancelIo
GetOverlappedResult
ReadFile
PeekNamedPipe
DisconnectNamedPipe
QueryPerformanceFrequency
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
GetLocaleInfoA
GetFileAttributesA
GetFullPathNameA
GetModuleHandleA
ResetEvent
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
DuplicateHandle
GetFileAttributesExA
FlushFileBuffers
TryEnterCriticalSection
OpenThread
TerminateThread
GetLogicalDrives
GetSystemDirectoryA
GetWindowsDirectoryA
FindClose
FindNextFileA
FindFirstFileA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetTimeZoneInformation
SetStdHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
ExitThread
CreateThread
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFilePointer
RaiseException
RtlPcToFileHeader
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
GetProcessHeap
RtlUnwindEx
GetCommandLineA
FlsSetValue
CloseHandle
GetCurrentThreadId
SetEnvironmentVariableW
secur32
GetUserNameExW
FreeCredentialsHandle
DeleteSecurityContext
AcquireCredentialsHandleA
FreeContextBuffer
InitializeSecurityContextW
CompleteAuthToken
advapi32
CryptReleaseContext
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CryptAcquireContextA
CryptGenRandom
IsValidSid
EqualSid
LookupAccountNameW
GetTokenInformation
ws2_32
closesocket
bind
WSAGetLastError
socket
freeaddrinfo
getaddrinfo
WSASetLastError
connect
getsockname
send
recv
getsockopt
setsockopt
shutdown
WSAIoctl
ioctlsocket
__WSAFDIsSet
select
getnameinfo
htonl
WSACleanup
WSAStartup
getservbyname
ntohs
getpeername
Exports
Exports
get_tty_password
handle_options
load_defaults
my_init
myodbc_remove_escape
mysql_affected_rows
mysql_autocommit
mysql_change_user
mysql_character_set_name
mysql_client_find_plugin
mysql_client_register_plugin
mysql_close
mysql_commit
mysql_data_seek
mysql_debug
mysql_dump_debug_info
mysql_embedded
mysql_eof
mysql_errno
mysql_error
mysql_escape_string
mysql_fetch_field
mysql_fetch_field_direct
mysql_fetch_fields
mysql_fetch_lengths
mysql_fetch_row
mysql_field_count
mysql_field_seek
mysql_field_tell
mysql_free_result
mysql_get_character_set_info
mysql_get_client_info
mysql_get_client_version
mysql_get_host_info
mysql_get_proto_info
mysql_get_server_info
mysql_get_server_version
mysql_get_ssl_cipher
mysql_hex_string
mysql_info
mysql_init
mysql_insert_id
mysql_kill
mysql_list_dbs
mysql_list_fields
mysql_list_processes
mysql_list_tables
mysql_load_plugin
mysql_load_plugin_v
mysql_more_results
mysql_next_result
mysql_num_fields
mysql_num_rows
mysql_options
mysql_options4
mysql_ping
mysql_plugin_options
mysql_query
mysql_read_query_result
mysql_real_connect
mysql_real_escape_string
mysql_real_query
mysql_refresh
mysql_rollback
mysql_row_seek
mysql_row_tell
mysql_select_db
mysql_send_query
mysql_server_end
mysql_server_init
mysql_set_character_set
mysql_set_local_infile_default
mysql_set_local_infile_handler
mysql_set_server_option
mysql_shutdown
mysql_sqlstate
mysql_ssl_set
mysql_stat
mysql_stmt_affected_rows
mysql_stmt_attr_get
mysql_stmt_attr_set
mysql_stmt_bind_param
mysql_stmt_bind_result
mysql_stmt_close
mysql_stmt_data_seek
mysql_stmt_errno
mysql_stmt_error
mysql_stmt_execute
mysql_stmt_fetch
mysql_stmt_fetch_column
mysql_stmt_field_count
mysql_stmt_free_result
mysql_stmt_init
mysql_stmt_insert_id
mysql_stmt_next_result
mysql_stmt_num_rows
mysql_stmt_param_count
mysql_stmt_param_metadata
mysql_stmt_prepare
mysql_stmt_reset
mysql_stmt_result_metadata
mysql_stmt_row_seek
mysql_stmt_row_tell
mysql_stmt_send_long_data
mysql_stmt_sqlstate
mysql_stmt_store_result
mysql_store_result
mysql_thread_end
mysql_thread_id
mysql_thread_init
mysql_thread_safe
mysql_use_result
mysql_warning_count
Sections
.text Size: 858KB - Virtual size: 858KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.3MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ