SqlSugar[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SqlSugar.dll
Size

600KB
MD5

51cc8b96cef7edc85ccec30901faf3b1
SHA1

430c5735510983361c9cd1bc073a3f0644a0c6d0
SHA256

8994fb311c5778882bdc7d52ac9cf1027ff026d1b024a5ef3a95803e74f107f4
SHA512

dd626bca0923118f73e91846ae201c83862621e659be18a0d3355691567b91f8002bedf05f02765030be0fbc6fbae4884a0b25020df931093b5c7ca2d4c387b5
SSDEEP

12288:OIRdAaWg3CXjZiLEZQ9My4iZ/6VBogmm0P5oHMrGfT:Ody4jkP4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SqlSugar.dll

Files

SqlSugar.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\MyOpenSource\SqlSugar4.XNew\SqlSugar\Src\Asp.NetCore2\SqlSeverTest\SqlSugar\obj\Debug\netstandard2.0\SqlSugar.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 598KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ