SqlUtilities[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SqlUtilities.dll
Size

82KB
MD5

b472955a0859719249697026280ed864
SHA1

0fb4264d3603876aae1e0ef5b5da4b94c8d50761
SHA256

9f73c0bb551db54306ba6470ebbfe9cf9cccb77f8584467dd8a0e1b5a37b6807
SHA512

557d82a96eff9cf76d68b4c6522664c49bc8e5595d9c24c20714d08a77c773cdb1c7556e10468c8a1d59d6e1deef965a0566af2455ccce74bca8dd612619fd31
SSDEEP

1536:kBbyPSHmBV65B3Y7RCGA+r6yyzvvibbI0tojbw:ofml1zhCzC4Sojbw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SqlUtilities.dll

Files

SqlUtilities.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ