sqlite3MM[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
sqlite3MM.dll
Size 7.3MB
Sample251004-aqceksgl21
SHA256 a71fbc0f7f3dbc2bf010ac6e25dfe965a4db04b30e8bb81c2180440f9ce2ce12
MD5 8e01a3320ad9f46be1e69d2c889628cc
SHA1 f6bff5ebf13d5b2ce12fe74d6a6d605d116c41eb
SHA512 336217063b8c415b48dfac465c377c320099f7d717c7767a58b4f94b6533f0f6212f4765ee09419f6edb248e5ef1abcb5d31d8bd354c8b7a21bd80d17d7c8dac
SSDEEP 98304:IP4jvE6/rGxBFJKmBGOVRfeVY9oHlbPJUeDRjkQpBoUGoXLJGF3pXmB3i2Wrf9s7:y/6TYG2RWVvHlLr9LoUjXFGDXmBuaGyv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned binary was signed by an untrusted entity.

resource
sqlite3MM.dll

File Explorer

sqlite3MM.dll

.dll 7.3MB

sqlite3MM.dll

IMPHASH 644eba807aea177bec976727225315d6
SHA256 a71fbc0f7f3dbc2bf010ac6e25dfe965a4db04b30e8bb81c2180440f9ce2ce12
MD5 8e01a3320ad9f46be1e69d2c889628cc
SHA1 f6bff5ebf13d5b2ce12fe74d6a6d605d116c41eb
SHA512 336217063b8c415b48dfac465c377c320099f7d717c7767a58b4f94b6533f0f6212f4765ee09419f6edb248e5ef1abcb5d31d8bd354c8b7a21bd80d17d7c8dac
SSDEEP 98304:IP4jvE6/rGxBFJKmBGOVRfeVY9oHlbPJUeDRjkQpBoUGoXLJGF3pXmB3i2Wrf9s7:y/6TYG2RWVvHlLr9LoUjXFGDXmBuaGyv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

58:bb:d9:10:d1:e2:47:df:d9:c5:8f:9c:d6:2c:16:d8:e3:df:52:69:f0:d3:3d:55:8d:55:22:1f:d6:c5:b3:1d:00:f5:90:94:88:1b:79:89:18:f1:ad:8d:de:79:9b:c4:22:69:23:20:2d:62:ea:68:ff:0a:02:56:76:b9:ac:ea

Digest Algorithm

sha512

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=www.uggub3em5uf1.io,O=3mdyc7xtqn2sxemark5z

Chains

Oct 2, 2025

Minor OS version

Major OS version

Entry point

6359350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

LingCompareStrings LingCompareText RemapMMCharacters sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_bind_blob sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_text sqlite3_bind_text16 sqlite3_busy_handler sqlite3_busy_timeout sqlite3_changes sqlite3_close sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_commit_hook sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_function sqlite3_create_function16 sqlite3_data_count sqlite3_enable_load_extension sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_exec sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_get_auxdata sqlite3_get_table sqlite3_interrupt sqlite3_last_insert_rowid sqlite3_libversion sqlite3_load_extension sqlite3_mprintf sqlite3_open sqlite3_open16 sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_progress_handler sqlite3_reset sqlite3_result_blob sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_value sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_snprintf sqlite3_step sqlite3_total_changes sqlite3_trace sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_int sqlite3_value_int64 sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_vmprintf utf8_appendCharSafeBody_4_0 utf8_back1SafeBody_4_0 utf8_countTrailBytes_4_0 utf8_nextCharSafeBody_4_0 utf8_prevCharSafeBody_4_0

Name

.text

Size

818KB

Virtual Size

817KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

52KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcrc0

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rcrc1

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcrc2

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

434B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

sqlite3MM.dll

PE Signature issue

kernel32

generic