SQLTest_4[.]4[.]7[.]5436[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SQLTest_4.4.7.5436.exe
Size 9.8MB
Sample260603-wwvzrsdv21
SHA256 d7c0073991a99b6a045da6535719545117d86c28d468acd3789573f18847a1ca
MD5 9632acaa15fc4a7f730ebb1d6e6c20e4
SHA1 8ed59695a357791c7fbc21c7b80afb4fedf0144b
SHA512 8405bd02d8ef398225ee5b42981ae7da7b4ff92e1c5fb8bbaee3701d39cc1417a184706fa90611781b71bcaf0f1b6db20ffa3714407576164c9069b6c669eadc
SSDEEP 196608:vuGm1ulUnTHWvzV6g6CHZE0f/jqVAGvYlaUB0g:mnulJz+G/+jvYgQ
TLSH
T124A6D00133A44426C76B4F3CB42CA6246678BD554B75E7CB26C4BD9E3CB33834A61BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

SQLTest_4.4.7.5436.exe

.exe 9.8MB

SQLTest_4.4.7.5436.exe

IMPHASH 443a640620781f966d44521993ea1089
SHA256 d7c0073991a99b6a045da6535719545117d86c28d468acd3789573f18847a1ca
MD5 9632acaa15fc4a7f730ebb1d6e6c20e4
SHA1 8ed59695a357791c7fbc21c7b80afb4fedf0144b
SHA512 8405bd02d8ef398225ee5b42981ae7da7b4ff92e1c5fb8bbaee3701d39cc1417a184706fa90611781b71bcaf0f1b6db20ffa3714407576164c9069b6c669eadc
SSDEEP 196608:vuGm1ulUnTHWvzV6g6CHZE0f/jqVAGvYlaUB0g:mnulJz+G/+jvYgQ
TLSH
T124A6D00133A44426C76B4F3CB42CA6246678BD554B75E7CB26C4BD9E3CB33834A61BA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

b3:70:a3:53:3c:86:ab:4b:8a:3f:78:e6:ff:84:e1:79:09:fb:5a:1e:64:9f:a7:ce:61:a5:3c:28:2c:99:58:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=03857576,CN=Red Gate Software Limited,O=Red Gate Software Limited,L=Cambridge,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Chains

May 26, 2026

SERIALNUMBER=03857576,CN=Red Gate Software Limited,O=Red Gate Software Limited,L=Cambridge,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=03857576,CN=Red Gate Software Limited,O=Red Gate Software Limited,L=Cambridge,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=03857576,CN=Red Gate Software Limited,O=Red Gate Software Limited,L=Cambridge,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Serial Number

0c:f9:9a:ab:8e:c1:87:30:63:8f:aa:0c:25:4a:fa:d4

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 5, 2023 - Dec 7, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

1346628

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\BuildAgentA\work\76c1afe1d45dd079\build\Release\NativeInstaller.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

FlsFree FlsSetValue FlsGetValue FlsAlloc GetDriveTypeW ExitProcess GetStdHandle GetFileType SetStdHandle QueryPerformanceFrequency VirtualQuery GetSystemInfo GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread GetCommandLineW GetCommandLineA SetEnvironmentVariableW RtlUnwind RaiseException OutputDebugStringW InitializeCriticalSectionEx GetConsoleOutputCP GetConsoleMode SetFilePointerEx GetTimeZoneInformation ReadConsoleW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetTempFileNameW Sleep SearchPathW GetProfileIntW LCMapStringW GetTickCount64 VerifyVersionInfoW VerSetConditionMask FindResourceExW GetWindowsDirectoryW SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW GetFileAttributesW FileTimeToLocalFileTime SetErrorMode VirtualProtect lstrcmpiW DuplicateHandle UnlockFile SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryW LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection FileTimeToSystemTime GlobalGetAtomNameW LeaveCriticalSection EnterCriticalSection CompareStringW GlobalFindAtomW LoadLibraryA GetSystemDirectoryW EncodePointer WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW ResumeThread SuspendThread SetThreadPriority GlobalAddAtomW GetCurrentProcessId CompareStringA lstrcmpW GlobalDeleteAtom LoadLibraryExW GetModuleHandleW GetModuleHandleA GetVersionExW GetCurrentThreadId GetCurrentThread OutputDebugStringA SetLastError CopyFileW FormatMessageW MulDiv GlobalFree GlobalLock GlobalUnlock GlobalSize GlobalAlloc GetCurrentProcess lstrcmpA lstrcpyW VirtualAlloc LocalAlloc lstrcpynW GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount HeapFree EnumResourceNamesW CreateDirectoryW LocalFree WriteFile ReadFile SetFilePointer GetFileSize CreateFileW CreateEventW GetTickCount VirtualFree GetModuleFileNameW ResetEvent GetDiskFreeSpaceExW GetLastError GetExitCodeProcess CreateProcessW SetCurrentDirectoryW WideCharToMultiByte GetEnvironmentVariableW GetTempPathW SetEvent RemoveDirectoryW FindClose FindNextFileW DeleteFileW FindFirstFileExW TerminateProcess WaitForSingleObject CloseHandle WriteConsoleW FreeLibrary GetProcAddress LoadLibraryW FindResourceW LoadResource LockResource SizeofResource MultiByteToWideChar FreeEnvironmentStringsW GetStringTypeW HeapQueryInformation

user32

GetAsyncKeyState CharUpperW DestroyIcon WindowFromPoint ReleaseCapture SetCapture WaitMessage IntersectRect KillTimer SetTimer RealChildWindowFromPoint DeleteMenu CopyImage GetSysColorBrush SystemParametersInfoW GetMenuItemInfoW DestroyMenu SendDlgItemMessageA GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo UnhookWindowsHookEx GetTopWindow GetClassNameW GetClassLongW PtInRect EqualRect CopyRect MapWindowPoints AdjustWindowRectEx RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow SetForegroundWindow GetForegroundWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild IsMenu CreateWindowExW MapDialogRect GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW ShowOwnedPopups LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState IsWindowVisible TranslateMessage GetMessageW IsDialogMessageW GetWindow SetWindowLongW GetWindowTextLengthW GetWindowTextW SetWindowTextW EmptyClipboard DrawStateW SetClassLongW SetWindowRgn GetSystemMetrics EnumWindows GetWindowLongW GetWindowThreadProcessId GetFocus SetFocus GetDlgCtrlID CheckDlgButton SetWindowPos MoveWindow ShowWindow GetDesktopWindow SetActiveWindow GetActiveWindow GetNextDlgTabItem GetDlgItem EndDialog TrackMouseEvent LoadImageW CreatePopupMenu GetMenuDefaultItem BringWindowToTop LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetNextDlgGroupItem IsRectEmpty DrawIconEx GetIconInfo EnableScrollBar CreateDialogIndirectParamW DestroyWindow HideCaret InvertRect NotifyWinEvent MapVirtualKeyW GetKeyNameTextW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard GetClassInfoExW GetDoubleClickTime ModifyMenuW RegisterClipboardFormatW CharUpperBuffW IsClipboardFormatAvailable GetUpdateRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel PostMessageW PeekMessageW DispatchMessageW MsgWaitForMultipleObjects EnableWindow LoadIconW GetSystemMenu AppendMenuW SendMessageW IsIconic GetClientRect DrawIcon MessageBeep InvalidateRect LoadCursorW SetCursor GetParent GetWindowRect SetRectEmpty OffsetRect InflateRect DrawFocusRect UnregisterClassW GetMenuStringW GetMenuState GetSubMenu GetMenuItemID GetMenuItemCount InsertMenuW RemoveMenu PostQuitMessage LoadMenuW IsWindowEnabled MessageBoxW GetLastActivePopup DrawTextW DrawTextExW GrayStringW TabbedTextOutW GetDC SetParent DrawEdge DrawFrameControl IsZoomed GetWindowDC ReleaseDC BeginPaint EndPaint ClientToScreen ScreenToClient GetSysColor FillRect IsWindow SetClipboardData SetCursorPos CopyIcon FrameRect UnionRect UpdateLayeredWindow MonitorFromPoint GetComboBoxInfo PostThreadMessageW GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW SetRect LockWindowUpdate SubtractRect DestroyCursor GetWindowRgn CreateMenu SetMenuDefaultItem

gdi32

RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetBkColor SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextColor SetTextAlign MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP GetTextMetricsW CreateCompatibleBitmap EnumFontFamiliesExW PtVisible GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline CreateRoundRectRgn LPtoDP Rectangle GetRgnBox OffsetRgn RoundRect FillRgn FrameRgn GetBoundsRect PtInRegion ExtFloodFill SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx GetTextFaceW LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePatternBrush CreatePen CreateCompatibleDC CreateBitmap BitBlt GetDeviceCaps CreateDCW CopyMetaFileW GetObjectW GetStockObject SetBkMode SelectObject CreatePalette CreateHatchBrush CreateFontIndirectW

msimg32

AlphaBlend TransparentBlt

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegSetValueExW RegQueryValueExW RegCloseKey RegEnumKeyW AllocateAndInitializeSid CheckTokenMembership FreeSid GetNamedSecurityInfoW SetEntriesInAclW SetNamedSecurityInfoW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegDeleteValueW RegCreateKeyExW RegQueryValueW RegDeleteKeyW

shell32

SHGetFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetMalloc SHCreateDirectoryExW SHGetFileInfoW SHGetDesktopFolder DragQueryFileW SHAppBarMessage SHBrowseForFolderW DragFinish ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsDirectoryA PathRemoveFileSpecW PathFindExtensionW PathAppendW PathIsUNCW PathStripToRootW StrFormatKBSizeW PathFindFileNameW

uxtheme

GetWindowTheme IsAppThemed GetThemePartSize IsThemeBackgroundPartiallyTransparent GetCurrentThemeName GetThemeSysColor DrawThemeBackground CloseThemeData OpenThemeData DrawThemeParentBackground DrawThemeText GetThemeColor

ole32

IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop CreateStreamOnHGlobal CoInitializeEx CoDisconnectObject CoCreateInstance ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc StringFromGUID2 CoCreateGuid CoUninitialize CoInitialize

oleaut32

VariantChangeType VariantClear VariantInit SysAllocStringLen SysAllocString SysFreeString SysStringLen VariantCopy VarBstrFromDate LoadTypeLi SystemTimeToVariantTime VariantTimeToSystemTime

wintrust

WinVerifyTrust

crypt32

CryptQueryObject CryptMsgGetParam CertCloseStore CryptMsgClose CryptDecodeObject CertFindCertificateInStore CertGetNameStringW CertFreeCertificateContext

gdiplus

GdipSetInterpolationMode GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipDrawImageRectI GdipCreateFromHDC GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmGetContext ImmReleaseContext ImmGetOpenStatus

winmm

PlaySoundW

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

331KB

Virtual Size

331KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

22KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7.8MB

Virtual Size

7.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SQLTest_4.4.7.5436.exe

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

wintrust

crypt32

gdiplus

oleacc

imm32

winmm

generic