sqlsrv32.dll

  • File Path: C:\Windows\system32\sqlsrv32.dll
  • Description: SQL Server ODBC Driver

Hashes

Type Hash
MD5 D89F76F996AC399F81179D767819651D
SHA1 A8FC82E3BFFE9627AE238F44740EA28B63C050D5
SHA256 8AA06C12231D71C78E5E2EE7E9A3C1B508C2754D7FA71628122DD16E9BCF3C5F
SHA384 377E18EDFFED1B494AE332B15C9A6284BF93ABB078AFA023A2F60E0958F3D0B15A3E52C8541C05CEE5951358E17029CC
SHA512 1C679EA69443D986F3F64333F0285801562764FBCFDE2056E79B44514F5E8856E15415983848163FAF0B31D9953C170FCF7C464D108ED956FEFEDA11942AE0D2
SSDEEP 12288:tJucZacmD+C1A/D19MMEQlr+Q6AvUbwY0KWGVdbzGu:vZBmqaA/D1iMdlr+Q62UbL7WqF7
IMP D86D706D74FD47F6CABDCDAD325F8877
PESHA1 989E1A2AEF782FF6B69029483BC828A1CA48C4AE
PE256 A9CDA1B869611FBD682F04623345455A58AEBAB2D6E8D6CDADC97F35A4D2B5FE

DLL Exports:

Function Name Ordinal Type
SQLGetTypeInfoW 47 Exported Function
SQLMoreResults 61 Exported Function
SQLGetStmtAttrW 114 Exported Function
SQLGetFunctions 44 Exported Function
SQLGetInfoW 45 Exported Function
SQLNativeSqlW 62 Exported Function
SQLParamOptions 64 Exported Function
SQLPrepareW 19 Exported Function
SQLParamData 48 Exported Function
SQLNumParams 63 Exported Function
SQLNumResultCols 18 Exported Function
SQLGetConnectOptionW 42 Exported Function
SQLGetCursorNameW 17 Exported Function
SQLGetConnectAttrW 107 Exported Function
SQLFreeHandle 106 Exported Function
SQLFreeStmt 16 Exported Function
SQLGetData 43 Exported Function
SQLGetDiagRecW 111 Exported Function
SQLGetEnvAttr 112 Exported Function
SQLGetDiagFieldW 110 Exported Function
SQLGetDescFieldW 108 Exported Function
SQLGetDescRecW 109 Exported Function
SQLPrimaryKeysW 65 Exported Function
SQLStatisticsW 53 Exported Function
SQLTablePrivilegesW 70 Exported Function
SQLSpecialColumnsW 52 Exported Function
SQLSetScrollOptions 69 Exported Function
SQLSetStmtAttrW 120 Exported Function
SQLTablesW 54 Exported Function
WizIntSecurityDlgProc 221 Exported Function
WizLanguageDlgProc 223 Exported Function
WizDSNDlgProc 220 Exported Function
TestDlgProc 225 Exported Function
WizDatabaseDlgProc 222 Exported Function
SQLRowCount 20 Exported Function
SQLSetConnectAttrW 116 Exported Function
SQLPutData 49 Exported Function
SQLProcedureColumnsW 66 Exported Function
SQLProceduresW 67 Exported Function
SQLSetConnectOptionW 50 Exported Function
SQLSetEnvAttr 119 Exported Function
SQLSetPos 68 Exported Function
SQLSetDescRec 118 Exported Function
SQLSetCursorNameW 21 Exported Function
SQLSetDescFieldW 117 Exported Function
BCP_setcolfmt 227 Exported Function
BCP_writefmt 218 Exported Function
BCP_sendrow 216 Exported Function
BCP_moretext 215 Exported Function
BCP_readfmt 217 Exported Function
ConfigDriverW 202 Exported Function
LibMain 200 Exported Function
SQLAllocHandle 101 Exported Function
FinishDlgProc 224 Exported Function
ConfigDSNW 201 Exported Function
ConnectDlgProc 219 Exported Function
BCP_collen 208 Exported Function
BCP_colptr 209 Exported Function
BCP_colfmt 206 Exported Function
BCP_batch 204 Exported Function
BCP_bind 205 Exported Function
BCP_columns 210 Exported Function
BCP_getcolfmt 226 Exported Function
BCP_init 213 Exported Function
BCP_exec 214 Exported Function
BCP_control 211 Exported Function
BCP_done 212 Exported Function
SQLBindCol 4 Exported Function
SQLDriverConnectW 41 Exported Function
SQLEndTran 105 Exported Function
SQLDisconnect 9 Exported Function
SQLDescribeColW 8 Exported Function
SQLDescribeParam 58 Exported Function
SQLExecDirectW 11 Exported Function
SQLFetchScroll 121 Exported Function
SQLForeignKeysW 60 Exported Function
SQLFetch 13 Exported Function
SQLExecute 12 Exported Function
SQLExtendedFetch 59 Exported Function
SQLCancel 5 Exported Function
SQLCloseCursor 103 Exported Function
SQLBulkOperations 24 Exported Function
SQLBindParameter 72 Exported Function
SQLBrowseConnectW 55 Exported Function
SQLColAttributeW 6 Exported Function
SQLCopyDesc 104 Exported Function
SQLDebug 203 Exported Function
SQLConnectW 7 Exported Function
SQLColumnPrivilegesW 56 Exported Function
SQLColumnsW 40 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: sqlsrv32.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/8aa06c12231d71c78e5e2ee7e9a3c1b508c2754d7fa71628122dd16e9bcf3c5f/detection/

Possible Misuse

The following table contains possible examples of sqlsrv32.dll being misused. While sqlsrv32.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base apt_deeppanda.yar description = “Hack Deep Panda - Trojan.Kakfum sqlsrv32.dll” CC BY-NC 4.0
signature-base apt_deeppanda.yar $s1 = “%s\sqlsrv32.dll” fullword ascii CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.