libecpg[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

libecpg.dll
Size

490KB
MD5

0bd8ffb3a9261fe78a43f905592629ce
SHA1

8500f503a0e451070278830430cf82ffeda2a564
SHA256

f2706b0f6bc4d740f68f3767eb04acdc450e5afc7cefd37ff35edb6d9d5b112a
SHA512

af42f73d27a411655d9accf3cf67a040606620896032624271e90d8dad7030515e63977e97a75350bec35b6d508aff08ab502d37b254fb50bb5b1a0ab0956d01
SSDEEP

6144:JTk/yOFxNmtpnmxJ28HI5rpRtzmtHigKt0tHo6GPKJfQyaT:+/yOFxNmtlcDovbmXPYKJfQyaT

Score

1^/10

Malware Config

Signatures

Files

libecpg.dll
.dll windows x64

e520dabfd2ccc4dfeff35105a99b99dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libpq

PQclear
PQcmdStatus
PQcmdTuples
PQconnectdbParams
PQconsumeInput
PQdescribePrepared
PQendcopy
PQerrorMessage
PQescapeString
PQexec
PQexecParams
PQexecPrepared
PQfformat
PQfinish
PQfmod
PQfname
PQfreemem
PQfsize
PQftype
PQgetCopyData
PQgetResult
PQgetisnull
PQgetlength
PQgetvalue
PQmakeEmptyPGresult
PQnfields
PQnotifies
PQntuples
PQoidValue
PQparameterStatus
PQprepare
PQresultErrorField
PQresultErrorMessage
PQresultStatus
PQsetNoticeReceiver
PQstatus
PQtransactionStatus

libpgtypes

PGTYPESdate_from_asc
PGTYPESdate_to_asc
PGTYPESinterval_copy
PGTYPESinterval_from_asc
PGTYPESinterval_to_asc
PGTYPESnumeric_copy
PGTYPESnumeric_free
PGTYPESnumeric_from_asc
PGTYPESnumeric_from_decimal
PGTYPESnumeric_new
PGTYPESnumeric_to_asc
PGTYPESnumeric_to_decimal
PGTYPEStimestamp_from_asc
PGTYPEStimestamp_to_asc

kernel32

CreateMutexA
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
GetLastError
GetShortPathNameA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryExA
MultiByteToWideChar
ReleaseMutex
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_getcwd
_getpid
_initterm
_lock
_strdup
_unlock
abort
atol
calloc
fflush
fputc
free
fwrite
getenv
isalnum
isalpha
islower
isspace
isupper
localeconv
malloc
memcmp
memcpy
memmove
memset
realloc
setlocale
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
strtol
strtoul
tolower
toupper
vfprintf
wcslen

libxml2-2

DllMain

Exports

Exports

ECPGallocate_desc
ECPGconnect
ECPGdeallocate
ECPGdeallocate_all
ECPGdeallocate_desc
ECPGdebug
ECPGdescribe
ECPGdisconnect
ECPGdo
ECPGdo_descriptor
ECPGfree_auto_mem
ECPGget_PGconn
ECPGget_desc
ECPGget_desc_header
ECPGget_sqlca
ECPGget_var
ECPGis_noind_null
ECPGprepare
ECPGprepared_statement
ECPGset_desc
ECPGset_desc_header
ECPGset_noind_null
ECPGset_var
ECPGsetcommit
ECPGsetconn
ECPGstatus
ECPGtrans
ECPGtransactionStatus
sqlprint

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e520dabfd2ccc4dfeff35105a99b99dd

Headers

DLL Characteristics

File Characteristics

Imports

libpq

libpgtypes

kernel32

msvcrt

libxml2-2

Exports

Exports

Sections

.text Size: 117KB - Virtual size: 117KB

.data Size: 512B - Virtual size: 496B

.rdata Size: 16KB - Virtual size: 16KB

.pdata Size: 4KB - Virtual size: 3KB

.xdata Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 3KB

.edata Size: 1024B - Virtual size: 776B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 976B

.reloc Size: 512B - Virtual size: 164B

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 77KB - Virtual size: 77KB

/31 Size: 14KB - Virtual size: 13KB

/45 Size: 43KB - Virtual size: 42KB

/57 Size: 10KB - Virtual size: 10KB

/70 Size: 2KB - Virtual size: 1KB

/81 Size: 119KB - Virtual size: 119KB

/92 Size: 6KB - Virtual size: 6KB

.text
Size: 117KB - Virtual size: 117KB

.data
Size: 512B - Virtual size: 496B

.rdata
Size: 16KB - Virtual size: 16KB

.pdata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 1024B - Virtual size: 776B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 512B - Virtual size: 164B

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 77KB - Virtual size: 77KB

/31
Size: 14KB - Virtual size: 13KB

/45
Size: 43KB - Virtual size: 42KB

/57
Size: 10KB - Virtual size: 10KB

/70
Size: 2KB - Virtual size: 1KB

/81
Size: 119KB - Virtual size: 119KB

/92
Size: 6KB - Virtual size: 6KB