Static task
static1
Behavioral task
behavioral1
Sample
Npgsql.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Npgsql.dll
Resource
win10v2004-20230220-en
General
-
Target
Npgsql.dll
-
Size
347KB
-
MD5
d0bec1f8979505f6d9af39a1e7f8b992
-
SHA1
3e25240d013a228ab8813ea3e9d79e0c306f0052
-
SHA256
7baf5513b67b5bb0800b1b86300c47f6ed03e331d7797697af4591da72e6fe5b
-
SHA512
cdc72e0e07df7cb435281ec223700df6f50768161a76ab861832d56c2efeec07be5619625375dbb5bc62987f334ff02a8e9e75b908fc11d37ea61dcfd199a359
-
SSDEEP
3072:+aaK0Uc1zn3QFnlTkqFV1qGjd37gwQANgJFzEkkQS37lmfsvMqkqa/2kXECYy0+D:CQv1qOMhANOwQSlTa/wCDNA39y0bXR
Malware Config
Signatures
Files
-
Npgsql.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 345KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ