Static task
static1
Behavioral task
behavioral1
Sample
System.Data.SQLite.Linq.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
System.Data.SQLite.Linq.dll
Resource
win10v2004-20230220-en
General
-
Target
System.Data.SQLite.Linq.dll
-
Size
192KB
-
MD5
405fb842722ab0e60be5c953aaf6cf9c
-
SHA1
775a23c2a593593e99f2203d9d73fa3315a53617
-
SHA256
56ca5078e16731fbb0ed7b7572f764d2d027f17f01cd751220e0203115c05a78
-
SHA512
d7e029955a58a456ee5161274055821d5fa14747f513b529b7406592bb1ac0368d94c0ce3ffd1629fe64d9b798bfacc328087f127f9e5b4bbe0ddfbf7330f491
-
SSDEEP
1536:1y6ndADEGsuz6KP8cp1x5Q0TAaD9DzxOkmabgekUh0Ut:1PdAgu6KP8cp1g1c9oPaZkaPt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource System.Data.SQLite.Linq.dll
Files
-
System.Data.SQLite.Linq.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ