MongoDB[.]Libmongocrypt[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MongoDB.Libmongocrypt.dll
Size

54KB
MD5

7d8c8a3e67f33c38656698c638fae378
SHA1

e8f5f73e9b4738f9e663f43e8b08da58c0ae8cd3
SHA256

e07dcde35b67bd1451e13490b1bd5fe0aba7177d62deec2b422959699a3d65ac
SHA512

7eba3366b77939369437c368db16e5a60003196d95f144337af6a3e20f424d31d152c9ca4fd00b3b3914960ae7914bfa45468ce1a1bdb37dcb3ee488bede22ba
SSDEEP

1536:7ZSLeLr9IMkgOMelHC6Xl67uKtzXlGS3:7ZeeLrgi6rKtbl53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MongoDB.Libmongocrypt.dll

Files

MongoDB.Libmongocrypt.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\build\csharp-v1.5.5\bindings\cs\MongoDB.Libmongocrypt\obj\Release\netstandard2.1\MongoDB.Libmongocrypt.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ