Npgsql[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Npgsql.dll
Size

1.1MB
MD5

4066edfcab30e8321ae718df4236a279
SHA1

0a390a46b38552a6e7619817b4f923a2fb5073b0
SHA256

d6fe6068346bfaf23661a3ffdad9bd54775b316ebec725f273515218bcfbaf37
SHA512

ffb08cf4973524262ada396747cb5ae25517c4e8c616843101c80caa812973c170883af1fd13fa40f6c408c8c264a9e961a22cb64136c983fca7a102b1dcc187
SSDEEP

12288:AhVFom0rG6qyLVsa8c/zo08q4syMW1yCOaZLs4Kf0fxqUiNyir6A:UFn0rG6qy5sah/4sXABNKf0RA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Npgsql.dll

Files

Npgsql.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/Npgsql/obj/Release/netstandard2.0/Npgsql.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ