System[.]Data[.]SQLite[.]dll | Triage

Sharing

General

Target

System.Data.SQLite.dll
Size

344KB
MD5

99dd5de4174bf7fd09ed3ae2c21fe8e2
SHA1

a237230ec3ac2c4e3211b7ffaec7e2272440e688
SHA256

a1fd117d427918d22dde8ffde74587f70adb80c2fc072bc5ebf9e4c9b69f2933
SHA512

bd3573da0678b9a248109d2aeeb2dab2ed8feed774593d23f59665b02fb37008a72abf9265dcdf27f42fb55d5445d90c0b0a319537e3821580d0e73f287dd4f7
SSDEEP

6144:/6NChstDEP7Wvp2+j2AnOObGd5TQlencSEFUGLT8Ap6zOxWpoUHxFNFaFeFOFwco:CNChAEyvp2+j2AUOlrBtRWplHxFNFaFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System.Data.SQLite.dll

Files

System.Data.SQLite.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\sqlite\dotnet\obj\2015\System.Data.SQLite.2015\Release\System.Data.SQLite.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ