MySql[.]EntityFrameworkCore[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MySql.EntityFrameworkCore.dll
Size

207KB
MD5

9aaf4370686dbb8ad9050002106a2a56
SHA1

5c83a270cbc42fc6bfaaf751a28beb60fa29623b
SHA256

2465bed30a7e341ca4c08001b1c177e22eabfbc8fbdc1061e1f51a0316336d48
SHA512

9b670e16996c1540040a1d46a665e46c81874542071302f98c0c6297aa54cbce13d0b902b9e5e1eaff4f2b2406687580cf8acb4281e01951768d6f805e98c536
SSDEEP

6144:5rUUipHdbXyUr2rdIo2ym4xdsFdNeAH4V:OrnfyNv0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MySql.EntityFrameworkCore.dll

Files

MySql.EntityFrameworkCore.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\build\sb_1-8384582-1662732176.71\connector-net\EFCore6\src\obj\Release\net6.0\MySql.EntityFrameworkCore.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ