Npgsql[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Npgsql.dll
Size

1.2MB
MD5

43a16072e5d44f1d0c4d6c68508aad5f
SHA1

644b8b9fae061d3e9a041ec130bcd995d02706a1
SHA256

b39e451d5303069d5b970dda4f140863b33599e1249c9a66ec432362f1012a6c
SHA512

d0c9086f8e8c3cc84046f37ae2879d21355f448d49564d5a97fc2d6e46b99905072bfbb81ebc212b3b723262ec1fe921ac9e6f00d2d9427462c8784ffeb8b158
SSDEEP

12288:/SiB8bRoIqQ30gpe5A1SakchScMtzVmgs7xfD7TRVie0c1vh2N49Ar:OJ0gpe5ySa9xfDrie01Ng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Npgsql.dll

Files

Npgsql.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/Npgsql/obj/Release/net7.0/Npgsql.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ