MySql[.]Data[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MySql.Data.dll
Size

769KB
MD5

045c875e00218ce5348a705989acb329
SHA1

6a55c463c883a6bc1d7106629abb3d2750ccb857
SHA256

83d5f32b402bf60b6aeabdb45cfeeae292b2a590e9d351bf8072cf43658684ab
SHA512

a72191a784c7737985ceab96d459a13ac2508d1e219483e06224234bfc42f905f10aec9d5c9d588a3b46491c885aada44e3fdf4ba89695c7fb7bbab09aed9383
SSDEEP

12288:qqbklcO5ZMkNaL/Wgj5ZAZlZSiBnT6JchfW6RPwfEuY:qqbBOgFL/WgjHARSipuJc191

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MySql.Data.dll

Files

MySql.Data.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\ade\build-cnet\sb_1-37069158-1575364340.38\connector-net\MySQL.Data\src\obj\Release\net452\MySql.Data.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 767KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ