MongoDB[.]Libmongocrypt[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MongoDB.Libmongocrypt.dll
Size

57KB
MD5

42d166c22980f2f4a23eaf56bd7602bd
SHA1

fb2c933221080f1331349558a7081171640b1c7b
SHA256

22c3d7ae2315e537c2218d610fefb305ae095b6ae525c0ed51cb4379b7459d2a
SHA512

4d9bf50b5d3245ab6c7c6905dddc231dc7295d06c1ad21cd62a7b7c0f1aae3d045a0e28d69e40b5f75b1358a05d21e3593cc10c98100eb5771e9c118638a5b8a
SSDEEP

768:HOV27JuFeR5HpuQRtzFICxWQHLLca99yhZw5K5EODW4xVwoKSupFOMrclYflaBSF:k2tu8Y8S1wL10eZSuPOGpfwBSF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MongoDB.Libmongocrypt.dll

Files

MongoDB.Libmongocrypt.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\build\csharp-v1.8.0\bindings\cs\MongoDB.Libmongocrypt\obj\Release\netstandard2.1\MongoDB.Libmongocrypt.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ