MySql[.]Data[.]dll | Triage

Sharing

General

Target

MySql.Data.dll
Size

268KB
MD5

156950f69ab005707e461b3a851af6ca
SHA1

d6b7554d5a6471c412cceb330f22e99b3153aa3d
SHA256

3a7b270e347332ee8702257391b8447ac1c82cbe831c7bd314858a90a5fcdca7
SHA512

4ca1b9f7b95806e8c3ef19f3c2c414b6ddcd80ddf75afacf51ad0ae4503bdaf92a9da4376b600cef4a008040ff3259390112d848d84db97d8582cbcce5cf456b
SSDEEP

3072:9frhiROCC4q4gfuu723Rn/cptdZlf6Y5LV98Rc7Pk+i5Pg4TaIiS44vZlRA/It2e:9fEO74qmu78iqi7/4tiS5rO/IL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MySql.Data.dll

Files

MySql.Data.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ