System[.]Data[.]SQLite[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

System.Data.SQLite.dll
Size

364KB
MD5

25d1cdccc853cf9afa95a20da62d993d
SHA1

34cd28e94ebd9914b78d7b0765b827d7b87cfc77
SHA256

9f2a5340f2a398e927a0545054f6f059d9fb7b9ae52438135ac3b46b121afcac
SHA512

9846f89906d3f8a2e0dbd850b4fce6635b087c160cc4c6706f57834ce20fb79cfa778dd73080bf7c2d16947411602f30bdfa17166db94c887de6ce17715095b4
SSDEEP

6144:TO7WUPH8oVFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbco:k98oVFNFfcaFeFOFwcGF6cmFWc0FWc8Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System.Data.SQLite.dll

Files

System.Data.SQLite.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\dev\sqlite\dotnet\obj\2005\System.Data.SQLite.2005\Release\System.Data.SQLite.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ