General

  • Target
    Devart.Data.MySql.dll.deploy
  • Size 930KB
  • Sample260816-h2adcssclh
  • SHA256 093c9576a483a824a7b4c87b358d9dde4d1d8e574ed4177271efefbf5150a95d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

File Explorer

  • Devart.Data.MySql.dll.deploy
    .dll 930KB

Devart.Data.MySql.dll.deploy

  • IMPHASH dae02f32a21e03ce65412f6e56942daa
  • SHA256 093c9576a483a824a7b4c87b358d9dde4d1d8e574ed4177271efefbf5150a95d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

Digest
08:10:3a:38:51:f1:f6:48:cd:42:9f:95:a4:90:57:3f:9d:13:68:a8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Devart,O=Devart,POSTALCODE=18000,STREET=Na zertvach St.\, 2230/44 suite,L=Prague,ST=Prague,C=CZ
Minor OS version
0
Major OS version
4
Entry point
903102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths