System[.]Diagnostics[.]Tracing[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

System.Diagnostics.Tracing.dll
Size

20KB
MD5

f604b5134bf6e8b179bf29412d8626d8
SHA1

cf895300d57ecad1b2fd6096339f7c16f39654dd
SHA256

d1475ed9620a76e3d615d06ec77d73fdcb2da035e87725c1431a6d11b9dbe158
SHA512

cf8612a73e71053d254533a22fcf219ad83cbed3d762454d36a58d43717c3f427fb6e3cb68e2dd83bc6174d6b09995f25b59bd898b9653b046689829eebb2de2
SSDEEP

96:2WbBDWubgQGRg8itMoI+j+M3bxvOPSDmDcDCY:2WbBDW0URP6pDj+ybx+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System.Diagnostics.Tracing.dll

Files

System.Diagnostics.Tracing.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Tracing\Release\net7.0\System.Diagnostics.Tracing.pdb

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ