ZstdNet[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZstdNet.dll
Size

28KB
MD5

5c451248a1d0304c9379c5ba3805720b
SHA1

eb8411d7e3672ad6a3b386d3d4a62df6d9d7a4f7
SHA256

e6bac72a03aa30fa8dd5b781273a420d9a971fd8da0f651fecca2555e965cade
SHA512

ea3f24d156cc5c42fdac4bc578d0da3e724f1e4c865e91fd7deeea1b82ba46071af2b0eb3cfe5189cb15146fbad62e759e274997f98e4c5ae4d4da322a8a2106
SSDEEP

768:wdvEHE8fDrm9iHXwxZq4CwgU7x+SPRVvxsgPlBIg:xBKcwxZq41+wRZxsgP3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZstdNet.dll

Files

ZstdNet.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Oracle Content\Third Party Libraries\Repos\ZstdNet-1.4.5.0\ZstdNet\obj\Release\net45\ZstdNet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ