NLog[.]Extensions[.]Logging[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.Extensions.Logging.dll
Size

61KB
MD5

3c199af797d13e6cc01f0cdf2420c736
SHA1

414d3ea025908d639bddf3ebf002c0859dad210e
SHA256

247b0bca32da725cee6752f79be3aa9b134dc02e9adb383a4b4131bb22df4f38
SHA512

c5f6230159196c9a672cd7bd9439845ff64829771419c50b44ff4c522ee9261ae07117f14874470deb49ccf35896f4e1a0862cc997ed8952fbce0fef57ae04b3
SSDEEP

1536:nyT34PY1Vi31hLFHnoC8zSbcLJdgIq/V:yTG4VgdFq4cLJaI0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.Extensions.Logging.dll

Files

NLog.Extensions.Logging.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/NLog.Extensions.Logging/obj/Release/net6.0/NLog.Extensions.Logging.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ