BouncyCastle[.]Crypto[.]dll | Triage

Sharing

General

Target

BouncyCastle.Crypto.dll
Size

2.5MB
MD5

45cdf15ee09134c7190a4dd14faf88f3
SHA1

7e90e86d93edd39bb9a382a9ae4557c4de5b2351
SHA256

ab88f734e88d8f54f41af783ea4aeeba274310b2fa656ec6df0ddb8fac9c4432
SHA512

756edc969413002dfef1b4dac04633c8c29587a407cbab1f04589acfec87728d9f2538c88d8322bd6d9c6e09f857fbf6ee1e8c453150cd9f1d8e0a9a833d0cf1
SSDEEP

49152:fQ81V8I58hdYgftOKkFGGvi0M0+RavC3ZJGeCDbu9kQN3:Lj8hdYoHkcGa9haI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BouncyCastle.Crypto.dll

Files

BouncyCastle.Crypto.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ