StackExchange[.]Redis[.]Extensions[.]Newtonsoft[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

StackExchange.Redis.Extensions.Newtonsoft.dll
Size

7KB
MD5

dbe61429c298b51dbd1fc66f37997034
SHA1

a0e9bfcd1a46831b9440f6000121ca8e7a10c18d
SHA256

ab7f3fd511faf595d5042d6e0b40fb47d30ab5836aa75e8f2ab657037503603a
SHA512

c76b3d5e5ea9dafce53e2a5e8cdd53a741205d12705a0fd683b8ad8a7c9710748e69a58bc75c39a14a1ca31a6e600c251842af522e4c64b5c8f946f21dbf38d9
SSDEEP

96:vOhT9ptF5Eku3ggEeEgvtFaEjEqEbEOrEDE7Ek3Ev2EeE/:2b3Eh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
StackExchange.Redis.Extensions.Newtonsoft.dll

Files

StackExchange.Redis.Extensions.Newtonsoft.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\StackExchange.Redis.Extensions\StackExchange.Redis.Extensions\src\serializers\StackExchange.Redis.Extensions.Newtonsoft\obj\Release\net5.0\StackExchange.Redis.Extensions.Newtonsoft.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ