NLog[.]Extensions[.]Logging[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.Extensions.Logging.dll
Size

54KB
MD5

6f36baa325b7310a3450b917a0897edc
SHA1

67cf01763eba4005f439731601e75b1783aba4f8
SHA256

8c0e2b616942e30978a7d3b8256ccac5240fbc544d805751a584b3eb25cbd748
SHA512

cccbd4e2a0a4dfec4fed0a7a586ccb515b20a3178c09afbaa1b1b91d6e0e863331a0d34c3924023854893657575c26cfb32af3cc34bd6b7783e2311b7fd336b9
SSDEEP

768:3gTNv+i1P3kjaRjyZ7uajfeU3hVUuj2dGBt7m57obGlqK:BimrZ77PXUui+eUbGlqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.Extensions.Logging.dll

Files

NLog.Extensions.Logging.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/NLog.Extensions.Logging/obj/Release/net5.0/NLog.Extensions.Logging.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ