Serilog[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Serilog.dll
Size

138KB
MD5

2f2fb474917a44a8f7a15a9574576b69
SHA1

2f1ebdb49ac4e4c769bb5435885c962a67fdbb6a
SHA256

b53d4891f565b860e43e987301dcbd91a7d42b6393c8a8300fb624f01650442c
SHA512

55d49a916dfadde479382f31f9993e2518ad895553a0f5f0a2db47d803f828fbdc102261b3332c10254ab0fa0c23bc8565da42e9aa570bd2cef6a446d1024277
SSDEEP

3072:wOBT3M8nTXSZZGxrrP6kP5OzZm3UFe9pbMl++AkNIMJxVR6:wOB7M8nTXSZZG5rP6cOzHxBLVR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Serilog.dll

Files

Serilog.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/Serilog/obj/Release/net5.0/Serilog.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ