System[.]Linq[.]Dynamic[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

System.Linq.Dynamic.Core.dll
Size

168KB
MD5

c9fe3efdd0b6156177ca2badb353956f
SHA1

9123f1ca623a26e52176753f1bdd9d1f3db75865
SHA256

2b9e60e26c1b403397c49a3589a313af28e7921d2903949c0ac041178e8b5de0
SHA512

e242bd3b1879910efb49bab8370dd08b780491ea5e5e80159385ede342a766bc16d4301a01cbb1d2ed9bf77166ff12c948472d9439cf9e2b738580a3007d952a
SSDEEP

1536:UWq/yWXU5sS9WSyEXquGjWcS9LgB8N6ZYaYNLGFwN7YNLGF0vVD07pYZdNYjK4bU:UWfT5G5AqB+MB9NVSCY7b/rQHiEd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System.Linq.Dynamic.Core.dll

Files

System.Linq.Dynamic.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Dev\GitHub\System.Linq.Dynamic.Core\src\System.Linq.Dynamic.Core\obj\Release\net6.0\System.Linq.Dynamic.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ