Serilog[.]Enrichers[.]Thread[.]dll | Triage

Sharing

General

Target

Serilog.Enrichers.Thread.dll
Size

6KB
MD5

7b22aac44d1736573d195e44acf422f0
SHA1

34075a482d7517e58410b2f3cb985476a28df973
SHA256

69d94c75283ba571e371e10bba0ebd24492d303add0854027c6f845b549b4ae9
SHA512

920296aafc77e26b33445b2bc562785587aa2cce1402d27de5aaa62e34074d2ba3f4486662f3bd72e9914610e1a664c20bff475e484e84bf4644779b3761bd3b
SSDEEP

48:6onMnLCCcMKql/4UY3scHJ0lwqn5QvThqQ+torcmjvY5+yYzCQ72aM3JVU8Vk46d:PGuCcMKQTmD+EBQC72c/q/WDb4X4ryW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Serilog.Enrichers.Thread.dll

Files

Serilog.Enrichers.Thread.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\serilog-enrichers-thread\src\Serilog.Enrichers.Thread\obj\Release\netstandard2.0\Serilog.Enrichers.Thread.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ