Newtonsoft[.]Json[.]dll | Triage

Sharing

General

Target

Newtonsoft.Json.dll
Size

374KB
MD5

d21f3522946dbff879c56b9f3b17259e
SHA1

a9efb4a065d96c7fa5e6db855b296a30d7418a6d
SHA256

6ac2339f3965e42803affaf1269ac060a2d5719ff9af816d081563abf6fb2631
SHA512

89556a89aa1e49d4a12a52a9d448a111bf083032d567bdd812e8016177ff3f5e4c593b7404d5454e55d37be72fb999cace0f5dbb0cc30076173e942809fe1271
SSDEEP

6144:ULAFkPV2C67lU1+gDRAyzja7QT2esRY4dBIBUy77OcROr0tZ+mJaN+DF8Jf:6utbUDAyzja75fwey7gQrlF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Newtonsoft.Json.dll

Files

Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Temp\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ