Swashbuckle[.]AspNetCore[.]Newtonsoft[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Swashbuckle.AspNetCore.Newtonsoft.dll
Size

14KB
MD5

099199da2fef902e05636e961896dce1
SHA1

73271ca9cb5a7fee54af63351f38b0d3155497f9
SHA256

034dcdf54fd50160c1ad8a53cce753b84523a988c5033e4e23f264591a0f795e
SHA512

8bf0ac18c1f7e292a0a6c426efb7559fe06bd44fcdc9dd10163753dd3c53504446bb1df7ffdb570e9fc32f2e5ec0b66cc29a8c47c90d02a086e0383dc5d024b4
SSDEEP

192:AC9SNTxUuyQfhJqUbRfzN/tY4cAVR25Qx074+IE5pkwnsCtNfsJp1Z29LM+VpVdL:AEruyQbRfzdtY4ckrz07tuDkJVJStJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Swashbuckle.AspNetCore.Newtonsoft.dll

Files

Swashbuckle.AspNetCore.Newtonsoft.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\ahoy\src\Swashbuckle.AspNetCore.Newtonsoft\obj\Release\net6.0\Swashbuckle.AspNetCore.Newtonsoft.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ