NLog[.]Web[.]AspNetCore[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.Web.AspNetCore.dll
Size

63KB
MD5

400b7615e61f4f0e918b531ef6081eea
SHA1

51a1d2e34f39d55a4d97959aa4bce088d6f94083
SHA256

d2e5401a2e0b344585f2f3b0c4810bbe2ce8568b4ffe81fc07b80c4873fd7588
SHA512

23f40d63df04f77ca100a43c2b469a083858734d04be6e09027b6ca18ead0ba195fa17e0bca2baa82534a0df82eebbc5cabe236afe29c44cfba244cbc9012cfc
SSDEEP

1536:2JEYTmAYay793m/xXBtpqiYA5GuWFH+UM4k:2JvqA69W/jtpgA5GxH+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.Web.AspNetCore.dll

Files

NLog.Web.AspNetCore.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/NLog.Web.AspNetCore/obj/Any CPU/release/net5.0/NLog.Web.AspNetCore.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ