Newtonsoft[.]Json[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Newtonsoft.Json.dll
Size

337KB
MD5

043234e94421a8b1b661504dfe133540
SHA1

2769f62763a8e6badc6cf86d5821d32db343e740
SHA256

24ba0d00369dae81fd965cccb44b6ec1900f8e8c3e494bae972ae17840aea86b
SHA512

368dd2c47c215df23cc5b6238185489b8b4970f025ff5c1129731c000f3fdbb012655320d9e714900b5fcf79f431bec6320974c3f8266c6fc32d192ed30c9ac2
SSDEEP

6144:NAmpznNR/Jis1GMMtYMKjr0tmCzgEAHE8U:WmhH/JisslthAQkC8Ed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Newtonsoft.Json.dll

Files

Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\TFS\K3Cloud BOS\OpenSourceLib\Json.Net\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ