NLog[.]Extensions[.]Logging[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.Extensions.Logging.dll
Size

59KB
MD5

523e08547dece008caabd67c468ec531
SHA1

05d0735053b02c875a93edcf89d4c03c42fad05d
SHA256

b99f5b541fc7080263f6c12ea64570108b6dfeb418b512eb46695c0069b5e967
SHA512

d08d98389ee4676942e7a4336e42393ff2031a976263b164c73e298e27a25aac1bf372f51153220a5834b1b52120cbdcb13ab36748c31b3269087ddc695d04c9
SSDEEP

1536:yw3j14YLvzBoMrqXvahMHc8h3QLYjxVrMQ/j9B:yIOVxHcnYjxVrMQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.Extensions.Logging.dll

Files

NLog.Extensions.Logging.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/NLog.Extensions.Logging/obj/Release/net5.0/NLog.Extensions.Logging.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ