Serilog[.]AspNetCore[.]dll | Triage

Sharing

General

Target

Serilog.AspNetCore.dll
Size

15KB
MD5

9222615da7b1a53831bd95a9c735face
SHA1

dd536b6d190dd5285aca3ba734ddb183edb4091d
SHA256

1f08266f1ed64c4b201b342b9857011e1fe0bf4b12390a727804061f4d72fdb0
SHA512

148b685c2dd24e6628b4c4683f8f4b25e15e4da2fcf274cdf2353fac9e7f9a0a195a90447ae2e1d6b00120f9574d7b779e1882408e07f753aa87959e8c00f719
SSDEEP

384:Zg2vPqtUGG7rwJS6DYlCVEQj2qL6XGv5KWmGhJ:ZgturwJ7YEWqLaE/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Serilog.AspNetCore.dll

Files

Serilog.AspNetCore.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\serilog-aspnetcore\src\Serilog.AspNetCore\obj\Release\netcoreapp3.1\Serilog.AspNetCore.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ