Castle[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Castle.Core.dll
Size

263KB
MD5

c61b61fdcb770f341eb7a903fc9684a9
SHA1

03b6586f30739006f6ef3a4645205b91c1544b8d
SHA256

7f34412cf227e622eff0d0a687c1f08c3297b8df8435780f02b99e60da842c80
SHA512

98d56cef99a121360ec935cd41bb5ca7dc1dc0e2c6d128be485a13bbe0b2aac4c0e7466371e43951092f1000efd83b4631d19f8e0c3801656abc6fff54d7b0dc
SSDEEP

3072:gXYNmTxMvq03NCvT/ge+ld0dqzXnyFr89urFr2RO1E6FBdL63T0pdma0+P:JNCqCjghIqzXnyN+0yRSDdhQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Castle.Core.dll

Files

Castle.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\core\src\Castle.Core\obj\Release\netstandard1.3\Castle.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ