F:\TDDOWNLOAD\Json35r8\Source\Tools\ILMerge\Newtonsoft.Json.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Newtonsoft.Json.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240508-en
General
-
Target
Newtonsoft.Json.dll
-
Size
378KB
-
MD5
adc389bae02e8f8e60d741ed2eaaa87d
-
SHA1
a51494f8fa1a98cf5a2a768a832aae69b811e3fb
-
SHA256
14a4f4c9532acc631f6493ba94ff1145b06e360f8d20e94bcabc3f505d0d3de2
-
SHA512
e526c884cff0566f901a946c0fd11434fb40eb5e9e688e06bd04d76756d56f65c567acb7da5543cbf40c315589c22d30655dc0e1ec0aec337021f3c0c414e37d
-
SSDEEP
6144:mXGDYYfRYelo/eAqhkYrIUOzEHEzOtFsAKfyYpG:mXGPeeKIkYUUqOtFTWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Newtonsoft.Json.dll
Files
-
Newtonsoft.Json.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ