System[.]Net[.]Http[.]dll | Triage

Sharing

General

Target

System.Net.Http.dll
Size

119KB
MD5

af34a99f06e5a2890d947e77534dce93
SHA1

6a0a5bac1284a43195073a2dc8154d643dc5d508
SHA256

b0a04310d89a6392aa316e3bd01b376945b5be759d5e2387c0a795ee029454c5
SHA512

a173ab5ef3cd4d8e97f136b9d3e976f311c4473f2682c865f0494efe44904e55f4819cc79ee17035b02a23a77ac466ad0fc2e3989acb8ffba7f729a7f72f79c5
SSDEEP

3072:dQ5iUhvJr075M9j+/Gi7PYn6VDdy4/ojulApptZ:dmmMp+J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
System.Net.Http.dll

Files

System.Net.Http.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\j\workspace\build-package-win-mono\2019-06\mcs\class\lib\net_4_x-win32\System.Net.Http.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ