NLog[.]Database[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.Database.dll
Size

29KB
MD5

122c236c29906f266aabf17177638c2c
SHA1

068e9f2099012020d83978e62cfa8da0377c9933
SHA256

ec92d07962861ab1186b23991dfafc2d82a881e04967ddb8c50ce058bf84b61c
SHA512

9d9664aa34b0059b3ef640eccb4b4018661c66e1d4d43120d4780caa1f8140edb969193e6d039865715977f49e17fa7d0ed303a800597b5665ffef2e1b0b7bf6
SSDEEP

768:EXIKoVzolxuw0UCJ+XyuPRbz7NoY9OOp:bRzw0UCIR/Z5O8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.Database.dll

Files

NLog.Database.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/NLog.Database/obj/Release/netstandard2.0/NLog.Database.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ