Swashbuckle[.]AspNetCore[.]Newtonsoft[.]dll | Triage

Sharing

General

Target

Swashbuckle.AspNetCore.Newtonsoft.dll
Size

14KB
MD5

1336839bed4fba04f1841d0dc154204b
SHA1

1975e9a3dee0e9589d11077476c133d8205590e0
SHA256

bd67e6f44b26fd4ee7bd6fe264d80871a69e2b95502f284371aebb06ee226841
SHA512

ecda5de6c108ee4d6407b548d30b3e5995fe6ba62d30908e4974a004d85249407fc170e55f155d940f8c82fb8c3cf3a98d919a7c3fd6f8b2a400ce47daa1fd97
SSDEEP

192:REO1fphGWa+26s7WV4IodeVsGshqczk054DHk7GtNfWG4933k21Me+cN2p7VGZcg:RE2fphGc26sqR2e2GJAGtg9kOH+caj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Swashbuckle.AspNetCore.Newtonsoft.dll

Files

Swashbuckle.AspNetCore.Newtonsoft.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\ahoy\src\Swashbuckle.AspNetCore.Newtonsoft\obj\Release\netcoreapp3.0\Swashbuckle.AspNetCore.Newtonsoft.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ