Serilog[.]Extensions[.]Hosting[.]dll | Triage

Sharing

General

Target

Serilog.Extensions.Hosting.dll
Size

10KB
MD5

7c58f0b8d9cebef11e2963a42c2db23d
SHA1

e7c2b17beeef31dc6005e76fcb0602fa63cf4cc8
SHA256

62bcf829789662d85b9fc9ecd6f5f3d3b05dfe63a57468b56b96e9ce9c22740c
SHA512

54be1bd1edd62c9f0c95faee7b3ac2eed9c7dc9f23a090e85cfda1cd059f398ee015d71c83a3226b79a10a9ed4fa6ddcf8cc38eb40c2e97cc2eeaee54afe788f
SSDEEP

192:4LCQAvZ/TuKXGADlyk3AFmJ/OOyF0lRdCxKGyWXtD:4CZ/Kg5lyknwuUKGyWXtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Serilog.Extensions.Hosting.dll

Files

Serilog.Extensions.Hosting.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\serilog-extensions-hosting\src\Serilog.Extensions.Hosting\obj\Release\netstandard2.0\Serilog.Extensions.Hosting.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ