NLog[.]Extensions[.]Logging[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.Extensions.Logging.dll
Size

61KB
MD5

563dc4c9b63cc66e2c4201475f87b8b1
SHA1

52a010f197cb7db72a48c3a98d2841aad1168d03
SHA256

ee840f10cfddd9208403c01d668a3430f612480c06040212f2d3765e1d917234
SHA512

84a9d85bff10f101068623015fd79c3b035ce6ba74c75facce7653da8561f5776f318f042177d025f0933279756bcd48460f9e471cd16ec57a0fae715c390b2b
SSDEEP

768:GI57DH/2psL7sdUJTTirFa0T4hLFO8BUAD8z/ti3Z/XcQUvDY7pNrPyOQBZ:lVH/YwycRRO82AD8z1e/XcQUMOOgZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.Extensions.Logging.dll

Files

NLog.Extensions.Logging.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/NLog.Extensions.Logging/obj/Release/net6.0/NLog.Extensions.Logging.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ