log4net[.]dll | Triage

Sharing

General

Target

log4net.dll
Size

300KB
MD5

56bd5ad355c53a2e3ae86dde1ae2e664
SHA1

6b03396bfdb84e1fcee5f05b3c7d25b06f25fc4c
SHA256

93caa5fc6a8cb9e2700742e17dea1d0af623566b045e2cc661cdce419eeabc77
SHA512

0def767960369c47eae90123cd7176605996c80ce25e77f7eadd090e5b4d4850d256877952ee26aff28155e1e237ca3f233127f0432569ed2dfa111baa48189a
SSDEEP

3072:YA7N9Xg0zs4NZhEYdLTFmNAFyipDOnJsFDU/7lYvZjw7e5UiDpsd6On7G+kDnDa:YyXg0z24nsNAFySDmKU/7SvZYenDpwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
log4net.dll

Files

log4net.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\log4net\tags\1.2.15RC1\bin\net\2.0\release\log4net.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ