ICSharpCode[.]SharpZipLib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ICSharpCode.SharpZipLib.dll
Size

200KB
MD5

e734d60697521d8dfbfaac7a3305dd1c
SHA1

db0b51c8ca31daa3ee5fde33cec43ca8591b03ac
SHA256

151f63f0f3c7f246a500e623f18530ce1c7543eb67f3996395a6c23ac03fe682
SHA512

7596f9999ba5a3c29b7811f891b6640a24141b4e904c84f443393172b77eea034f53e89ec2d9cd4721e628c0feb5b986fa0e374e2be3be34a1cd2179776814b0
SSDEEP

6144:r1uamQDnN0ux4OFrkdNyAct8opSISBQmjT:FN0ux4OFsjc+5Lj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ICSharpCode.SharpZipLib.dll

Files

ICSharpCode.SharpZipLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/ICSharpCode.SharpZipLib/obj/Release/netstandard2.1/ICSharpCode.SharpZipLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ