NLog[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.dll
Size

763KB
MD5

c4265034637a8eaa1887237e5c4397d5
SHA1

47dc4bb3955ca5e540b529bd729404f869160a8a
SHA256

b3c114a1c0aeaa433b3b1965a1df98b80fc8dc0c05c645f31685f642be133205
SHA512

43cc507d8d790c60827cb0090d002aab641bff8e10a83653e5ff52c8f2c85aef6de36b0d775b440c3995c2b8262a0116d98e227980872a11afb0ccf4bd185f74
SSDEEP

12288:WTzflr/flbLHtxAIIAINglXGUdlfi3FMrlIttbtj5OY5+BKaIcqFStCpUu3UsQ:WTzflr/flbLHtxAeJvrqttl5OY5+BKa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.dll

Files

NLog.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\nlog\src\NLog\obj\Release\netstandard2.0\NLog.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 760KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ