NLog[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.dll
Size

833KB
MD5

094667e297e4de5f59f8fb52bddb3ebe
SHA1

123f5546df3cea883b3c6e60f9ed3da71aa56176
SHA256

8510b7d8e5d5e455e03901dd355a46000e2b58fa6c4f06e4cced6999f14adf52
SHA512

832abb6463fa1242d0e4bc82a814518b62f4c576f29e18f3d54eb2119edbde11547cf97b1320ee4e3454092c4c38db56965710b91b4b00efec7351c63ddd6bc6
SSDEEP

24576:yTrzBzXT5bz7uK4xEO4SFhv1bs8T09FUsQ:yTrzBzXT5bz7uKmEa09

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.dll

Files

NLog.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\nlog\src\NLog\obj\Release\net35\NLog.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 830KB - Virtual size: 829KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ