Castle[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Castle.Core.dll
Size

265KB
MD5

e22bfef97c2f4eb2f188c5fedde63380
SHA1

97a897886d72852edefc43bba31070a2b69183d1
SHA256

be886e2e643aeff56bffa81c008050709971de8e20387408ae508630a05bcd79
SHA512

fe44c2c908b5fba07dc1d38f689f433717fe677c27c919be3aa0e7fddd40408d247bbf9e0c626b24fe5689ed95bd00c41c652a65f9529d73292c5b9c52307fd4
SSDEEP

3072:fnFCP5uT+sDljxbiW6zzT1tsmHrFqz+wDVNOc3YZ7UKmBQwZROVEwHad4O3R01t6:9NFtiW6fZts0o/wwGIKGRg6d9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Castle.Core.dll

Files

Castle.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\core\src\Castle.Core\obj\Release\netstandard1.5\Castle.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ