ICSharpCode[.]SharpZipLib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ICSharpCode.SharpZipLib.dll
Size

196KB
MD5

7f4857a1e72ebc25396830f72b86f844
SHA1

c04cbbaad33f15756fec2bd06429ff9f50cfa749
SHA256

2816dd549b0c898aa46fddfc6f8f6588f1fe63b1b9d4796a80e4227dbac04e61
SHA512

bc4d6b0ec10d4de6dfe66faeb30258b0d80fcd2cb12fc56c6e8cc666c2f93bf2236087700ca7272dcbe6d5f4693443d59626f0bdc086429ff6cfe8e13bcdcf27
SSDEEP

3072:QFZ0mke+tciYvIlsuvWTDFgyg8+b6aMPdSR00VRKbsLZkgfgekD8DwMdIt9XY97s:Qwxe+tfyF6d+QRKAfYkd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ICSharpCode.SharpZipLib.dll

Files

ICSharpCode.SharpZipLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ