NLog[.]Extensions[.]Logging[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NLog.Extensions.Logging.dll
Size

47KB
MD5

ec8195dfe69143d8aead6b7b9ddebfea
SHA1

23f2c433eb5711162429b2659bf2636a767026c8
SHA256

24227b7b3cd1fbdcaf53e52fbe6e6275f44baba0a8bd25b5df958bc0340c3caf
SHA512

3022726a18bc17682988dadc422fba147beffc955c23fe5fb8f6a7a4f45248c059de8335fca60083e6f201f9ad54d56fe9ceffbbee134cb134a95d877fac77ea
SSDEEP

768:P7EkLtL1Xl0SAx2MdhyjsKPlQ4/u2UpCPxFAz1MrM3bCPNGzRhSQ/Ox7p+8nbR:P590SOYsKPl9aCPrfrM3bQNwSE8nbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NLog.Extensions.Logging.dll

Files

NLog.Extensions.Logging.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\nlog-framework-logging\src\NLog.Extensions.Logging\obj\Release\netcoreapp3.0\NLog.Extensions.Logging.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ