SixLabors[.]ImageSharp[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SixLabors.ImageSharp.dll
Size

1.7MB
MD5

8de735fc3caef5805fc616b8c974f76c
SHA1

56b2208356fa0fea61617567bd9004d78d833502
SHA256

1681460089a7eb6e6292b7b26078639f88ee2f23d8d6da91c7244c8ef284698b
SHA512

cc76205935a83324adde0caad3cd9df982a6076468185b88138224df330b2970000a9111e4a928fac32338668c343e14769d9543dc95312db9d6bf89345e3ca6
SSDEEP

24576:BruzKebGe+34AbfW2ZKAganYGXJgvDrdYCxAa+ghFHwtuoRXls6ApkyfVz:BhouKAganYyTs6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SixLabors.ImageSharp.dll

Files

SixLabors.ImageSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/src/ImageSharp/Release/netcoreapp3.1/SixLabors.ImageSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ