ZstdSharp[.]dll | Triage

Sharing

General

Target

ZstdSharp.dll
Size

432KB
MD5

ca514da6e0b466f7aecd40156878e8c1
SHA1

6fcb017401ee6eb8e813fbcbfbb6d7e47184c370
SHA256

d66fc69177013190b2741ab1c7125d3b0819cea120c59dbb93e0fdb3b691ccef
SHA512

5923835df076b0a364ef119b74a136e13d4d978d498c3486382bf27ebbba39e9fdaa13b20ef667df7eb2fbce434f222a7b935baaeb7e047ac4ac0866cd5e7459
SSDEEP

12288:K57jXTFp7b3wMJIZVwwDTTNwwDTTu6WAKYlyI:K57/bJJIZW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZstdSharp.dll

Files

ZstdSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\c#\ZstdSharp.v2\src\ZstdSharp\obj\Release\net6.0\ZstdSharp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ