log4net[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

log4net.dll
Size

264KB
MD5

b89cb7f3f1a1e2807e708f5435deb13d
SHA1

82cde65a7514c0e465ee0d505be56c56639ff0b1
SHA256

27d26aab42f7cab35bf51d0536c67ed553fc97b670226b868805e7c6927e5c87
SHA512

0bd0da0cc01eb62ba1dea21666bccf76db6c7dcb2ddfa608bea61da0ffa230a60a66e91449b2664de006066eb63d26daafb3bf7b932c8a22ccd347dbd707e68b
SSDEEP

3072:AWk0y3P87PIQks0nbypIWFTKLWfjQxo5yAlfc5M44c/qR0PM7TRNO9pAlWj8Oqd/:LZy3KPfrCaw0ful4GeDOGUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
log4net.dll

Files

log4net.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ