kayflock[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kayflock.dll
Size

7KB
MD5

d5a9a704ba239d36945a27e93b0208f8
SHA1

9e345e439a00f78102de2979114595664aa3a6ae
SHA256

bdc5bb5e95c50ca53a2f390ed98f7d7616e05a9e469591952a794c8af6c6d595
SHA512

15bc514fe83b1071d6aef48d56e01a3f7d525a8ea8373123b7912f1ec5f546d33651a7ffd6fef198f31a80ac197de7de8ae61459526f7a2565eff700df957881
SSDEEP

96:z9K3tQCUB/gFCt+530/rnB+n7ga5x5SIwx5vmyVJ7pIVzNt:zoepgFCt00/rnB+sHWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kayflock.dll

Files

kayflock.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\nevin\OneDrive\Desktop\ext\kayflock\obj\Debug\net9.0\kayflock.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ