K4os[.]Hash[.]xxHash[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

K4os.Hash.xxHash.dll
Size

12KB
MD5

ed559f870fc1166b8aac6fcbc3e3117d
SHA1

21519874f037ba9903ac056fd8ef0f1e80491e56
SHA256

999c632c467df0ec47dc68f75845266cd1a3704536aac16e3d5a02086f8292ab
SHA512

86eab4e1ad8421f1ff60ec12cbbb9748193a3694cad3dabb29f071ae3e5525e21fe3650abd07bdcbeefbe6b821f1f33be1e8c6ce9b3f39e12c9d6ddb1d442037
SSDEEP

192:ZoJBljPRg+UhziaScDO7QjPtlprfnBlTv6GvRt/6Aq/cyWu:2ljZ2j6QjVl9fnX76O0Wu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
K4os.Hash.xxHash.dll

Files

K4os.Hash.xxHash.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\K4os.Hash.xxHash\src\K4os.Hash.xxHash\obj\Release\netstandard2.0\K4os.Hash.xxHash.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ