K4os[.]Compression[.]LZ4[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

K4os.Compression.LZ4.dll
Size

59KB
MD5

7c8a24dbeb8f06d554cca460810ee312
SHA1

6e793d914af01ad078db95e07560e2a8b130fe9f
SHA256

ff1ed301a9292152764c5e4fd56bbe5c6583d7d59fe7c0d9f917da19074b701c
SHA512

e38b55b62dbd421483d9b40e581d66e2acc1459b745a753fb9f7859086787f4a7a5a382ff652723cdfc443e910f19e90878dfa17afef158a3030eb3d3f3ae9ce
SSDEEP

1536:sEyhYcdBzI+y1MsjzC+byRb6Atp7NxgtrSQSSFHe:sEaDSv7SIab6Atp7NxHQSSF+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
K4os.Compression.LZ4.dll

Files

K4os.Compression.LZ4.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\K4os.Compression.LZ4\src\K4os.Compression.LZ4\obj\Release\netstandard2.0\K4os.Compression.LZ4.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ