K4os[.]Compression[.]LZ4[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

K4os.Compression.LZ4.dll
Size

39KB
MD5

3ae894f38dbc30e4f84c9b9c77f7543a
SHA1

614cf6d08eae2511eb5a02c1b43317b30a24c6ea
SHA256

d08588b58819ac629e0c9e921173ad9ad22ad3c831e22099df955a25afb95eba
SHA512

98e5fa726617250e2cc7da59be765151e668b395f82e51d7265301486ca5ed129e63b3e4db0294498032c6f43970a1bf83a6b900184a5fdba215db8149064ec1
SSDEEP

768:+0qc4ymv0Y4qEaHSchLZkKJ/S2dHGWHWnUaQ86Y0l9KsShySmBty:7qcm8nQVLvJVHVHWneCyS6A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
K4os.Compression.LZ4.dll

Files

K4os.Compression.LZ4.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\K4os.Compression.LZ4\src\K4os.Compression.LZ4\obj\Release\netstandard2.0\K4os.Compression.LZ4.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ