K4os[.]Compression[.]LZ4[.]Streams[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

K4os.Compression.LZ4.Streams.dll
Size

17KB
MD5

d87a5de03041a1148b46727f1b212ab2
SHA1

7e115004b0926b2d4f067c91808d3550a68fb30f
SHA256

91230afe0f275f7e8375aeeb0a2276b0462e4d2b6026f0f7ec4adb5cdc4f8c81
SHA512

ba1385340b71654a7109fca4022daf2db595f5eee53acba66e7a39bfb59ab9ca49460e7c1b81e42cec44c9a8a7116fdf0d0b13f0aa606d9af1144352efe90528
SSDEEP

384:BcP5+w8AaUU+zPZAlqMF9dJM7Em+r7Y1Wo:85+hAslqMF2Em+r7Yh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
K4os.Compression.LZ4.Streams.dll

Files

K4os.Compression.LZ4.Streams.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\K4os.Compression.LZ4\src\K4os.Compression.LZ4.Streams\obj\Release\netstandard2.0\K4os.Compression.LZ4.Streams.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ