Lzma[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Lzma.dll
Size

47KB
MD5

46d02f685a848c1613b9c9f3e7b12485
SHA1

3285ae21f6252bbbc48bf62a84335205e85e1cfd
SHA256

314dc9c561ac3c41f9c084355dda27f375f41b10be86d2985ee2a8f246c55212
SHA512

036c6dd85e8ca977124b29f60f38c3b06cf84ed2e1d37190a22f8ff71f00d4a7afd4edafde9a5e57f773c9a319728d22bfa453d5a7e36f5967dc0573230c0a6f
SSDEEP

768:WV7E9itKLrgLINjWkn1LaFdoQZMpkkFTLMG8rtWdqVvCeXq8:F2gwINjW0YrZTWTpAVKeXq8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lzma.dll

Files

Lzma.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ