KLines[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KLines.dll
Size

801KB
MD5

439985212de3a40a8b34cb1896fd9b26
SHA1

b949522a3b5e2a5ec0e3cbb4b555d9a0d69fd0ed
SHA256

56a931c5236bd100b8df39c73b34d984df98b5f67dde69094fd8a3c8f304c458
SHA512

fc8c11f7521a6c21e6b7fbad9cdaab180e0546fa56ca11b6974670f6d827932b9bb880a768b82a94ea9199d16f680518b552fe47310636e620e0d2451932b490
SSDEEP

12288:0N0HRko/BOiVHLuTrSf5ZjF+2yg6Syska8W2OEmy/uH4x02W9Kg6dD:0N0xkMKS+rCka8rN1/u4W8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KLines.dll

Files

KLines.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

KLines.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 797KB - Virtual size: 797KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ