kbdax2[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kbdax2.dll
Size

7KB
MD5

79566e530ce71a7d8bf0dc6dc10ee3ce
SHA1

b79402bf06ccb1fd8f386685c8de36ea01d3b4d5
SHA256

a3919c4165e15e422f8c803524573b4d184462b01340ae365d56e55cb45800ba
SHA512

21a1af1afff0ef881d5b7cbd9bf484966637a8c2a996c0db0724853b6e1b263d78be80c2828cf9f2d87384a77f465ee05cf4259bf05b9046fd59d3f0c7c2a9fd
SSDEEP

96:E85ZoTwJahDRx9dv1bV9AQRkn+JG211WYUw3WwQ:EWZohDR311rxkni1WYUw3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kbdax2.dll

Files

kbdax2.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

kbdax2.pdb

Exports

Exports

KbdLayerDescriptor
KbdNlsLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ