KLines[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KLines.dll
Size

273KB
MD5

7ddcd28b55d39790265bfc924485ed88
SHA1

bcf67e633e6004aa8676198f0020c0bcaf422e89
SHA256

32f3a7f6c9a509181b42a1d1c69e1776d40a10853bf42c7887abcbff39e97681
SHA512

e358e89f027f75e58e8f2af96f7b6c1a4c2b42b2ec4ec321ea0db6de07d1d2d3cefa3bb3a1ed1d14998f691481aea2f9ff3dc16028b8d6e60483442f21596e24
SSDEEP

3072:IY9mg62/F9sNmvveY9UuG2mKqtWqtiC7WG2sCUqrA1ta006Fb13oxdyLnjgr1VYs:IY9mg6K7uk5i+CBugj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KLines.dll

Files

KLines.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\resset\AppData\Local\Temp\vs2D66.tmp\x86\Debug\KLines.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ