xzlib0[.]dll | Triage™

Resubmissions

06/09/2026, 03:41

260906-d8rtrshc49

05/09/2026, 09:56

260905-lyjz6sdb49

05/09/2026, 09:20

260905-lax7wsyshv5

Sharing

Copy URL Twitter E-mail

General

Target
xzlib0.dll
Size 13.7MB
Sample260905-lax7wsyshv
SHA256 213d688649dd82cf3f6b84f3548f49759e4cf0bc2b2e4deea3e971458946b7ad
MD5 6b7292c3bcb40b516a474baf82a093c4
SHA1 16c5517511c7d283902ee56b0148e47e96c27bcf
SHA512 f6f3922fa707d9ce2d0312fdda34090f72e30f1b6ce0e71b7fb9d4d39628aacc4c39b700e6a47c6130a852e038e5ae403d7b82865aa73270b9225c1c68576738
SSDEEP 393216:oXMvyh14EbSDSuw/rb9WtwpKUA8tKaa+F:odhyEODSV/lWSpfZa+
TLSH
T1ACE623EB55D522F0DAC34A90B35A5BDD32D0F016996D6C2C33CB2D019933EAB964DE23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xzlib0.dll

File Explorer

xzlib0.dll

.dll 13.7MB

xzlib0.dll

IMPHASH 4bb026480a0cf5d599361b8208366e7d
SHA256 213d688649dd82cf3f6b84f3548f49759e4cf0bc2b2e4deea3e971458946b7ad
MD5 6b7292c3bcb40b516a474baf82a093c4
SHA1 16c5517511c7d283902ee56b0148e47e96c27bcf
SHA512 f6f3922fa707d9ce2d0312fdda34090f72e30f1b6ce0e71b7fb9d4d39628aacc4c39b700e6a47c6130a852e038e5ae403d7b82865aa73270b9225c1c68576738
SSDEEP 393216:oXMvyh14EbSDSuw/rb9WtwpKUA8tKaa+F:odhyEODSV/lWSpfZa+
TLSH
T1ACE623EB55D522F0DAC34A90B35A5BDD32D0F016996D6C2C33CB2D019933EAB964DE23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9646338

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

756KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

291KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

Virtual Size

69B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspr0

Size

Virtual Size

7.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.aspr1

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspr2

Size

13.7MB

Virtual Size

13.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

xzlib0.dll

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

generic