Static task
static1
Behavioral task
behavioral1
Sample
RTMPLTFM.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RTMPLTFM.dll
Resource
win10v2004-20220812-en
General
-
Target
RTMPLTFM.dll.7z
-
Size
5.5MB
-
MD5
24e8ce2621b20dd89107ac679a295376
-
SHA1
bd28636b57a2af1cae4f24d2cc2a9d96d7b77661
-
SHA256
cfc64852a20405ebb4617d440d3ccdad33cdff0a5fa6a0fd7145703a9522b4a7
-
SHA512
bdbd0e5a16d0a3d9f0cc4f0643235ae765accd3fec09e720d1310a7fc533d13654ae21752d2fdd82663f6fa8585058ac356dd79733cf2702084e4991cd8e048b
-
SSDEEP
98304:YGH6DyWTu5s5Blvrdn7VKgVqZ8iay4gNP/BSc5ROH6xzbbqdGg4zy9lB9ONU:YGaDyG5nJrd7bVqZ8i4gllCH6RbWMDAv
Malware Config
Signatures
Files
-
RTMPLTFM.dll.7z.7z
Password: infected
-
RTMPLTFM.dll.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12.6MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RT_CODE Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.1MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ