RD[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RD.dll
Size

15KB
MD5

9881bfe4c837afc9a9684e5ce271a63e
SHA1

fabc6f3b667e1ed593cee3713349fd05285e6e18
SHA256

6a228fb789bddb246d83cd91b95b1c6c6bab7bfac56e7184b54b13b054c2c3bc
SHA512

b2f35afebefd3f0661a74ebc0180d107da163d6672eafdfb2a06d0326fc9913675fc6698376bfa3893b25373c6707bda6d5dd90b218802b993dc656d04899aae
SSDEEP

192:nzXDs61A/0LiAxqfKD6V0uQfWhiQrS8Net7RnBF4dV9+QjcW7AFCf4:8x0iAxqsRQ28N61cV9+Az6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RD.dll

Files

RD.dll
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ