R_Gold_V10[.]5[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

R_Gold_V10.5.dll
Size

259KB
MD5

54c61efa7cd4bdeda5829f0ef5e087d2
SHA1

5aeb3afba528e3ff4ac38ad5c90d70ce9f9c2514
SHA256

ae1c483e59916328619e05380f0445e0d4042539a8aebdaf5eec8d13f7c74fad
SHA512

4f9f1fedd0b4419c5fec4ee301e3291a399e9ede33acdebbc06ac9df5057ee5508a4f3bfdca06e746a3f2060338e90e8c8dfedf22a4a512a7cc0009a4f11e90d
SSDEEP

3072:s+KJSApVXjqwq1eCoxEoFvGd8FfmCec1sEqaAtuK0aNYavdkfZw7gX:s6ApBFvGdApecwaquKg3Zw7g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
R_Gold_V10.5.dll

Files

R_Gold_V10.5.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ