Rift3[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Rift3.dll
Size

138KB
MD5

dd756534053b729cce274875fac3e26d
SHA1

1384f2c515b621959c6fe4057868df05d4f11cc0
SHA256

09b16cd2cae8f1a9adc6ee5e924dd20daebd050006f54e2b3dff509501590d69
SHA512

4ba3dd756573670a750e1b6c1dd2d63a32f0dfb25dfb40e286d249662ce540349e670134972db568fddd363d1b7a3ab284fe6f02454c01386a422b9747173805
SSDEEP

3072:CMMynU/la8xTQ2U1Tg3EhIbUsRmoZ2Ye2rsJ+tabs1C4j1/olGat6C78i:CuU61xIbUsRmoZEIsotabs1C4j1Q3tlY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rift3.dll

Files

Rift3.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Jdsna\OneDrive\Desktop\Rift GUI Version - Copy\proj\obj\Debug\netstandard2.1\Rift.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ