RBKit[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RBKit.dll
Size

473KB
MD5

41078ee7cb5b18ca44d50261dbd8fbec
SHA1

85bdf3f8b3a8a8a91c2fff557862943b50e8c97d
SHA256

dac27cc7c66369036e103bafa4e1b5c94187955f9ea298ca7ef48bdfc1b86c55
SHA512

714cacd9decb47a3226c2744a073cd26983cd3bec062cac0bde56adab57ba64e006eb3c03e6b8a114f963a3a34f8597f2fd6e4a0aa1211f5dbace8461768e8eb
SSDEEP

12288:DJc8WFKh2tc0wqYbdb/Lr9kNc8WFKh2tc0wqYbdb/Lr9k:9cvMMPYFmcvMMPYF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RBKit.dll

Files

RBKit.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\drywa\source\repos\RBKit\obj\Debug\net8.0-windows\RBKit.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ