RYB_PTL_API[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RYB_PTL_API.dll
Size

53KB
MD5

cb42bbdd4b172c24bd66c4d340523649
SHA1

543dc21411c48c71be002db82b30220648c3e0f3
SHA256

915693b035a29905354f2fba9cb22d8010cda4f6fdaf9e5a09a082dfef84ae5e
SHA512

99d18e125656a852c0f8f99199873ed9c57309ba6d276c3773affe187c97e68a69676be9b8244345d09296624650aab5a6eb9d630956298ececae3a7e5f0c79e
SSDEEP

1536:tnS9ZjeuZnR+22J+dO8fQzW++LyLtt4DvabjcPQ2DlMr7XC1gtiQS:tnS9ZKu5R+22J+++LyLtt4DvabjcPQ29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RYB_PTL_API.dll

Files

RYB_PTL_API.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\2015\2015电子标签\RYB_PTL_1_正式 - 20160517\RYB_PTL\obj\Debug\RYB_PTL_API.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ