General

  • Target

    RTSS.exe

  • Size

    16.0MB

  • MD5

    70b58cf8bacd80cbeedead824ea71504

  • SHA1

    bb3aa8021182814805e5311d8f69caef98a0d1ef

  • SHA256

    61d189179724f73950993b4cc2389200ba4a0a34be02095d98afa7a0804df2c0

  • SHA512

    398f1d15c695e0090f531e5332c442c1eadd61e21d35c5aa139a448bac36e7c5e100d03b2f83a2495afa6917a13ce5c9c72f7b41edcf35b17311c4b4bcaceab1

  • SSDEEP

    393216:JQjK2BtyEcwROqvt3RQVQLkS5xD984rxn+FkfQP28Jc3:JQHBUEcwRdv9RQuLkE55+CfQPY3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • RTSS.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll windows:6 windows x86 arch:x86

    738ffe5e32f854da1e1205178a94885a


    Headers

    Imports

    Exports

    Sections

  • Codec/rtvcvfw32.dll
    .dll windows:6 windows x86 arch:x86

    738ffe5e32f854da1e1205178a94885a


    Headers

    Imports

    Exports

    Sections

  • DesktopOverlayHost.exe
    .exe windows:6 windows x86 arch:x86

    bca3bb317990b0d4a50cbfe6c046c5ce


    Code Sign

    Headers

    Imports

    Sections

  • DesktopOverlayHostLoader.exe
    .exe windows:6 windows x86 arch:x86

    0171a9def2d9571fd9e4f19fa6c056ce


    Code Sign

    Headers

    Imports

    Sections

  • EncoderServer.cfg
  • EncoderServer.exe
    .exe windows:6 windows x86 arch:x86

    a0f3ff6e1deda9ba76340276602d9d01


    Code Sign

    Headers

    Imports

    Sections

  • EncoderServer64.exe
    .exe windows:6 windows x64 arch:x64

    c6d186d15b251b7b6ea3cbaf33e809fa


    Code Sign

    Headers

    Imports

    Sections

  • RTFC.dll
    .dll windows:6 windows x86 arch:x86

    3e8d48e95652b98c2e2613040452524c


    Headers

    Imports

    Exports

    Sections

  • RTMUI.dll
    .dll windows:6 windows x86 arch:x86

    43e8d250d4c3553f3fb27a3edbaa43aa


    Headers

    Imports

    Exports

    Sections

  • RTSS.dat
  • RTSS.exe
    .exe windows:6 windows x86 arch:x86

    cf1b59b1b5e356f8f33c057a7a360bd0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RTSSHooks.dll.copy
    .dll windows:6 windows x86 arch:x86

    e83d7819fef9782d0379c0ef195add4d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RTSSHooks64.dll.copy
    .dll windows:6 windows x64 arch:x64

    6d77a01efa80176a594537b8b0b5c816


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RTSSHooksLoader.exe
    .exe windows:6 windows x86 arch:x86

    7e02abc564a4ae51a7e08111cf0aa154


    Code Sign

    Headers

    Imports

    Sections

  • RTSSHooksLoader64.exe
    .exe windows:6 windows x64 arch:x64

    da0e0fffa770290df3b503f45fd36b48


    Code Sign

    Headers

    Imports

    Sections

  • RTUI.dll
    .dll windows:6 windows x86 arch:x86

    1736c20c278ca344fece9599e128765d


    Headers

    Imports

    Exports

    Sections

  • SaveMedia.cfg
  • SaveMedia.dll
    .dll windows:6 windows x86 arch:x86

    7da849b65959d1ef74f20421b758aa9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SaveMedia64.dll
    .dll windows:6 windows x64 arch:x64

    2c6f0dd6dd775104d66e19d47cff7ce6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmfxsw32.dll
    .dll windows:5 windows x86 arch:x86

    3b6ea42b172600bb5a8950b6766adce0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmfxsw64.dll
    .dll windows:5 windows x64 arch:x64

    ceb419a5aaa755241938db3b7db9fb65


    Code Sign

    Headers

    Imports

    Exports

    Sections