Rift[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Rift.dll
Size

142KB
MD5

fbb170ef0f7df0125b3883a1cf9ec2e3
SHA1

6ebd5b983bc326cf74244c142decf28c10472339
SHA256

8b52a84ad503e2fe021bc134ccc0dbf936412f1328b76051eaba05b50369afef
SHA512

efd46e05b470552fd046ced41eca33eec6bcbe8b290117708420544af50a78e038745199860eb45e18df146e0955da56dcb249e8c60031518e45e9a6c146fecf
SSDEEP

3072:BMQ4uIJrLu9SHZo1Rl9LkNAIl8i6cJQVBjpoOKBWyfBtabs1C4j1E4pXmxA+sSmS:BMQ4uIJrLu9SHokNtdVsPolBWEtabs1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rift.dll

Files

Rift.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Jdsna\OneDrive\Desktop\Rift GUI Version - Copy\proj\obj\Debug\netstandard2.1\Rift.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ