General

  • Target

    RLinux6.exe

  • Size

    43.3MB

  • MD5

    863af6174fc3ad53f47baee8e7dd9bfb

  • SHA1

    89c891de6302394764332ed74782ba26ad031a10

  • SHA256

    06758498ce45bb137d57bde11f49e2f1406dfe5805b5f1389f247f9425762537

  • SHA512

    a9f2c177bb3d888b7ea56e93a52dbb3f2e41107110f611eeba7f272a724a094688bbcd411603c0de9061a5cc6e2c9a91408a0537483047da8e4bbc5b15650836

  • SSDEEP

    786432:FqRrtDAIiG395iiAcDoIzmWWKxmbnmZTogfHRcTrJ2nK5Q2Id02:FutkIiG398EoIznWecTVA22

Score
3/10

Malware Config

Signatures

  • Unsigned PE 57 IoCs

    Checks for missing Authenticode signature.

Files

  • RLinux6.exe
    .exe windows:4 windows x86 arch:x86

    24f4223e271413c25abad52fd456a9bc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/hdd.ico
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsis_reg.dll
    .dll windows:5 windows x86 arch:x86

    345fecf4b61cebac7ffaec391319eab0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/reg_key.ico
  • $PLUGINSDIR/repair.ico
  • $PLUGINSDIR/rs_tpl_opts-ENGLISH.nsi
  • $PLUGINSDIR/rs_tpl_opts-FRENCH.nsi
  • $PLUGINSDIR/rs_tpl_opts-GERMAN.nsi
  • $PLUGINSDIR/rs_tpl_opts-JAPANESE.nsi
  • $PLUGINSDIR/rs_tpl_opts-PORTUGUESE.nsi
  • $PLUGINSDIR/rs_tpl_opts-RUSSIAN.nsi
  • $PLUGINSDIR/rs_tpl_opts-SPANISH.nsi
  • $PLUGINSDIR/rs_tpl_opts-SimpChinese.nsi
  • $PLUGINSDIR/rs_tpl_opts-TradChinese.nsi
  • $PLUGINSDIR/rs_tpl_repair-ENGLISH.nsi
  • $PLUGINSDIR/rs_tpl_repair-FRENCH.nsi
  • $PLUGINSDIR/rs_tpl_repair-GERMAN.nsi
  • $PLUGINSDIR/rs_tpl_repair-JAPANESE.nsi
  • $PLUGINSDIR/rs_tpl_repair-PORTUGUESE.nsi
  • $PLUGINSDIR/rs_tpl_repair-RUSSIAN.nsi
  • $PLUGINSDIR/rs_tpl_repair-SPANISH.nsi
  • $PLUGINSDIR/rs_tpl_repair-SimpChinese.nsi
  • $PLUGINSDIR/rs_tpl_repair-TradChinese.nsi
  • $PLUGINSDIR/rs_tpl_warn-ENGLISH.nsi
  • $PLUGINSDIR/rs_tpl_warn-FRENCH.nsi
  • $PLUGINSDIR/rs_tpl_warn-GERMAN.nsi
  • $PLUGINSDIR/rs_tpl_warn-JAPANESE.nsi
  • $PLUGINSDIR/rs_tpl_warn-PORTUGUESE.nsi
  • $PLUGINSDIR/rs_tpl_warn-RUSSIAN.nsi
  • $PLUGINSDIR/rs_tpl_warn-SPANISH.nsi
  • $PLUGINSDIR/rs_tpl_warn-SimpChinese.nsi
  • $PLUGINSDIR/rs_tpl_warn-TradChinese.nsi
  • $PLUGINSDIR/uninstall.ico
  • $PLUGINSDIR/usb.ico
  • Microsoft.VC90.CRT.manifest
  • QtAV1.dll
    .dll windows:5 windows x86 arch:x86

    dd51cf3b20d9793f8ab5077863503571


    Headers

    Imports

    Exports

    Sections

  • QtAVWidgets1.dll
    .dll windows:5 windows x86 arch:x86

    de386eddcb8b79e1bb2d9bb5bb7a54d4


    Headers

    Imports

    Exports

    Sections

  • QtCLucene_.dll
    .dll windows:5 windows x86 arch:x86

    dd754478f25c45de5df49a4f792ae960


    Headers

    Imports

    Exports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    fbfd9810c4f55dd1916cba94e6dd3e00


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    2c6466cc40582c824ae483e78f77a3fc


    Headers

    Imports

    Exports

    Sections

  • QtHelp_.dll
    .dll windows:5 windows x86 arch:x86

    2500f0999a21899bc352d5c382cdba63


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    168a8026f4e4b9c641c7c3ecdc07c71e


    Headers

    Imports

    Exports

    Sections

  • QtSql4.dll
    .dll windows:5 windows x86 arch:x86

    947413f8622f568362704552c7b33a18


    Headers

    Imports

    Exports

    Sections

  • QtWebKit4.dll
    .dll windows:5 windows x86 arch:x86

    6aa8d68bee9136ea779ae5a78993c637


    Headers

    Imports

    Exports

    Sections

  • QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    5e0c0b6f1a025ed41d3ac58116ec7bc0


    Headers

    Imports

    Exports

    Sections

  • R-Viewer.exe
    .exe windows:5 windows x86 arch:x86

    3a6958c3b277f30136cf962b507585f1


    Headers

    Imports

    Sections

  • R-Viewer.qrb
  • RLinux.exe
    .exe windows:5 windows x86 arch:x86

    7554a465e55b4ea03f0670a72787d0ba


    Code Sign

    Headers

    Imports

    Sections

  • RLinux32.exe
    .exe windows:5 windows x86 arch:x86

    f2a31c3edf44959a68daa50814f05d0f


    Code Sign

    Headers

    Imports

    Sections

  • RLinux64.exe
    .exe windows:5 windows x64 arch:x64

    1264060bc212de112de9c438026cb0fe


    Code Sign

    Headers

    Imports

    Sections

  • RStdHook.dll
    .dll windows:4 windows x86 arch:x86

    0e4943ef751e035ffaf752f772af9cf1


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Viewer/libgfl254.dll
    .dll windows:4 windows x86 arch:x86

    83f7d8f8166cf6178edba7aafe7abbe1


    Headers

    Imports

    Exports

    Sections

  • Viewer/libgfl267.dll
    .dll windows:4 windows x86 arch:x86

    83f7d8f8166cf6178edba7aafe7abbe1


    Headers

    Imports

    Exports

    Sections

  • Viewer/libgfl311.dll
    .dll windows:4 windows x86 arch:x86

    83f7d8f8166cf6178edba7aafe7abbe1


    Headers

    Imports

    Exports

    Sections

  • _converter.dll
    .dll windows:5 windows x86 arch:x86

    ccef88557090ab9f38d1fc5e95f984be


    Headers

    Imports

    Exports

    Sections

  • _docx.dll
    .dll windows:5 windows x86 arch:x86

    8b4a20a2abf64d544a2a2ff82dded6e7


    Headers

    Imports

    Exports

    Sections

  • _freeimage.dll
    .dll windows:5 windows x86 arch:x86

    ee328c24e4fad6f4309679e4c5c26997


    Headers

    Imports

    Exports

    Sections

  • _glib.dll
    .dll windows:5 windows x86 arch:x86

    ddaf00e10e32fba02cc0a7b183472be3


    Headers

    Imports

    Exports

    Sections

  • _gsf.dll
    .dll windows:5 windows x86 arch:x86

    fbecb3623697dd42287d154010f02e6c


    Headers

    Imports

    Exports

    Sections

  • _myio.dll
    .dll windows:5 windows x86 arch:x86

    32b60f9780f4753ecbe7894cc9d603c0


    Headers

    Imports

    Exports

    Sections

  • _ppt.dll
    .dll windows:5 windows x86 arch:x86

    bd5c700e58cb58d76dd68a49315ea892


    Headers

    Imports

    Exports

    Sections

  • _pptx.dll
    .dll windows:5 windows x86 arch:x86

    45957520cf8edde962cf9b47ca8c74ab


    Headers

    Imports

    Exports

    Sections

  • _wv2.dll
    .dll windows:5 windows x86 arch:x86

    3cdcdaf2a5f1bab26fa95697fd55098b


    Headers

    Imports

    Exports

    Sections

  • _xls.dll
    .dll windows:5 windows x86 arch:x86

    7801a8911ad88f31303aab07302fdadc


    Headers

    Imports

    Exports

    Sections

  • _xlsx.dll
    .dll windows:5 windows x86 arch:x86

    d8523cb75d6e5d8145ef95d1473d20ab


    Headers

    Imports

    Exports

    Sections

  • _xml2.dll
    .dll windows:5 windows x86 arch:x86

    1f8ea6ae81ceb5c3c4fc1f3dea0d59af


    Headers

    Imports

    Exports

    Sections

  • _zlib.dll
    .dll windows:5 windows x86 arch:x86

    e8fcd924004be61375969e3c785cbe33


    Headers

    Imports

    Exports

    Sections

  • avcodec-57.dll
    .dll windows:5 windows x86 arch:x86

    15903ec885f1251063267eeab1e1b8e1


    Headers

    Imports

    Exports

    Sections

  • avfilter-6.dll
    .dll windows:5 windows x86 arch:x86

    457c755b2a93c33f24972f8c33856697


    Headers

    Imports

    Exports

    Sections

  • avformat-57.dll
    .dll windows:5 windows x86 arch:x86

    b175287ca49acf27d2746d97f9131ad6


    Headers

    Imports

    Exports

    Sections

  • avutil-55.dll
    .dll windows:5 windows x86 arch:x86

    3e12ea8838d0d6d03def17570b2a35ff


    Headers

    Imports

    Exports

    Sections

  • de/R-Viewer_de.qm
  • de/eula.txt
  • de/helpview_de.qm
  • de/qt_de.qm
  • de/qt_help_de.qm
  • de/rs-faq.url
  • en/RLinux_en.qch
  • en/RLinux_en.qhc
  • en/eula.txt
  • en/rs-faq.url
  • es/R-Viewer_es.qm
  • es/eula.txt
  • es/helpview_es.qm
  • es/qt_es.qm
  • es/qt_help_es.qm
  • es/rs-faq.url
  • fr/R-Viewer_fr.qm
  • fr/eula.txt
  • fr/helpview_fr.qm
  • fr/qt_fr.qm
  • fr/qt_help_fr.qm
  • fr/rs-faq.url
  • helpview.exe
    .exe windows:5 windows x86 arch:x86

    040128c69efe9a4b5f2ddb75a28ccfe5


    Headers

    Imports

    Sections

  • helpview.qrb
  • helpview.txt
  • iposfd.exe
    .exe windows:5 windows x86 arch:x86

    94fec8dddbfab136e824518b20b2eda3


    Code Sign

    Headers

    Imports

    Sections

  • ja/R-Viewer_ja.qm
  • ja/eula.txt
  • ja/helpview_ja.qm
  • ja/qt_help_ja.qm
  • ja/qt_ja.qm
  • ja/rs-faq.url
  • libgfl340.dll
    .dll windows:4 windows x86 arch:x86

    8abd36f8cd15838a7ee62295afd1f026


    Headers

    Imports

    Exports

    Sections

  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    788796c8c6c3d01582e0a931bcffaa41


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0453db624ecaef7c4f3da938cd1d0fc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qgif4.dll
    .dll windows:5 windows x86 arch:x86

    e0b36bc16a83f8eb3cd6eec37f7d9055


    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    02c378f237b334d8de3653a5422be7ce


    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qjpeg4.dll
    .dll windows:5 windows x86 arch:x86

    47129320d4400c2658e1af471d6b6e77


    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qmng4.dll
    .dll windows:5 windows x86 arch:x86

    2da827f0f7684577f62d2bce4496ea82


    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qsvg4.dll
    .dll windows:5 windows x86 arch:x86

    1f11a995ce0d5d7814317fe5e603d48a


    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qtga4.dll
    .dll windows:5 windows x86 arch:x86

    12244143eb24a9ec2a901d72bbb033e7


    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qtiff4.dll
    .dll windows:5 windows x86 arch:x86

    2b9553a2e30cd8eb556513f6fc3f5d07


    Headers

    Imports

    Exports

    Sections

  • plugins/sqldrivers/qsqlite4.dll
    .dll windows:5 windows x86 arch:x86

    652a5e14b81b4b85ae765da5a58bb5f3


    Headers

    Imports

    Exports

    Sections

  • pt/R-Viewer_pt.qm
  • pt/eula.txt
  • pt/helpview_pt.qm
  • pt/qt_help_pt.qm
  • pt/qt_pt.qm
  • pt/rs-faq.url
  • rln_viewer.txt
  • rloginsrv.exe
    .exe windows:4 windows x86 arch:x86

    974bc30bfabee27b2b7b5f282a9cfc21


    Code Sign

    Headers

    Imports

    Sections

  • rs_vdfio.vxd
  • rsm.exe
    .exe windows:4 windows x86 arch:x86

    84dc458ed965851435067cf62d272c14


    Code Sign

    Headers

    Imports

    Sections

  • ru/R-Viewer_ru.qm
  • ru/eula.txt
  • ru/helpview_ru.qm
  • ru/qt_help_ru.qm
  • ru/qt_ru.qm
  • ru/rs-faq.url
  • swresample-2.dll
    .dll windows:5 windows x86 arch:x86

    5382fccc3a1a90f7c20b42936767c354


    Headers

    Imports

    Exports

    Sections

  • swscale-4.dll
    .dll windows:5 windows x86 arch:x86

    30aff98589c76ade8eb0cc8836b30641


    Headers

    Imports

    Exports

    Sections

  • w32/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    7056aeff7db7a50a3c13a499d43f7547


    Headers

    Imports

    Exports

    Sections

  • w32/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    ebedff1429659a4c6506ecdb229012f3


    Headers

    Imports

    Exports

    Sections

  • w64/libeay32.dll
    .dll windows:5 windows x64 arch:x64

    653a345694f6adab2450fabf9f96b6a5


    Headers

    Imports

    Exports

    Sections

  • w64/ssleay32.dll
    .dll windows:5 windows x64 arch:x64

    cbca98c862f9aa3af06db938e146e454


    Headers

    Imports

    Exports

    Sections

  • zhcn/R-Viewer_zhcn.qm
  • zhcn/eula.txt
  • zhcn/helpview_zhcn.qm
  • zhcn/qt_help_zhcn.qm
  • zhcn/qt_zhcn.qm
  • zhcn/rs-faq.url
  • zhhk/R-Viewer_zhhk.qm
  • zhhk/eula.txt
  • zhhk/helpview_zhhk.qm
  • zhhk/qt_help_zhhk.qm
  • zhhk/qt_zhhk.qm
  • zhhk/rs-faq.url