1c3e3f6aa5a3679411b4055111416df1a838a5fce74a5913951cabd5f8db44ef

Sharing

Copy URL Twitter E-mail

General

Target

1c3e3f6aa5a3679411b4055111416df1a838a5fce74a5913951cabd5f8db44ef
Size

41KB
MD5

99e49f559017b7d9106d138b72fd474d
SHA1

fcff5201725b29974609337ab2c58bd426c947d1
SHA256

1c3e3f6aa5a3679411b4055111416df1a838a5fce74a5913951cabd5f8db44ef
SHA512

dbebc6f182f2337c8a893cc3a09c576b6b819c2b1725a5cf03b35212ba57c9e115dfa47b3f7df86e6ed4e0275a0eeb3c9d894af3593b88d7774711bae4533c7e
SSDEEP

384:RhK+QDWrPzaZC007skOdys+6ViQkBw6inYPLopgUHeMOZDIROUo8JN77hhElyFRh:e+QDgeC00gkEys+6ViyTGIR53hal06uX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c3e3f6aa5a3679411b4055111416df1a838a5fce74a5913951cabd5f8db44ef

Files

1c3e3f6aa5a3679411b4055111416df1a838a5fce74a5913951cabd5f8db44ef
.dll windows:6 windows x86 arch:x86

cf8898a2c7b493f6a4135f69d6885950

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\mrogowsk\Documents\GitHub\RapidFire_SDKDev\RapidFireServer\bin\Win32\Release\RapidFireServer.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
CloseHandle

vcruntime140

memcpy
_except_handler4_common
memset
__vcrt_InitializeCriticalSectionEx
__std_terminate
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

_dupenv_s
_putenv_s

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_at_quick_exit
_initterm
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
terminate
_crt_atexit

Exports

Exports

rfCreateEncodeSession
rfCreateEncodeSession2
rfCreateEncoder
rfCreateEncoder2
rfDeleteEncodeSession
rfEncodeFrame
rfGetEncodeParameter
rfGetEncodedFrame
rfGetMouseData
rfGetMouseData2
rfGetRenderTargetState
rfGetSourceFrame
rfRegisterRenderTarget
rfReleaseEvent
rfRemoveRenderTarget
rfResizeSession
rfSetEncodeParameter

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf8898a2c7b493f6a4135f69d6885950

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 512B - Virtual size: 36B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 792B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 512B - Virtual size: 36B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 792B