PRwtx[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PRwtx.dll
Size

128KB
MD5

0a02ce51a3b1c749f44264ff61b76a04
SHA1

3cdacbcbc43e5191a0842a54029f07221614de30
SHA256

9bb51e018cc765e4192f1353e06f0af73d5fa2939cabc2f55814d72d24e99c21
SHA512

2002164c6ffeb2c070e52cf73cefbf942d23c2c744b6442b764be67f4b1b7f8290eb66b5929cc2a6d42fb8ca07f66072b291c503c5c330399dca50c916f6c6be
SSDEEP

1536:gYvQHAGNvwnmvyU49gxFm9d216PJdi9fx4Kl7e89eBeFE95m0wBbzKvOrP41Ihzk:FvQtNY049XJOeuFE9FyyO74qblBT/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PRwtx.dll

Files

PRwtx.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DLLFormShow
GetDLLFuncList

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 137B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ