Custom Backdoor No Crt Gcc Obfuscation

Duo Tech@duotech

•updated Aug 17, 2026•3•0•2

Detects the 12KB RtkNGUI64.exe backdoor built without a C runtime, using GCC (tdm64-1) 4.9.2 and custom CRC/table-based string obfuscation