130b469a9a4172a555d7952ab034dcf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

130b469a9a4172a555d7952ab034dcf6
Size

11KB
MD5

130b469a9a4172a555d7952ab034dcf6
SHA1

5f31266d04ee120797aa88de8c214e6c51674b40
SHA256

ce09a78c439287fb86e69e674d46096df2de0d68a46faed130446571d5ad01ba
SHA512

db2491adaf68681037c52fccfeb6e17d7e2ca053533b17aa151ff1eaab452d0644b6f8e1f2341dc06b7f94881cf20a1b68a4cc3b7102d8b5390d9789c00305b3
SSDEEP

192:+B3VJiW+mCbhaxCadaTjoBnUQLXXzBDg2RaetRw/S6LVhwzuEWKD:0VJitlU5ETjkNf65hMuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
130b469a9a4172a555d7952ab034dcf6

Files

130b469a9a4172a555d7952ab034dcf6
.dll windows:4 windows x86 arch:x86

7fbabd1d53950005e36d795b69ef5656

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

__CxxFrameHandler
_CxxThrowException
memset
exit
memcpy
malloc
strcpy
_outp
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
strlen
free

kernel32

DuplicateHandle

user32

GetWindowRect

Exports

Exports

A
B
C
ClbAddData
ClbB
ClbC
ClbSetColumnWidths
ClbT
D
GXAJOOYWHOP
T

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ