c60c0fa26753e8cb97efd07a0a9710b88a1bec0d5d98d91b0c85401163f3ab6a | Triage

Sharing

General

Target

c60c0fa26753e8cb97efd07a0a9710b88a1bec0d5d98d91b0c85401163f3ab6a
Size

196KB
MD5

99f877ec184198b95232abf17fcc0307
SHA1

27f748fe0d04be7ae7f16c563734e75f08695441
SHA256

c60c0fa26753e8cb97efd07a0a9710b88a1bec0d5d98d91b0c85401163f3ab6a
SHA512

ae36ca4bea81af1c1386974fd396c1d6095c6a85e76530b5d2494b4937964bcce6762eef51bbb393a3e7e8936fa12b50787a59e15fc0ca339dda40eb77126266
SSDEEP

1536:n1j21TrgCzgDYUBJgz/bHdgzcbHVtPk06D8iHlJ61KAliBr6Ep7:n1jqMCzgDzBctPktb4KNt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c60c0fa26753e8cb97efd07a0a9710b88a1bec0d5d98d91b0c85401163f3ab6a

Files

c60c0fa26753e8cb97efd07a0a9710b88a1bec0d5d98d91b0c85401163f3ab6a
.dll windows:4 windows x86 arch:x86

56c1e27516aaebae86f53a354dbab09b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
free
fputc
fwrite
strncpy
strncmp
fread
floor
_ftol
calloc
qsort
realloc
fflush
ceil
sprintf
atof
fclose
fopen
strcspn
_CIpow
_initterm
_adjust_fdiv

Exports

Exports

InitChart
InitPie
out_graph
pie_gif

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 767B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ