HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
49d8ce1628c2e680747b6f68c8b4baddff6679506b3bd6f3d75afa673c36a623.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49d8ce1628c2e680747b6f68c8b4baddff6679506b3bd6f3d75afa673c36a623.dll
Resource
win10v2004-20220812-en
General
-
Target
49d8ce1628c2e680747b6f68c8b4baddff6679506b3bd6f3d75afa673c36a623
-
Size
995KB
-
MD5
23cd22b1b5e1ff515e2c53ee145d646d
-
SHA1
f66f847a4482fc224fb17f2876a625c2ccfd114b
-
SHA256
49d8ce1628c2e680747b6f68c8b4baddff6679506b3bd6f3d75afa673c36a623
-
SHA512
8f27e2a99294a04040df4f0a572f514b8319e217562a20ac435a0d6049bdeae8046bb12ac4c6b78f8c56c85b96cfe336f111703f0bee4a5ba775539ff65a4808
-
SSDEEP
24576:tO6+x4qywNfijORsbxlAiKJctvIpvP8c2wqAkdJ9:Q/3xijPbxlbKJcpkvkc2wqAmJ
Malware Config
Signatures
Files
-
49d8ce1628c2e680747b6f68c8b4baddff6679506b3bd6f3d75afa673c36a623.dll windows x86
52bc8aba21727f2ec14670dc49091aee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetCursorPos
gdi32
GetViewportOrgEx
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_GetImageCount
ws2_32
WSACleanup
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: 919KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE