HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
5aabd5c8f8f43e0e7c68522988e22ec170b978e245209272dcea1741ee67520b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5aabd5c8f8f43e0e7c68522988e22ec170b978e245209272dcea1741ee67520b.dll
Resource
win10v2004-20221111-en
General
-
Target
5aabd5c8f8f43e0e7c68522988e22ec170b978e245209272dcea1741ee67520b
-
Size
1.1MB
-
MD5
2b176624ff66c51aa3644806cfceb816
-
SHA1
7a44d2f75c64f9c6cb031fa372b3b1bae73e35e5
-
SHA256
5aabd5c8f8f43e0e7c68522988e22ec170b978e245209272dcea1741ee67520b
-
SHA512
8d2042a450539f46619376ef231fc5e565e79ad2bcb2c52b7fad4d919c2331429028ecad7beed6effbebcbcc693ca93cf74a10509ee97bf79a5a3b5dafc4e93f
-
SSDEEP
24576:wbwK5yOEzDcF0rbARyJs8tnCD8EOBGFBrtJqvkatZRCGVxq:w0N1vQRsRnCQEOsQFZJVY
Malware Config
Signatures
Files
-
5aabd5c8f8f43e0e7c68522988e22ec170b978e245209272dcea1741ee67520b.dll windows x86
617abb960747899859b4c137036ef009
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
user32
GetSystemMetrics
gdi32
SetViewportOrgEx
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ImageList_GetImageCount
ws2_32
ntohl
wininet
InternetCloseHandle
comdlg32
GetSaveFileNameA
Exports
Exports
Sections
.text Size: 1.1MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE