HuaxiaShunyInstall
Static task
static1
Behavioral task
behavioral1
Sample
8e6782dc6be056cc616edddd5e006312376adaaa66f02ac87635cadabd593a4d.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8e6782dc6be056cc616edddd5e006312376adaaa66f02ac87635cadabd593a4d.dll
Resource
win10v2004-20230221-en
General
-
Target
8e6782dc6be056cc616edddd5e006312376adaaa66f02ac87635cadabd593a4d
-
Size
804KB
-
MD5
29a383c31a59c2763c76ac5775374cf3
-
SHA1
e50e4c22fff003c9a3f4686855b0a9f92b858c8c
-
SHA256
8e6782dc6be056cc616edddd5e006312376adaaa66f02ac87635cadabd593a4d
-
SHA512
47d1e737c1f316dcde9dc512cb0780773e95ee610b334485bbcd47c5e448c5e6c5bbaaaa1c48dbc2ef69645da27474ae38eef3147f8556b220b7c23ca0c094d7
-
SSDEEP
12288:oiH1/Sax2Bo7KVw8UjpEZYAlbhkYjJ1gEpAXXrNuBxKJRDgarz/uE6X+CnHH7U:o9ax2BoBEHCYtMrNbvDnzmE6XXHH7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e6782dc6be056cc616edddd5e006312376adaaa66f02ac87635cadabd593a4d
Files
-
8e6782dc6be056cc616edddd5e006312376adaaa66f02ac87635cadabd593a4d.dll windows x86
8a3ae561a3763cc31216f30aecc1e4bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetClipboardData
gdi32
GetClipBox
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
RegisterTypeLi
comctl32
ImageList_Read
ws2_32
ioctlsocket
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: 779KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE