0b08334a23c5fc2a1206991c7bb43cd8656bab38c1efa86b2da2dde8d39147e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b08334a23c5fc2a1206991c7bb43cd8656bab38c1efa86b2da2dde8d39147e8
Size

918KB
MD5

12d704d7b5e2f19f3c50034e5002964f
SHA1

6cfb1eef37922da8cfbe80bbc91db29fb5f94fe2
SHA256

0b08334a23c5fc2a1206991c7bb43cd8656bab38c1efa86b2da2dde8d39147e8
SHA512

32a13b2dd88cdcb2155c863adb88c417983c1fbcb02c0d2a0c2042217fe1267b90648c065f477181e86d0ec45db83a27e68aedecd17cf7bba0ef41601cdab684
SSDEEP

24576:mGR4eOcOTPfueaS+sWkzZr/9LIa8CbW0nqDGzVInd:bWeOtLaaEa8in0GCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b08334a23c5fc2a1206991c7bb43cd8656bab38c1efa86b2da2dde8d39147e8

Files

0b08334a23c5fc2a1206991c7bb43cd8656bab38c1efa86b2da2dde8d39147e8
.dll windows x86

8a3ae561a3763cc31216f30aecc1e4bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetClipboardData

gdi32

GetClipBox

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

RegisterTypeLi

comctl32

ImageList_Read

ws2_32

ioctlsocket

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaShunyInstall

Sections

.text
Size: 891KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE