HuaxiaShunyInstall
Static task
static1
Behavioral task
behavioral1
Sample
653911f703ce699b5126a877beb57530c6cf6b3c7b57fbca671356e07463b4b0.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
653911f703ce699b5126a877beb57530c6cf6b3c7b57fbca671356e07463b4b0.dll
Resource
win10v2004-20230621-en
General
-
Target
653911f703ce699b5126a877beb57530c6cf6b3c7b57fbca671356e07463b4b0
-
Size
919KB
-
MD5
ec8644fdcb39581c467e0879b6d3e6cf
-
SHA1
3539ad76380ebf11f3a2679cdde800d71b6078c9
-
SHA256
653911f703ce699b5126a877beb57530c6cf6b3c7b57fbca671356e07463b4b0
-
SHA512
c52888ce19991b82bd022c1ca4c7034c556c6c51e0304a8774e8013b0c8ac2d86478b52155cf47b5509fc4c4e02f10a8bcb220a7b8ec0391eda2012664a2e6ce
-
SSDEEP
24576:py99ve/5Bs3fd1f1xo+O7Rs8bj77KeMFqe9QGdx:pgW/5BQXNxo+O7PjfQFDQG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 653911f703ce699b5126a877beb57530c6cf6b3c7b57fbca671356e07463b4b0
Files
-
653911f703ce699b5126a877beb57530c6cf6b3c7b57fbca671356e07463b4b0.dll windows x86
8a3ae561a3763cc31216f30aecc1e4bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetClipboardData
gdi32
GetClipBox
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
RegisterTypeLi
comctl32
ImageList_Read
ws2_32
ioctlsocket
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: 892KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE