874d64a3dc7b889829caad74b5c72e9d9d80b988e4862d4381579f075aae9933 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

874d64a3dc7b889829caad74b5c72e9d9d80b988e4862d4381579f075aae9933
Size

1.0MB
MD5

a834bced028a00678017927bc85aef23
SHA1

371f80a5245c127cb3951deb1f6c1c1b13921533
SHA256

874d64a3dc7b889829caad74b5c72e9d9d80b988e4862d4381579f075aae9933
SHA512

ec6bb7ccf7b7da5c72147151ea9d3b1ddc039f066468934089f8f1b12547e9494f2c13608cc83bcf3e5361e82e4956c09dbea72a8cc02bc6f4ba75747ee8c306
SSDEEP

24576:ExyWwTxrxHicn92bRDp6P+KGPYEGM0nBinyqp+AWUGIgE:YyHxHiq4F8tdiT2UGIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
874d64a3dc7b889829caad74b5c72e9d9d80b988e4862d4381579f075aae9933

Files

874d64a3dc7b889829caad74b5c72e9d9d80b988e4862d4381579f075aae9933
.dll windows x86

5fd5e4e216cee6cdaac34db5e6281d6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

SetPolyFillMode

winmm

waveOutRestart

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_Create

ws2_32

recv

wininet

InternetCloseHandle

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1.0MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE