00d3b9f7ccfd13daf4d16509a9cacb2c3e9b8c319c7b6a13e7a751b52d05d5e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00d3b9f7ccfd13daf4d16509a9cacb2c3e9b8c319c7b6a13e7a751b52d05d5e4
Size

896KB
MD5

b16c21839054a74016b3024bd1407121
SHA1

191e6297f86188de202cd3aba97564eca5ef3211
SHA256

00d3b9f7ccfd13daf4d16509a9cacb2c3e9b8c319c7b6a13e7a751b52d05d5e4
SHA512

ebcfd4b408a136da64f466dc12627debe1334fba3d2b207e432f2f86d1d254e6886928ff079401214b4ea116c80bf7cbe00b7c12bb08abfd45a87bddb3802907
SSDEEP

24576:sgAO3h6NsZFeLVyCajyrLlI7SPTdx0041j5a97YO5ec:LAOoNKWrLa2b011jE9s2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00d3b9f7ccfd13daf4d16509a9cacb2c3e9b8c319c7b6a13e7a751b52d05d5e4

Files

00d3b9f7ccfd13daf4d16509a9cacb2c3e9b8c319c7b6a13e7a751b52d05d5e4
.dll windows x86

496c9b38cb0c3ec22f75700161ec8ecf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetParent

gdi32

GetSystemPaletteEntries

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetElement

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

GetSaveFileNameA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 781KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE