f57c39963a277cc4a39445c75d99c35a847bee4358b6941cc57a03cd06049649 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f57c39963a277cc4a39445c75d99c35a847bee4358b6941cc57a03cd06049649
Size

1010KB
MD5

5b9726f2839e4e276c77894a37a9d5cc
SHA1

228dcc7bee303e0815594d2bd57e34a322b13d54
SHA256

f57c39963a277cc4a39445c75d99c35a847bee4358b6941cc57a03cd06049649
SHA512

ea6974d2288ad52a19c113f4ff9282e95a37db18e8d0666a467b51c353932f8ab1586d07c19942aef0056bac64b83510b4b3a10b1324f9708b3b899a5fabdf71
SSDEEP

24576:MZpNtjybMA43k5A8A7onfjccMWZTGm/Gf:MVtjybMA43UAh7onbSWRGm/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57c39963a277cc4a39445c75d99c35a847bee4358b6941cc57a03cd06049649

Files

f57c39963a277cc4a39445c75d99c35a847bee4358b6941cc57a03cd06049649
.dll windows x86

26b3aeb5d8b805f2a115f28c1f602b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetWindowPos

gdi32

GetClipBox

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_SetBkColor

ws2_32

inet_ntoa

comdlg32

GetSaveFileNameA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 934KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE