9f915b3fe891f285d9ab9ef43b0ea35095714c2c7d8186a30476637e9829e314 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f915b3fe891f285d9ab9ef43b0ea35095714c2c7d8186a30476637e9829e314
Size

953KB
MD5

56265ccd9e634c5244a9d492ef341fc3
SHA1

c5b186729e2a43fc2b52adef69e5e32b76af7cf6
SHA256

9f915b3fe891f285d9ab9ef43b0ea35095714c2c7d8186a30476637e9829e314
SHA512

1df357d019e9a36a7600d4f5465c250b1b653b87866137347fe4febe175740f61ff6a82dbe446532e65f3e6401390cba360b5f1389290f4fefcf7cfb0f23dd87
SSDEEP

24576:+mYcUPnHIHdQXdfBqi98anolbTnDN1kDgCwGr2cEA4/8UL8tw:zH+KQtfBIqolXDwEQ2p81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f915b3fe891f285d9ab9ef43b0ea35095714c2c7d8186a30476637e9829e314

Files

9f915b3fe891f285d9ab9ef43b0ea35095714c2c7d8186a30476637e9829e314
.dll windows x86

c8e1091cd36ea419818768aa5eb93f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 927KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE