69516e2de2b4c59008372c819e528847cc87108089ccf4a0b3b8203c6447e849 | Triage

Sharing

General

Target

69516e2de2b4c59008372c819e528847cc87108089ccf4a0b3b8203c6447e849
Size

1.1MB
MD5

bcfe6d660b32ea5b402e729f7bf89ee7
SHA1

f556c51464c693bffd92c39814e7b98ba9b5bab9
SHA256

69516e2de2b4c59008372c819e528847cc87108089ccf4a0b3b8203c6447e849
SHA512

808e3f67777f85d52b1db10e9103b1efce9e31173507124cbfe39ed406b97e54f8432f58f088d4d0fe1be88b1765613ef2b50c9e04df5f21b797dddd602036ef
SSDEEP

24576:wfJ+ZLS9q0vYDNs4i+gP0xQYKqNQhSybquv+0+cVxx1olH:GksXWNsLHqyh/brvocVtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69516e2de2b4c59008372c819e528847cc87108089ccf4a0b3b8203c6447e849

Files

69516e2de2b4c59008372c819e528847cc87108089ccf4a0b3b8203c6447e849
.dll windows x86

c8e1091cd36ea419818768aa5eb93f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1.0MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE