HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
09b834b3fe769ca6ad05f559cd5e4b8032a6e234d6e3ec69bd08fc96593a40a3.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
09b834b3fe769ca6ad05f559cd5e4b8032a6e234d6e3ec69bd08fc96593a40a3.dll
Resource
win10v2004-20230915-en
General
-
Target
09b834b3fe769ca6ad05f559cd5e4b8032a6e234d6e3ec69bd08fc96593a40a3
-
Size
993KB
-
MD5
c2468866e0fa2365a5d3e7a02efdbcee
-
SHA1
7df38cc43c591fd12eb86f5677e8f0b5fb86644c
-
SHA256
09b834b3fe769ca6ad05f559cd5e4b8032a6e234d6e3ec69bd08fc96593a40a3
-
SHA512
ffbc12c6d44870853c6f8a15a6d93869bd3c341b319d5bc46de78ab517d51ce9071652aecc2b3a6cf776897ad30db2c43bcac398a498ee6fd577ecf23b28b43d
-
SSDEEP
24576:U37tGc2CPTiyGYz+ygEeWWWljKGxf+XK1jU:278jCPTilG+jEeWpWUGQjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b834b3fe769ca6ad05f559cd5e4b8032a6e234d6e3ec69bd08fc96593a40a3
Files
-
09b834b3fe769ca6ad05f559cd5e4b8032a6e234d6e3ec69bd08fc96593a40a3.dll windows x86
c8e1091cd36ea419818768aa5eb93f14
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
gdi32
MoveToEx
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CoTaskMemAlloc
oleaut32
VarDateFromStr
comctl32
ImageList_GetImageInfo
ws2_32
inet_ntoa
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: 979KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE