e75b26ed7c0781aa5104db464c30834e62aba8645d24599286cd42469d3fbb35 | Triage

Sharing

General

Target

e75b26ed7c0781aa5104db464c30834e62aba8645d24599286cd42469d3fbb35
Size

985KB
MD5

34ceed7cba604f0633501fb89fedf0bd
SHA1

955229a9ff4366777ce3cacfc52ff4a243715e4a
SHA256

e75b26ed7c0781aa5104db464c30834e62aba8645d24599286cd42469d3fbb35
SHA512

9d683bbb5befde8b58eb9ca457bb092bd547151dd491aeac14ae84b6b7276f6395cbc98ffb96fbee4dc2177c44671e568ca5648d679d4ee4cffba75b97bfcdfe
SSDEEP

24576:FC1Nuo1iSBqEQ3IQ79xxK/1cEQL85eLRN6QwQCDY3KuGNiNQ:FCLu7Yq99rK/aEQg5eFKQ0ZTi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e75b26ed7c0781aa5104db464c30834e62aba8645d24599286cd42469d3fbb35

Files

e75b26ed7c0781aa5104db464c30834e62aba8645d24599286cd42469d3fbb35
.dll windows:4 windows x86

c8e1091cd36ea419818768aa5eb93f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 959KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE