88f3a8df4f52a0fc7d87b846aa0cdb413b2a04546555d2ebad5d96e6573e7de0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88f3a8df4f52a0fc7d87b846aa0cdb413b2a04546555d2ebad5d96e6573e7de0
Size

888KB
MD5

3da90726370bbf2a82f812576858fce2
SHA1

73037054e8391331538063a3ef60e7504163499e
SHA256

88f3a8df4f52a0fc7d87b846aa0cdb413b2a04546555d2ebad5d96e6573e7de0
SHA512

1b40c2dcc7ad236daef8373c086675d436b740d6687df0872dbc45ae4ea4db38689df161ad17a2ae88d99befcecf88be96ea662019b9eaef85c19d75ce615870
SSDEEP

24576:2fxrwY4X0c+RI63pImRMWywm2VVJEqM3HX5ec:2JkY423IM3gm8qM3HJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88f3a8df4f52a0fc7d87b846aa0cdb413b2a04546555d2ebad5d96e6573e7de0

Files

88f3a8df4f52a0fc7d87b846aa0cdb413b2a04546555d2ebad5d96e6573e7de0
.dll windows:4 windows x86

496c9b38cb0c3ec22f75700161ec8ecf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetParent

gdi32

GetSystemPaletteEntries

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetElement

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

GetSaveFileNameA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 773KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE