6f083f6923b06b4f796ac726b9f804b05349922fcf67ee73a1f3ed2cd5f8be33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f083f6923b06b4f796ac726b9f804b05349922fcf67ee73a1f3ed2cd5f8be33
Size

846KB
MD5

9ad4542f18899a401cfba97e2cb91bb7
SHA1

7fccf6c816bcb314b5791851f2143443a0e9ff64
SHA256

6f083f6923b06b4f796ac726b9f804b05349922fcf67ee73a1f3ed2cd5f8be33
SHA512

6f31536e881ce1f5f1ab2d40a99d1355b6e2d54d62a375ff573f978941b763bf1c1f024be5f5d071810d46cd1bda1ec6ae22e50782f5ec7002b12d3ae8f2461c
SSDEEP

24576:5sl/kEsjJ3onT9JnN68IZW862smc6qbIDLQ:u1b9mW86HGqbI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f083f6923b06b4f796ac726b9f804b05349922fcf67ee73a1f3ed2cd5f8be33

Files

6f083f6923b06b4f796ac726b9f804b05349922fcf67ee73a1f3ed2cd5f8be33
.dll windows:4 windows x86

068a09b906de722bcd67d9fc6d1d2162

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

SetViewportExtEx

winmm

waveOutRestart

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ImageList_SetBkColor

ws2_32

ntohl

wininet

InternetCloseHandle

comdlg32

GetSaveFileNameA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 833KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE