bb4d0675933e19738abee40a4b3855d140cc5ee9c307ceb157be032eb5e018b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb4d0675933e19738abee40a4b3855d140cc5ee9c307ceb157be032eb5e018b8
Size

852KB
MD5

c03cce1f902de7b714f73033eea6dfbe
SHA1

9b627b20298290816ddaf3e2c935887a10f65fff
SHA256

bb4d0675933e19738abee40a4b3855d140cc5ee9c307ceb157be032eb5e018b8
SHA512

769633e381ab55d16729758f2f03d49f6f59ca9e8dd218f64f93bfcf45d790c262aef6b4b8fbbf726732a282c5c14673216b14a5d9b14b35e6fd0fa226705344
SSDEEP

24576:AygPBJ5R6EBYit5OqjWuWyS9NlgvJqGQ1M7XvQLfMH0hOB9N:ALB9O5IWrl3lgvJq51M7XSfMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb4d0675933e19738abee40a4b3855d140cc5ee9c307ceb157be032eb5e018b8

Files

bb4d0675933e19738abee40a4b3855d140cc5ee9c307ceb157be032eb5e018b8
.dll windows:4 windows x86

068a09b906de722bcd67d9fc6d1d2162

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

SetViewportExtEx

winmm

waveOutRestart

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ImageList_SetBkColor

ws2_32

ntohl

wininet

InternetCloseHandle

comdlg32

GetSaveFileNameA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 839KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE