30c7ee3cabfb73eabc805cb42be46897c12565b6287977c28e966e560b65d5cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c7ee3cabfb73eabc805cb42be46897c12565b6287977c28e966e560b65d5cf
Size

987KB
MD5

04b5ba7dbf81c872f7ebc6118590a5ee
SHA1

5c639467d979531ffdceaf57ead8f469ac8d6014
SHA256

30c7ee3cabfb73eabc805cb42be46897c12565b6287977c28e966e560b65d5cf
SHA512

5e9e059ff765cc27a3e7d9e3aca1882d7390f679f8c6fcd73925d375f87bbefc17675e014fc8ccc82fd7dea7eb300ab98bf2886c67a4fab5cf5234463ca85909
SSDEEP

12288:XmZ9qdi4sqRA2tDvW3F5A7Jw9I+F8qorn9t2QmRkeyIuRN7CzafDSV+Nga8m+/8G:8IsqRAIeV5kqTor9wmrI6NksNsOhM5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c7ee3cabfb73eabc805cb42be46897c12565b6287977c28e966e560b65d5cf

Files

30c7ee3cabfb73eabc805cb42be46897c12565b6287977c28e966e560b65d5cf
.dll windows:4 windows x86

c8e1091cd36ea419818768aa5eb93f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 973KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE