HuaxiaVolcanoInstallSimplifiedS
Behavioral task
behavioral1
Sample
3af01c630b1bed8cb758c14b825b0b531488cbfd7a7b80116a80bb965a28996c.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3af01c630b1bed8cb758c14b825b0b531488cbfd7a7b80116a80bb965a28996c.dll
Resource
win10v2004-20230915-en
General
-
Target
3af01c630b1bed8cb758c14b825b0b531488cbfd7a7b80116a80bb965a28996c
-
Size
4.3MB
-
MD5
46e21189aab9d612dd0b0ee0b8ab75a6
-
SHA1
5b9ce61e3f7c5339ec5c36c36af63b143d45c0b6
-
SHA256
3af01c630b1bed8cb758c14b825b0b531488cbfd7a7b80116a80bb965a28996c
-
SHA512
11679f1a6cfe20dff219a3fcc7137788a06be54e4180f77a4fb16800112ab9bd940d5dcb4fbbf341f9bbf4db9a90f09c66319ee17358ba1571b2eaaa9b7405c6
-
SSDEEP
49152:Jqe4FHPnM/5YibdiEpCZ3aBC9yUI95bSIxN120Wm:HgE/51ZCZ3ac9tITu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af01c630b1bed8cb758c14b825b0b531488cbfd7a7b80116a80bb965a28996c
Files
-
3af01c630b1bed8cb758c14b825b0b531488cbfd7a7b80116a80bb965a28996c.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 901KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE