01ddd6f7c4c4d62388f62f12e253cea066defc3ad6357cb7e13d4fb289d03181 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01ddd6f7c4c4d62388f62f12e253cea066defc3ad6357cb7e13d4fb289d03181
Size

1.0MB
MD5

3585bcaa1d2354aa26cc56a5c1d7e2f7
SHA1

67e9b083f56d52c6ccba6393e559ba29643d323b
SHA256

01ddd6f7c4c4d62388f62f12e253cea066defc3ad6357cb7e13d4fb289d03181
SHA512

4219f5dd3fd7b915443c438e9720f05027dd93cd34134359f8521b7651d0798047c59e8ae01e48a792911f7665f2fd263af64f521b782c4c5dbe29fe4a6a62fa
SSDEEP

24576:NWZ1n8WRN7oaUnebsnNSlCWsJx+TFP8onTFS:Nw/G4u0ENxyFPzTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ddd6f7c4c4d62388f62f12e253cea066defc3ad6357cb7e13d4fb289d03181

Files

01ddd6f7c4c4d62388f62f12e253cea066defc3ad6357cb7e13d4fb289d03181
.dll windows:4 windows x86

cddd2cef01ffa79ed718b5a53f2dc84e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamStop

ws2_32

recvfrom

user32

GetDesktopWindow

gdi32

ExcludeClipRect

msimg32

GradientFill

winspool.drv

ClosePrinter

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_GetIcon

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE