FFHuaxiaVolcanoInstall
HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
58a0ef629af8133ae73f021dea578400b288e25f8e9c5ed8bdf596787a7ee81d.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
58a0ef629af8133ae73f021dea578400b288e25f8e9c5ed8bdf596787a7ee81d.dll
Resource
win10v2004-20230915-en
Target
58a0ef629af8133ae73f021dea578400b288e25f8e9c5ed8bdf596787a7ee81d
Size
1.1MB
MD5
2856b9b7f2d98f7b3daf59161f11ea3a
SHA1
c58a2d9c94c7990f4246a916bb49b31e66184823
SHA256
58a0ef629af8133ae73f021dea578400b288e25f8e9c5ed8bdf596787a7ee81d
SHA512
1f71ced5f43bb484868162610f55f855e77ab832b56973c1df3cb43db5543d19687dcdfc738eb5d7d7a3b150d0345cac568d5b686ac86a41b046afe80dceef5b
SSDEEP
24576:ZsdeqOB8Qf3J0s2Xay+HKCHBzEiqI6n4SKLfUmH:edeqOBLPJ0bXazKWBzZV6n4iM
Checks for missing Authenticode signature.
resource |
---|
58a0ef629af8133ae73f021dea578400b288e25f8e9c5ed8bdf596787a7ee81d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SetWindowsHookExA
MoveToEx
waveOutWrite
ClosePrinter
RegQueryValueA
Shell_NotifyIconA
CoTaskMemAlloc
VarDateFromStr
ImageList_Draw
closesocket
GetFileTitleA
FFHuaxiaVolcanoInstall
HuaxiaVolcanoInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE