fdae0a6d35ea9e64ec6346a8bee78c9b3b1583003bcdb99756a97e7d9e7fab9e | Triage

Sharing

General

Target

fdae0a6d35ea9e64ec6346a8bee78c9b3b1583003bcdb99756a97e7d9e7fab9e
Size

1022KB
MD5

1206ebc06d601fb1bb5828e671bc8e37
SHA1

dedecc6301ceda85389121f887107b99910c6ba5
SHA256

fdae0a6d35ea9e64ec6346a8bee78c9b3b1583003bcdb99756a97e7d9e7fab9e
SHA512

1684cfec20dca7b32c6f2a8036873a367910d2388105369189fc510ab7f23fab35a7d2daaf96759e5b5aff72c12c5248ec10796002441e01e3722b72936e31df
SSDEEP

24576:H4HBIEtBh6h4O6/a3XCdnYEng+hs9dA1pUMFF3Ope4okYYeatLj:kIEtBc4R/wEY8hs9KpU4AUitLj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdae0a6d35ea9e64ec6346a8bee78c9b3b1583003bcdb99756a97e7d9e7fab9e

Files

fdae0a6d35ea9e64ec6346a8bee78c9b3b1583003bcdb99756a97e7d9e7fab9e
.dll windows:4 windows x86

51e8527653d57c846656a640f604f55a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

SaveDC

winmm

midiOutReset

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_Read

ws2_32

accept

wininet

InternetCloseHandle

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1008KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE