bec92c06a01268bbc4a25532d41eaaf7140ec276d69486676b6b79b6ac49aa08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bec92c06a01268bbc4a25532d41eaaf7140ec276d69486676b6b79b6ac49aa08
Size

851KB
MD5

9936b2fdde00f3c62a85a038ee701574
SHA1

033f5b9ad5cac62e19368822882c35882f1c2e24
SHA256

bec92c06a01268bbc4a25532d41eaaf7140ec276d69486676b6b79b6ac49aa08
SHA512

ed8c16aa354660f8122eae546a1fbb5da21ddcbfafaa2500f6965ae95a60e3a6e62af231204de62da99906e6c22bc94a214d3bde954801050b6ccb4377566e64
SSDEEP

24576:MlVJ3TbIeBgPw2KO6TMB/j7uteTkq/61B0jQWfeY9SO5BOF:m3T8eAwGhZqebSjjY9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bec92c06a01268bbc4a25532d41eaaf7140ec276d69486676b6b79b6ac49aa08

Files

bec92c06a01268bbc4a25532d41eaaf7140ec276d69486676b6b79b6ac49aa08
.dll windows:4 windows x86

da11d508fec06e7bdf0c398e2ba3e2bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

OffsetViewportOrgEx

winmm

waveOutRestart

winspool.drv

DocumentPropertiesA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ImageList_Read

ws2_32

WSACleanup

wininet

InternetCloseHandle

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 826KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE