53a153c88a26ef5bdcb526347feaa57e3627856b63a5da2f1ff506e600d9657b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53a153c88a26ef5bdcb526347feaa57e3627856b63a5da2f1ff506e600d9657b
Size

760KB
MD5

50fd79ed3c0acb87dfe77e13698656f2
SHA1

8adbe71177310f0b0d5239963e0b2621b55c92b4
SHA256

53a153c88a26ef5bdcb526347feaa57e3627856b63a5da2f1ff506e600d9657b
SHA512

10096930a403afb44eb3ebe48a23f09b0281c4f3830f2b154a71a79bf418322605e7d8a41b8f7e708f8e8181a597fced7cbaaffd6f3321b63b24e867164c7dd4
SSDEEP

12288:iYamroopf+zxgWeatF7mfYJA2QEy60lynVfKmHhxrDolTyJJHvLKIKzGJrC:i7opfGyWPFyfSTyyn4KwlTyvH0KJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53a153c88a26ef5bdcb526347feaa57e3627856b63a5da2f1ff506e600d9657b

Files

53a153c88a26ef5bdcb526347feaa57e3627856b63a5da2f1ff506e600d9657b
.dll windows:4 windows x86

496c9b38cb0c3ec22f75700161ec8ecf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetParent

gdi32

GetSystemPaletteEntries

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetElement

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

GetSaveFileNameA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 735KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE