c4b4c11b04ca0c43881613656c8c5c6a975992e7e6de60feb2898d7a93ebe213 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4b4c11b04ca0c43881613656c8c5c6a975992e7e6de60feb2898d7a93ebe213
Size

1.0MB
MD5

9614063513cd7ddb96d8f466300d72a8
SHA1

403a3641ed31f0e613fef6db83ad64ecea6e0fd1
SHA256

c4b4c11b04ca0c43881613656c8c5c6a975992e7e6de60feb2898d7a93ebe213
SHA512

0ed439e29ff3084ad3007e1a932710c0ff245baab5703b32596da12f972aacabb330344bea0145fe9a784cc1f4c9bcd8f33014f22fa2eaffafaae90d397487f6
SSDEEP

24576:WegyWSm727mqeqDO5hep2qy5UbZ20yPsfcjylFj2N/frr3:WbvI/FDYh0215UbZ5ykfHoN/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4b4c11b04ca0c43881613656c8c5c6a975992e7e6de60feb2898d7a93ebe213

Files

c4b4c11b04ca0c43881613656c8c5c6a975992e7e6de60feb2898d7a93ebe213
.dll windows:4 windows x86

cddd2cef01ffa79ed718b5a53f2dc84e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamStop

ws2_32

recvfrom

user32

GetDesktopWindow

gdi32

ExcludeClipRect

msimg32

GradientFill

winspool.drv

ClosePrinter

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_GetIcon

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE