94d0eeeead1c0088f88ba81e45a54cdc3b2dc428acce22b40da119a2acdd9db6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d0eeeead1c0088f88ba81e45a54cdc3b2dc428acce22b40da119a2acdd9db6
Size

956KB
MD5

41e09dbc42ac6b6b6b27eaf79f04e238
SHA1

24ba7d5b81ddfbe499087e062ce3154cf8ca4c6d
SHA256

94d0eeeead1c0088f88ba81e45a54cdc3b2dc428acce22b40da119a2acdd9db6
SHA512

4adc81e504ea2c1547a3589d270083be33f0f3cdad23008954e2cc76014496c1d8809366e0b549a513c9ca6c541c614e878b3dcface1c0f80f09db955506a591
SSDEEP

24576:Uk+ivWW5/E0IduxRfIeLcPVKJH4/thneI:Uk+iuKc0IduvfIeLwV8H0O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d0eeeead1c0088f88ba81e45a54cdc3b2dc428acce22b40da119a2acdd9db6

Files

94d0eeeead1c0088f88ba81e45a54cdc3b2dc428acce22b40da119a2acdd9db6
.dll windows:4 windows x86

c8e1091cd36ea419818768aa5eb93f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 931KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE