HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
270500117a5742cd8f84e758700416e2e8244f295298b3d5686b63dd18704c78.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
270500117a5742cd8f84e758700416e2e8244f295298b3d5686b63dd18704c78.dll
Resource
win10v2004-20230915-en
General
-
Target
270500117a5742cd8f84e758700416e2e8244f295298b3d5686b63dd18704c78
-
Size
732KB
-
MD5
9f20582c65818dcab14e3290200a223f
-
SHA1
00fb3fc084aeb2d667be9c283279646bba1a3d92
-
SHA256
270500117a5742cd8f84e758700416e2e8244f295298b3d5686b63dd18704c78
-
SHA512
e289e9ab93a28d6b3db739b20248657a71564f3c9cdcf490252f683cebcc2f0cce60b0d89fa10e1213d03cf9151ba1b97e4e89c8f2684edbc2ffe752f7b32282
-
SSDEEP
12288:5Upm5iffIyxi/+70V7aUgZUQGswGXlYDYh7RCqF3iHwM+h9YLqOFjhXwbQhMmEK6:5Em5YgLWYVWXUoXeUh7RtCwM09YL1Fa3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 270500117a5742cd8f84e758700416e2e8244f295298b3d5686b63dd18704c78
Files
-
270500117a5742cd8f84e758700416e2e8244f295298b3d5686b63dd18704c78.dll windows:4 windows x86
da11d508fec06e7bdf0c398e2ba3e2bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
user32
SetClipboardData
gdi32
OffsetViewportOrgEx
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ImageList_Read
ws2_32
WSACleanup
wininet
InternetCloseHandle
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: 707KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE