3a19f8c3d8388402c242087fdf9dbcc7d29d67fdf0cd82094994aa7f0f32688c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a19f8c3d8388402c242087fdf9dbcc7d29d67fdf0cd82094994aa7f0f32688c
Size

1.0MB
MD5

397b494a3c390bf60a8cf51d00f2bff4
SHA1

1146cb52ea2d1e9f890e44d3f3f14a346fba395f
SHA256

3a19f8c3d8388402c242087fdf9dbcc7d29d67fdf0cd82094994aa7f0f32688c
SHA512

3f9837da1e42f2bc4a16f8fe65176ee61aa2e3bb131b0ef32881579380c25b897f84c258cc2e32bac5d03dac8f2f4893b0ae8492e1b2a66bb8c833eeed91dc3a
SSDEEP

24576:AQZuDBCXYQe28tJsJNL9x7j+b+gdKUDm+mhJcz6E239:AQ6YXYp28Dyj+yMqzhJEV69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a19f8c3d8388402c242087fdf9dbcc7d29d67fdf0cd82094994aa7f0f32688c

Files

3a19f8c3d8388402c242087fdf9dbcc7d29d67fdf0cd82094994aa7f0f32688c
.dll windows:4 windows x86

5fd5e4e216cee6cdaac34db5e6281d6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

SetPolyFillMode

winmm

waveOutRestart

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_Create

ws2_32

recv

wininet

InternetCloseHandle

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1.0MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE