83c640049736705d2b90f2a54a5b9b4687c0ab9296f25f9e3c28381db73df2c2 | Triage

Sharing

General

Target

83c640049736705d2b90f2a54a5b9b4687c0ab9296f25f9e3c28381db73df2c2
Size

1.1MB
MD5

e6adeec38bfe35b43aa86c9a17bda1d3
SHA1

8eb894a0a300656b69ca45528a1491d48dcc45d6
SHA256

83c640049736705d2b90f2a54a5b9b4687c0ab9296f25f9e3c28381db73df2c2
SHA512

4dead20d3c304941eb967a851681df06d18b6f09c6e288639119fd2abb25a1f79c6ebd1845539a92ef11400a9b22f32f86b122a9b47de5b15c06eaa536801696
SSDEEP

24576:fgbvzPdt/bJUax+s6/yaNtlZCcLxw3B14Tq26c8bGbgq:6vzPz/qa8//HNVCo+MsKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83c640049736705d2b90f2a54a5b9b4687c0ab9296f25f9e3c28381db73df2c2

Files

83c640049736705d2b90f2a54a5b9b4687c0ab9296f25f9e3c28381db73df2c2
.dll windows:4 windows x86

50e943006823bb4fe2a7699aea7c1554

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetClipboardData

gdi32

RestoreDC

winmm

midiStreamRestart

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ord17

ws2_32

recvfrom

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1.1MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE