d12ec5bf3022cfca4d41af05e5812c8a2d811d33f1a8bc79ed53703a1cd63a00 | Triage

Sharing

General

Target

d12ec5bf3022cfca4d41af05e5812c8a2d811d33f1a8bc79ed53703a1cd63a00
Size

1.1MB
MD5

7e12d4ccc9430e6b43cd08448652ccee
SHA1

3f691c6805b6a98ebc3c09f9c8dc732fe185e923
SHA256

d12ec5bf3022cfca4d41af05e5812c8a2d811d33f1a8bc79ed53703a1cd63a00
SHA512

b60a7984e10a942cfd44847b121287d9e062360d91957643692d7f350939612d6758f9d2a5c25346fc7c688a265d16c724d413a2f2c9d8edb80c0f08f649d95f
SSDEEP

24576:61sUuzyGHfNme6DyD4TJZQgHjxpS2NXUm5MNAZIkYauIpJ4v:61sU9IIe6kyZQabS0qNUuIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d12ec5bf3022cfca4d41af05e5812c8a2d811d33f1a8bc79ed53703a1cd63a00

Files

d12ec5bf3022cfca4d41af05e5812c8a2d811d33f1a8bc79ed53703a1cd63a00
.dll windows:4 windows x86

c8e1091cd36ea419818768aa5eb93f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1.0MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE