3f54199c3ba098aa64b1229c8f1d52fc18c8815c30e339873c6c66042e467a26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f54199c3ba098aa64b1229c8f1d52fc18c8815c30e339873c6c66042e467a26
Size

956KB
MD5

f6e148ded78edf20107739e23b4fa85d
SHA1

d94ba3d25452e3d6cc8ecafd263f59e9f9be5455
SHA256

3f54199c3ba098aa64b1229c8f1d52fc18c8815c30e339873c6c66042e467a26
SHA512

d5ecc453a1d15d779fa47fa72a196551ab03915a4d504619e16367c803647d97d7f0d7d3360a0bf80cbe274202c5ac8b1eaeb3641da61489c212c868332d9640
SSDEEP

24576:FEsa4OZt8BnTd4SpmBFH+6YtgOn1x2+Oex:FZqATdWBFHZD08Je

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f54199c3ba098aa64b1229c8f1d52fc18c8815c30e339873c6c66042e467a26

Files

3f54199c3ba098aa64b1229c8f1d52fc18c8815c30e339873c6c66042e467a26
.dll windows:4 windows x86

c8e1091cd36ea419818768aa5eb93f14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 931KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE