HuaxiaVolcanoInstall
Behavioral task
behavioral1
Sample
c1e2db1c69fab6317008256c7225ddcdfb79ab128099143f6b858fd741c321bb.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
c1e2db1c69fab6317008256c7225ddcdfb79ab128099143f6b858fd741c321bb.dll
Resource
win10v2004-20231023-en
General
-
Target
c1e2db1c69fab6317008256c7225ddcdfb79ab128099143f6b858fd741c321bb
-
Size
732KB
-
MD5
c4bbcb882ca6b89d402737d59146e668
-
SHA1
b15a86a2b9e465630b13c4f4e1da9c9141b76820
-
SHA256
c1e2db1c69fab6317008256c7225ddcdfb79ab128099143f6b858fd741c321bb
-
SHA512
6371aee5d809c1174fc34c03f198847dc4808c1c8dc9d4b09076329731bca98e34a118e5352714bb0d29531f4f2132d49a50a41a892bd88492fd4cfcf337b03c
-
SSDEEP
12288:Kiug3l0bhCu6eWfNtM4ZiJXjHfaXlTjkeZNyfeq6cOPtEQqMq2Y3S3kcufr1fbaZ:/v10bhCkWfNtdWLaXlbNyfelcO20q2YD
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1e2db1c69fab6317008256c7225ddcdfb79ab128099143f6b858fd741c321bb
Files
-
c1e2db1c69fab6317008256c7225ddcdfb79ab128099143f6b858fd741c321bb.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 724KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE