HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
770c851812c2412815568e027c7b37cd2d912f70610e0ee805cf86d6d6f6f49f.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
770c851812c2412815568e027c7b37cd2d912f70610e0ee805cf86d6d6f6f49f.dll
Resource
win10v2004-20231023-en
General
-
Target
770c851812c2412815568e027c7b37cd2d912f70610e0ee805cf86d6d6f6f49f
-
Size
855KB
-
MD5
ede403a704e2b1db333364729e6c7e7f
-
SHA1
41307228ca980030f57090e9492361ce000e09b6
-
SHA256
770c851812c2412815568e027c7b37cd2d912f70610e0ee805cf86d6d6f6f49f
-
SHA512
98284049fa1d9605b0f53ea1f83990473de6ee7eb4434cac4ff5f3f935ccf72d8e26c597c6ec6124af462cf8bda084f5fed32e273e7bad2b25dd4c1fc66135a3
-
SSDEEP
24576:KdrI2XaONCmvC0p1BjqM9ksEMMhb+aJ+EQhUZNkVZG:KdrI2/NPRdysXNuN7k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 770c851812c2412815568e027c7b37cd2d912f70610e0ee805cf86d6d6f6f49f
Files
-
770c851812c2412815568e027c7b37cd2d912f70610e0ee805cf86d6d6f6f49f.dll windows:4 windows x86
068a09b906de722bcd67d9fc6d1d2162
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
user32
SetClipboardData
gdi32
SetViewportExtEx
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ImageList_SetBkColor
ws2_32
ntohl
wininet
InternetCloseHandle
comdlg32
GetSaveFileNameA
Exports
Exports
Sections
.text Size: 842KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE