aaf3567a77800da690e33c05add99b656d384abbad46de4479ff371682dc91d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaf3567a77800da690e33c05add99b656d384abbad46de4479ff371682dc91d9
Size

709KB
MD5

bc3cb2e3d2eef252d9960b42723fb4c7
SHA1

45ebb34c6047d20cc18e3d67e16f98db1e09efa6
SHA256

aaf3567a77800da690e33c05add99b656d384abbad46de4479ff371682dc91d9
SHA512

3ae6878abf340182dbb5ff23b30be2170bdeb9bf4f2e70e0ca6981661e4e8062daf8effeda8df81f23ff0581e9949a001cc2b43736667978971529c13164e468
SSDEEP

12288:L2BtcEROX+7qkE+GeCh+rar6XuouJ8hdAu7KHqdDTwSZQJ0zlJ4cAY5D:LyhUK4HxR7JfTqXZkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaf3567a77800da690e33c05add99b656d384abbad46de4479ff371682dc91d9

Files

aaf3567a77800da690e33c05add99b656d384abbad46de4479ff371682dc91d9
.dll windows:4 windows x86

da11d508fec06e7bdf0c398e2ba3e2bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

OffsetViewportOrgEx

winmm

waveOutRestart

winspool.drv

DocumentPropertiesA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ImageList_Read

ws2_32

WSACleanup

wininet

InternetCloseHandle

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 684KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE