a058122aa7e2284d4e058dc350349212cdb47f95eae1ce0c6d68b4571aa439fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a058122aa7e2284d4e058dc350349212cdb47f95eae1ce0c6d68b4571aa439fd
Size

1.1MB
MD5

ba82fc5e9fbd2c48b0e4aaddca236ccd
SHA1

72d38d44dc87573ec49ea107e6230e976837fde3
SHA256

a058122aa7e2284d4e058dc350349212cdb47f95eae1ce0c6d68b4571aa439fd
SHA512

170891abeaf9e863bab4db8b65f0249278a09ff8c6a1515891aa8ca31322782f876315481404fb782aae4199753d0c28e1e9fb407f0c449cef9ac26ff35e6307
SSDEEP

24576:OsOiIdaG1rqomngqu0MEs1RmryNFCOWWRy0luP1YDumW50y:GY0qldMl1Rmr2HJRmYDumS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a058122aa7e2284d4e058dc350349212cdb47f95eae1ce0c6d68b4571aa439fd

Files

a058122aa7e2284d4e058dc350349212cdb47f95eae1ce0c6d68b4571aa439fd
.dll windows:4 windows x86

cd72d5025deb45b931734895f2abe470

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

gdi32

MoveToEx

winmm

midiStreamRestart

winspool.drv

DocumentPropertiesA

advapi32

RegSetValueExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Exports

Exports

FFHuaxiaVolcanoInstall
HuaxiaVolcanoInstall

Sections

.text
Size: 1.1MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE