HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
8927b8ba291faf07a117caea3cc3f82bfa7090335d65bcf6f12a63f06d6c5045.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8927b8ba291faf07a117caea3cc3f82bfa7090335d65bcf6f12a63f06d6c5045.dll
Resource
win10v2004-20240802-en
General
-
Target
8927b8ba291faf07a117caea3cc3f82bfa7090335d65bcf6f12a63f06d6c5045
-
Size
709KB
-
MD5
5c182b1ab3e8c0feb7118d0eabb69763
-
SHA1
c404b45990e1ff3a57f47883017cd7b96700f6d2
-
SHA256
8927b8ba291faf07a117caea3cc3f82bfa7090335d65bcf6f12a63f06d6c5045
-
SHA512
7f4a75785dd9bd81784fa7969d4064d8946c6b5bb9b92095377f44b461432e9014c4472190d9ab5c9aacb35a785c49ec72f3a47ce173311a5a7a6c6180238e6d
-
SSDEEP
12288:y+Iesx5/L0Zayj7g9UhWkoq4e9XCN8wnLxNpGMoPVF8jxTIZRDBqK6:y+ITxpL0Zv89KWko9Sq8WL/pCPVF85IS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8927b8ba291faf07a117caea3cc3f82bfa7090335d65bcf6f12a63f06d6c5045
Files
-
8927b8ba291faf07a117caea3cc3f82bfa7090335d65bcf6f12a63f06d6c5045.dll windows:4 windows x86 arch:x86
da11d508fec06e7bdf0c398e2ba3e2bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
user32
SetClipboardData
gdi32
OffsetViewportOrgEx
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ImageList_Read
ws2_32
WSACleanup
wininet
InternetCloseHandle
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: 684KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE