HuaxiaVolcanoInstall
Static task
static1
Behavioral task
behavioral1
Sample
026a280a34db8283c18a34b6ae87ce328b4219800c276758b3f57bbe201d063d.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
026a280a34db8283c18a34b6ae87ce328b4219800c276758b3f57bbe201d063d.dll
Resource
win10v2004-20240802-en
General
-
Target
026a280a34db8283c18a34b6ae87ce328b4219800c276758b3f57bbe201d063d
-
Size
872KB
-
MD5
a325994c09401c700e67f7383d04a5ce
-
SHA1
01930c1b05e31b684856f6b8ae094ebc1d46f6aa
-
SHA256
026a280a34db8283c18a34b6ae87ce328b4219800c276758b3f57bbe201d063d
-
SHA512
a3a029827f23bf05da1be1ccc0e6fcca1a24ed2926ad77bc5d2850236c47ee3c76319eefe1e34277a44b8fbaec0a775b52eb03f01b439c05e5240ca5e8a3361b
-
SSDEEP
24576:YSMg43A5V5ZZJidjc2tAJ+W5fJKAgXfzJX63YxHXI:Sg43AnGdALIWDuXlqsHXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026a280a34db8283c18a34b6ae87ce328b4219800c276758b3f57bbe201d063d
Files
-
026a280a34db8283c18a34b6ae87ce328b4219800c276758b3f57bbe201d063d.dll windows:4 windows x86 arch:x86
068a09b906de722bcd67d9fc6d1d2162
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
user32
SetClipboardData
gdi32
SetViewportExtEx
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ImageList_SetBkColor
ws2_32
ntohl
wininet
InternetCloseHandle
comdlg32
GetSaveFileNameA
Exports
Exports
Sections
.text Size: 859KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE