9dec424d7a926cab10552ffee40dd194df167cb5d15f388869ad9f7bfa21102a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9dec424d7a926cab10552ffee40dd194df167cb5d15f388869ad9f7bfa21102a
Size

827KB
MD5

f1507b5e68c3868fc9548a444c57ee6c
SHA1

620eeee2d5aea9b631be17682cffe6e0bb5616aa
SHA256

9dec424d7a926cab10552ffee40dd194df167cb5d15f388869ad9f7bfa21102a
SHA512

428c2fa8714bb27f0cbb1d52122b3519cf30b306d933087ae09cad23e729866c03a4c56cbadaba0698e5ad909a4607aacdc65efabd43890b63e563bb576ba045
SSDEEP

24576:k/jSAPn/CmLTPn9DfBm0vpSm1cLOtHd90/2A:krSAPn/C0TP9zBm+ZcLOt9+uA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9dec424d7a926cab10552ffee40dd194df167cb5d15f388869ad9f7bfa21102a

Files

9dec424d7a926cab10552ffee40dd194df167cb5d15f388869ad9f7bfa21102a
.dll windows:4 windows x86 arch:x86

068a09b906de722bcd67d9fc6d1d2162

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

SetViewportExtEx

winmm

waveOutRestart

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ImageList_SetBkColor

ws2_32

ntohl

wininet

InternetCloseHandle

comdlg32

GetSaveFileNameA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 814KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE