4e6726228b78402e2dfdf67bad83aec9483406d90ac4424face2e9e03a617fa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e6726228b78402e2dfdf67bad83aec9483406d90ac4424face2e9e03a617fa2
Size

727KB
MD5

72ed8d31aacfe917c8b3f307a007d564
SHA1

26809aaf89ed1498a1a5de8f2eeb4859258274b5
SHA256

4e6726228b78402e2dfdf67bad83aec9483406d90ac4424face2e9e03a617fa2
SHA512

d5598b42cdca42a5f683ec03aa06a3a75337336e3b8a9739acf382be7f95e47b207eede67a2e409550c5a9b68ed28c46f08b9640e5f56ffed3c2e56f6f496915
SSDEEP

12288:asDRAQxMGajvfkaS2M9g6vnl1B2TRO3LMPM/Vh+i3jylIr7B:vR5xMGajHkaS59gUnlKTR+LM0jz+I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e6726228b78402e2dfdf67bad83aec9483406d90ac4424face2e9e03a617fa2

Files

4e6726228b78402e2dfdf67bad83aec9483406d90ac4424face2e9e03a617fa2
.dll windows:4 windows x86 arch:x86

da11d508fec06e7bdf0c398e2ba3e2bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

OffsetViewportOrgEx

winmm

waveOutRestart

winspool.drv

DocumentPropertiesA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ImageList_Read

ws2_32

WSACleanup

wininet

InternetCloseHandle

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 702KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE