3ac659615048c526a7063692b758f824f579deda3a7554a724eb5c8adaa8e4de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ac659615048c526a7063692b758f824f579deda3a7554a724eb5c8adaa8e4de
Size

1022KB
MD5

44ee631519c35b18d9a4dba2d5f3ee9a
SHA1

5cbd4c849b04192361e0b38bc38bc3437859482a
SHA256

3ac659615048c526a7063692b758f824f579deda3a7554a724eb5c8adaa8e4de
SHA512

705a4d73f3b92cbe45a801267194898e9ef0b7a999438cef92f278730314d1ba8b8855d6b022c8239a9e0506e5f41fa99d8fdbda7fa3d00a8a4305211fc022a7
SSDEEP

24576:JrZOCvRR/Hi8few+un5BGgWFBwgWZsMrwc3C61UI:J1hO6f+un5mWlrwc1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac659615048c526a7063692b758f824f579deda3a7554a724eb5c8adaa8e4de

Files

3ac659615048c526a7063692b758f824f579deda3a7554a724eb5c8adaa8e4de
.dll windows:4 windows x86 arch:x86

51e8527653d57c846656a640f604f55a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

SetClipboardData

gdi32

SaveDC

winmm

midiOutReset

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_Read

ws2_32

accept

wininet

InternetCloseHandle

comdlg32

GetFileTitleA

Exports

Exports

HuaxiaVolcanoInstall

Sections

.text
Size: 1007KB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE