HaspRead[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

HaspRead.exe
Size

628KB
MD5

d1b61eb455480ee86f3b3e0c8a6eb731
SHA1

3aaa16098d1caf6abb74835f47ec5505c35ec876
SHA256

66b0e5d8c25e9ffe7d780847fb3ae85235e52440df96a808b9690c184994e199
SHA512

2215590bd6c6311e44e8c547f3014b4b4717697802aeda53b54669a35f044cf9800da199a48a58c2481129748c09f85caa42c0869254dece143386df93096d38
SSDEEP

12288:RqX0u9ADn7gnBD5faA8xTL/f0paqeAPfwnVy8sSlCE7A2YhqnuT:RtkADn7cDfwVCfwnV5sR9d+uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HaspRead.exe

Files

HaspRead.exe
.exe windows x86

e0bd6a418a452bb45cd524ea9a63fbce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetProcessHeap
TlsFree
GetLocalTime
lstrcpyA
lstrcatA
GetCurrentThreadId
FileTimeToSystemTime
TlsAlloc
TlsGetValue
TlsSetValue
GetVolumeInformationA
FormatMessageA
ReleaseMutex
CreateMutexA
InterlockedCompareExchange
InterlockedDecrement
SetEndOfFile
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetCurrentProcessId
GetEnvironmentVariableA
GetProcAddress
GetModuleHandleA
LoadLibraryA
CreateFileA
CloseHandle
ReadFile
LocalAlloc
LocalFree
WriteFile
GetFileSize
FindClose
SystemTimeToFileTime
GetSystemTime
FreeLibrary
GetVersion
DeviceIoControl
SetErrorMode
FindFirstFileA
FindNextFileA
GetLastError
Sleep
SearchPathA
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
IsBadReadPtr
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
InterlockedIncrement

user32

MessageBoxA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcp60

??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Sections

.text
Size: 480KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0bd6a418a452bb45cd524ea9a63fbce

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcp60

Sections

.text Size: 480KB - Virtual size: 478KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 80KB - Virtual size: 1.2MB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 480KB - Virtual size: 478KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 80KB - Virtual size: 1.2MB

.rsrc
Size: 28KB - Virtual size: 25KB