HL_HaspRead[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

HL_HaspRead.exe
Size

620KB
MD5

7bcc6ace53f2c2d730b74a10053330e4
SHA1

2644ed1b6df749d50a1bf90acb2185b331cbe904
SHA256

b870813c49ac2dae72970ea56b9bad5912053434027a23b3c5f3842208f01bd6
SHA512

d5ec1c86506c93ac453591c8ff2f9d7c9ab0e41a5d31c11540a0cf8e017648394229827780a14bc88273a7c0e6cc42baab6db9b188e78f4d7f5b2da7eff054ae
SSDEEP

12288:QQJQ4u9eZTGnPrGEPDneuwDhdX6qASX3E3AxN2xcOOqnuG:QQJLEeZTerGEyzv3EQH2aOO+uG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HL_HaspRead.exe

Files

HL_HaspRead.exe
.exe windows x86

e0bd6a418a452bb45cd524ea9a63fbce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetProcessHeap
TlsFree
GetLocalTime
lstrcpyA
lstrcatA
GetCurrentThreadId
FileTimeToSystemTime
TlsAlloc
TlsGetValue
TlsSetValue
GetVolumeInformationA
FormatMessageA
ReleaseMutex
CreateMutexA
InterlockedCompareExchange
InterlockedDecrement
SetEndOfFile
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetCurrentProcessId
GetEnvironmentVariableA
GetProcAddress
GetModuleHandleA
LoadLibraryA
CreateFileA
CloseHandle
ReadFile
LocalAlloc
LocalFree
WriteFile
GetFileSize
FindClose
SystemTimeToFileTime
GetSystemTime
FreeLibrary
GetVersion
DeviceIoControl
SetErrorMode
FindFirstFileA
FindNextFileA
GetLastError
Sleep
SearchPathA
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
IsBadReadPtr
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
InterlockedIncrement

user32

MessageBoxA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcp60

??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Sections

.text
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0bd6a418a452bb45cd524ea9a63fbce

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcp60

Sections

.text Size: 476KB - Virtual size: 475KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 76KB - Virtual size: 1.2MB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 476KB - Virtual size: 475KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 76KB - Virtual size: 1.2MB

.rsrc
Size: 28KB - Virtual size: 25KB