hasp_windows_x64_82199[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

hasp_windows_x64_82199.dll
Size

4.7MB
MD5

e20dc4665a886d9bf5c131d2cd7c1401
SHA1

acab0119d18b7c8e860ac95c8183e67c139f924c
SHA256

4d9a58801befbb08998259010e6525aa3fb13bd36967ed055b0ac91c3b6c1ff5
SHA512

35fe00cbae75e95fa27fd81af06769ded9a1fb2809907501ba0a08386d9023f501798a5f3a4a0d6559cacad03cd4d372d465e63f7cc89ffa07d92a9ddba23454
SSDEEP

98304:kTHrOtOg1VlLt6DIIf45Z4vRxZmoZRI5267viELjonLrci:kTHkT1F5t5ZGZq7Dsv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hasp_windows_x64_82199.dll

Files

hasp_windows_x64_82199.dll
.dll windows:4 windows x64 arch:x64

7fd584ca2a54e7cd08eeda977ae83d2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
WriteFile
SetEndOfFile
OpenSemaphoreA
GetCurrentProcessId
WaitForSingleObject
DeviceIoControl
GetModuleFileNameW
GetLastError
FlushFileBuffers
GetVersionExA
GetFileInformationByHandle
GetProcessTimes
ReleaseSemaphore
OpenProcess
CloseHandle
FormatMessageA
GetComputerNameW
FindNextFileA
SetThreadPriority
SystemTimeToFileTime
SetFilePointer
ReleaseMutex
GetVolumeInformationA
FreeLibrary
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
QueryPerformanceFrequency
GetModuleHandleA
FindFirstFileA
SearchPathA
LoadLibraryA
DeleteCriticalSection
TlsSetValue
Sleep
ConvertFiberToThread
TerminateProcess
SetEvent
CreateEventA
HeapReAlloc
SetErrorMode
WideCharToMultiByte
GetVersion
GetFileSize
GetWindowsDirectoryA
GetTickCount
CreateFiberEx
OutputDebugStringA
FindClose
GetDriveTypeA
DefineDosDeviceA
LocalFree
GetModuleFileNameA
DuplicateHandle
QueryPerformanceCounter
InitializeCriticalSection
GetProcAddress
GetLocalTime
GetSystemTime
UnmapViewOfFile
ReadFile
ConvertThreadToFiber
GetProcessHeap
OpenMutexA
SwitchToFiber
TerminateThread
GetCurrentProcess
CreateFileW
CreateSemaphoreA
GetCurrentThreadId
CreateMutexA
ResumeThread
CreateProcessW
HeapFree
GetSystemInfo
TlsGetValue
QueryDosDeviceA
MapViewOfFile
SwitchToThread
GetLogicalDrives
DeleteFiber
FileTimeToSystemTime
SetFileAttributesW
HeapAlloc
CreateFileMappingA
CreateFileA
ExitProcess
CreateDirectoryW
DeleteFileW
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
GetFileType
FindNextFileW
RemoveDirectoryW
ExitThread
CreateThread
GetDateFormatA
GetTimeFormatA
MoveFileW
GetCommandLineA
GetStdHandle
RtlUnwindEx
SetHandleCount
GetStartupInfoA
SetStdHandle
SetLastError
TlsFree
GetTimeZoneInformation
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetFullPathNameW
GetCurrentDirectoryA
UnhandledExceptionFilter
VirtualProtect
VirtualAlloc
VirtualQuery
HeapSetInformation
HeapCreate
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

API_HL_CSTACK
HLM_CHECKALLSLOTS
HLM_CHECKCOUNTER
HLM_CHECKEXPDATE
HLM_CHECKSLOT
HLM_FREESLOT
HLM_GETRUSINFO
HLM_ISRUSHL
HLM_LOGIN
HLM_LOGOUT
HLM_OCCUPYSLOT
HLM_WRITELICENSE
HL_ABORT
HL_ACCINF
HL_AVAIL
HL_CALC
HL_CODE
HL_ERRMSG
HL_ERRMSGB
HL_HLSVERS
HL_LMLOGIN
HL_LOGIN
HL_LOGOUT
HL_MAXUSER
HL_MEMINF
HL_OFF
HL_ON
HL_PORTINF
HL_RD
HL_READ
HL_READBL
HL_READID
HL_SELECT
HL_SERVERADDR
HL_SERVERLICENSES
HL_USERINF
HL_VERSION
HL_WR
HL_WRITE
HL_WRITEBL
INT_OFF
INT_ON
K_EYE
hasp_cleanup
hasp_datetime_to_hasptime
hasp_decrypt
hasp_detach
hasp_enable_trace
hasp_encrypt
hasp_free
hasp_get_info
hasp_get_rtc
hasp_get_sessioninfo
hasp_get_size
hasp_get_trace
hasp_get_version
hasp_hasptime_to_datetime
hasp_legacy_decrypt
hasp_legacy_encrypt
hasp_legacy_set_idletime
hasp_legacy_set_rtc
hasp_login
hasp_login_ex
hasp_login_port
hasp_login_scope
hasp_logout
hasp_read
hasp_transfer
hasp_update
hasp_vm_dyn_execute
hasp_write
sntl_admin_context_delete
sntl_admin_context_new
sntl_admin_context_new_scope
sntl_admin_free
sntl_admin_get
sntl_admin_set

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fd584ca2a54e7cd08eeda977ae83d2f

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 105KB - Virtual size: 477KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 15KB - Virtual size: 15KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 105KB - Virtual size: 477KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 15KB - Virtual size: 15KB