haspdnert_dispatch
Static task
static1
Behavioral task
behavioral1
Sample
haspdnert_x64.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
haspdnert_x64.dll
Resource
win10v2004-20240426-en
General
-
Target
haspdnert_x64.dll
-
Size
322KB
-
MD5
cc28fe32caa2646fc58b505a6af4d0e7
-
SHA1
649896d8c5b2049ad9240210bd9675742cae32e0
-
SHA256
1197032c76b71ebbc41ffb8faa5a8250fe7d970d5b688a51beded29c2e193d4d
-
SHA512
2886d55525a094b1d2aaa605566c054a7451694f7821f02df3b7e087d08413c5b0fc6531454883b44906bc0beeb6a96dc91d4dd7307f287a05b892c19556acfa
-
SSDEEP
6144:aTyh+GN/8MDINDHfXphMBGARGG2yFunesOwiZGs:aOcE8+I9XphM8M8bs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource haspdnert_x64.dll
Files
-
haspdnert_x64.dll.dll windows:4 windows x64 arch:x64
1ff60fc67844ce8bdca97945094f8780
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
user32
EnumWindows
GetWindowLongPtrA
GetWindowThreadProcessId
DefWindowProcA
SetWindowLongPtrA
kernel32
GetEnvironmentVariableW
GetWindowsDirectoryW
Thread32Next
SuspendThread
ResumeThread
OpenThread
CloseHandle
Thread32First
CreateToolhelp32Snapshot
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
WriteFile
LeaveCriticalSection
EnterCriticalSection
RtlUnwindEx
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
GetSystemDirectoryW
GetLocaleInfoA
FindNextFileW
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
CompareStringA
CompareStringW
SetEnvironmentVariableA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FreeLibrary
LoadLibraryW
IsBadReadPtr
SystemTimeToFileTime
GetSystemTime
OutputDebugStringA
GetCurrentDirectoryW
MoveFileW
DeleteFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
SetFilePointer
ReadFile
FlushFileBuffers
GetFullPathNameW
GetCurrentDirectoryA
SetStdHandle
CreateFileW
SetEndOfFile
GetDriveTypeA
GetModuleFileNameW
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Exports
Exports
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ