apidsp_windows_x64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

apidsp_windows_x64.dll
Size

304KB
MD5

be5ff7074dc982c7dd10cf5a00c277e0
SHA1

d6ba5d9dd68d65e38256af52c9244a6a4ea6f2c8
SHA256

97b4b82cdaad2f3d582f1d8128ae1d3836df90aa8890e96c930c225db9dd13b0
SHA512

4cfb1849b5810aa863c1de10c800622d9bdf017ebb1455898960bcc6dce2d925db9c741fc12f3305db46af6dc4afed9768c89d68f9dd82b1dd880fd2f7b1c685
SSDEEP

6144:zzyxHYwCtfi+UGG2yqhb+m3Z0Pdnfrjk/vpfT2x:zznwC5iQhaPdfrjevpfKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
apidsp_windows_x64.dll

Files

apidsp_windows_x64.dll
.dll windows:4 windows x64 arch:x64

9e04510e04e848f7582c802b233815c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExA
GetEnvironmentVariableW
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
MultiByteToWideChar
FindClose
FindNextFileW
FindFirstFileW
IsBadReadPtr
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentDirectoryW
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetCommandLineA
GetLastError
MoveFileW
DeleteFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
ExitProcess
GetModuleHandleA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
WriteFile
SetFilePointer
RtlUnwindEx
ReadFile
CloseHandle
FlushFileBuffers
GetFullPathNameW
GetCurrentDirectoryA
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
CreateFileW
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

hasp_cleanup
hasp_datetime_to_hasptime
hasp_decrypt
hasp_detach
hasp_enable_trace
hasp_encrypt
hasp_free
hasp_get_info
hasp_get_rtc
hasp_get_sessioninfo
hasp_get_size
hasp_get_trace
hasp_get_version
hasp_hasptime_to_datetime
hasp_legacy_decrypt
hasp_legacy_encrypt
hasp_legacy_set_idletime
hasp_legacy_set_rtc
hasp_login
hasp_login_ex
hasp_login_port
hasp_login_scope
hasp_logout
hasp_read
hasp_set_lib_path
hasp_transfer
hasp_update
hasp_vm_dyn_execute
hasp_write
sntl_admin_context_delete
sntl_admin_context_new_scope
sntl_admin_free
sntl_admin_get
sntl_admin_set

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e04510e04e848f7582c802b233815c7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 59KB - Virtual size: 58KB

.data Size: 7KB - Virtual size: 27KB

.pdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 59KB - Virtual size: 58KB

.data
Size: 7KB - Virtual size: 27KB

.pdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB