hpp[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

hpp.dll
Size

1.1MB
MD5

eaa27e09d3e544d3787640c9e94d4ce7
SHA1

675bd6bcb61d6616ef0c8afe3b226f05b11193b5
SHA256

3c052859db0c41abc6465fa4d41cb0f3d369635076a36e0e58c05135335bd2bf
SHA512

b2a25f3c5fec8c65829a24378d9fb93cc4cde91c0f7f2482e02a25a2f4402fa35e684f775e9ecf3b9c19989b461a71769702697adc9f88a614d9c721c4c2ccb4
SSDEEP

24576:81/sF6tQjPuOqI6esvDh5gqzzx3K/ko/VFd:8STV6bTfp3skoNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hpp.dll

Files

hpp.dll
.dll windows:6 windows x86 arch:x86

99a32721f16c793fc0e562693c3f7cef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\aads_\OneDrive\Documentos\GitHub\hpp-v6\Release\hpp.pdb

Imports

opengl32

glViewport
glEnableClientState
glPopAttrib
glPolygonMode
glBindTexture
glGenTextures
glVertexPointer
glEnable
glScissor
glDisableClientState
glMatrixMode
glBlendFunc
glLoadIdentity
glTexParameteri
glDeleteTextures
glTexCoordPointer
glTexImage2D
glColorPointer
glDrawElements
glDisable
glPushMatrix
glShadeModel
glPixelStorei
glOrtho
glPushAttrib
glGetIntegerv
wglGetCurrentContext
wglMakeCurrent
wglCreateContext
glPopMatrix
glClearColor
glClear
glDepthFunc

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetFileAttributesExW
OutputDebugStringW
GetFileSizeEx
GetConsoleOutputCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetLocalTime
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
GetLastError
HeapReAlloc
CloseHandle
SetStdHandle
GetThreadContext
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
GetProcessHeap
DeleteFileA
CreateDirectoryA
GetModuleHandleA
K32GetModuleInformation
FindFirstFileA
SetLastError
FindNextFileA
FindClose
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DisableThreadLibraryCalls
CreateThread
GetFullPathNameA
MoveFileA
WriteConsoleW
GetModuleFileNameW
GetFileType
GetStdHandle
ReadFile
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CreateFileW
HeapSize
SetEndOfFile
HeapAlloc
WaitForSingleObjectEx
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
WideCharToMultiByte
LCMapStringEx
GetStringTypeW

user32

EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
GetClientRect
SetCapture
GetForegroundWindow
IsChild
ClientToScreen
GetCapture
GetClipboardData
GetKeyState
GetAsyncKeyState
CallWindowProcA
SetWindowLongA
EnumWindows
IsWindowVisible
GetWindow
GetWindowThreadProcessId
MessageBoxA
WindowFromDC
GetActiveWindow
SetClipboardData
ScreenToClient

shell32

ShellExecuteA

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99a32721f16c793fc0e562693c3f7cef

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opengl32

kernel32

user32

shell32

imm32

Sections

.text Size: 874KB - Virtual size: 873KB

.rdata Size: 169KB - Virtual size: 168KB

.data Size: 30KB - Virtual size: 82KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 43KB - Virtual size: 42KB

.text
Size: 874KB - Virtual size: 873KB

.rdata
Size: 169KB - Virtual size: 168KB

.data
Size: 30KB - Virtual size: 82KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 43KB - Virtual size: 42KB