hpr[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
hpr.dll
Size 148KB
Sample261018-weddds1s7p
SHA256 c0321c4841960960d198b3de744af97a28d8e205b53308278539495b6ad1e9ad
MD5 e982d6233fe5e315256d545527fb4efe
SHA1 18dad0a98fb7911581313d4a320190323677c42d
SHA512 abdbfcd68387dee776dad7ceff64c2994e2d7335a42d72a1e2edd0adfe07e0cd9dfac6674286f67c1987d15b1429ea19f64f52470f1b9d88f499bffeea9b6b46
SSDEEP 3072:6tYC/rxufRNSVHRJYVmwdpwhAnx8TiIa5h8ELN92msNTt3bwWRS:6Z/rxuDSVgVmwzwan0w6wwsWRS
TLSH
T1F5E3AE01799540F1DDAEC1BC20972B36BB3F8A958E096783D72CDD590E39941EE2B387
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hpr.dll

File Explorer

hpr.dll

.dll 148KB

hpr.dll

IMPHASH 2bdf2a245db743e93765fdaba68241dd
SHA256 c0321c4841960960d198b3de744af97a28d8e205b53308278539495b6ad1e9ad
MD5 e982d6233fe5e315256d545527fb4efe
SHA1 18dad0a98fb7911581313d4a320190323677c42d
SHA512 abdbfcd68387dee776dad7ceff64c2994e2d7335a42d72a1e2edd0adfe07e0cd9dfac6674286f67c1987d15b1429ea19f64f52470f1b9d88f499bffeea9b6b46
SSDEEP 3072:6tYC/rxufRNSVHRJYVmwdpwhAnx8TiIa5h8ELN92msNTt3bwWRS:6Z/rxuDSVgVmwzwan0w6wwsWRS
TLSH
T1F5E3AE01799540F1DDAEC1BC20972B36BB3F8A958E096783D72CDD590E39941EE2B387
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66365

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

recvfrom sendto recv send ioctlsocket setsockopt connect getsockopt accept listen bind shutdown closesocket socket WSACleanup WSAStartup select __WSAFDIsSet getservbyport gethostbyaddr getservbyname ntohl htonl gethostbyname gethostname WSAEnumNetworkEvents WSAEventSelect WSARecvFrom WSASendTo WSARecv WSASend WSAGetLastError WSASetLastError getpeername getsockname ntohs inet_ntoa htons inet_addr

winmm

timeKillEvent timeEndPeriod timeSetEvent timeBeginPeriod

rpcrt4

UuidCreate

advapi32

GetSecurityInfo

mswsock

AcceptEx

kernel32

SetEnvironmentVariableA CompareStringW CompareStringA GetLocaleInfoW SetConsoleCtrlHandler SetStdHandle GetOEMCP GetACP GetVersionExA GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA IsValidCodePage IsValidLocale GetCPInfo GetStringTypeW GetStringTypeA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetStdHandle SetHandleCount UnhandledExceptionFilter LCMapStringW LCMapStringA GetCurrentThread HeapSize TerminateProcess IsBadWritePtr HeapReAlloc VirtualAlloc FatalAppExitA ExitProcess VirtualFree HeapCreate HeapDestroy GetVersion GetCommandLineA ExitThread CreateThread FreeEnvironmentStringsW CopyFileA GetFileAttributesA RtlUnwind CloseHandle PostQueuedCompletionStatus GetSystemInfo CreateIoCompletionPort GetLastError GetQueuedCompletionStatus WriteFile ReadFile InterlockedIncrement InterlockedDecrement InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange CreateEventA ResetEvent WaitForSingleObject SetEvent LoadLibraryExA FreeLibrary GetProcAddress SetLastError WaitForMultipleObjects CreateDirectoryA RemoveDirectoryA FindNextFileA FindFirstFileA FindClose SetFilePointer CreateFileA DeleteFileA GetFileInformationByHandle GetFileType FlushFileBuffers GetModuleFileNameA RaiseException MoveFileA LoadLibraryA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection TryEnterCriticalSection LeaveCriticalSection GetSystemDirectoryA CreateSemaphoreA ReleaseSemaphore SuspendThread ResumeThread SetThreadPriority SetPriorityClass GetCurrentProcess GetCurrentThreadId TlsAlloc TlsSetValue TlsGetValue TlsFree GetSystemTimeAsFileTime GetTickCount FileTimeToSystemTime GetTimeZoneInformation FileTimeToLocalFileTime CreateWaitableTimerA SetWaitableTimer OutputDebugStringA Sleep WideCharToMultiByte MultiByteToWideChar GetModuleHandleA GlobalMemoryStatusEx HeapAlloc HeapFree

??0HPR_Guard@@QAE@PAVHPR_Mutex@@@Z ??0HPR_Mutex@@QAE@I@Z ??0HPR_Mutex@@QAE@XZ ??0HPR_Sema@@QAE@II@Z ??1HPR_Guard@@QAE@XZ ??1HPR_Mutex@@QAE@XZ ??1HPR_Sema@@QAE@XZ ??4HPR_Guard@@QAEAAV0@ABV0@@Z ??4HPR_Mutex@@QAEAAV0@ABV0@@Z ??4HPR_Sema@@QAEAAV0@ABV0@@Z ?HPR_A2UTF8@@YG?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?HPR_UTF82A@@YG?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?Lock@HPR_Mutex@@QAEHXZ ?Post@HPR_Sema@@QAEHXZ ?Release@HPR_Guard@@QAEXXZ ?TimedWait@HPR_Sema@@QAEHI@Z ?TryLock@HPR_Mutex@@QAEHXZ ?Unlock@HPR_Mutex@@QAEHXZ ?Wait@HPR_Sema@@QAEHXZ HPR_Accept HPR_AccessFile HPR_AlignedFree HPR_AlignedMalloc HPR_AnsiTimeFromTime HPR_AsyncIO_Accept HPR_AsyncIO_BindCallBackToIOHandle HPR_AsyncIO_BindCallBackToIOHandleEx HPR_AsyncIO_BindIOHandleToQueue HPR_AsyncIO_BindIOHandleToQueueEx HPR_AsyncIO_CreateQueue HPR_AsyncIO_CreateQueueEx HPR_AsyncIO_CreateQueueEx2 HPR_AsyncIO_CreateQueueEx_New HPR_AsyncIO_DestroyQueue HPR_AsyncIO_DestroyQueueEx HPR_AsyncIO_PostQueuedCompleteStatus HPR_AsyncIO_PostQueuedCompleteStatusEx HPR_AsyncIO_ReadFile HPR_AsyncIO_ReadFileEx HPR_AsyncIO_Recv HPR_AsyncIO_RecvEx HPR_AsyncIO_RecvFrom HPR_AsyncIO_RecvFromEx HPR_AsyncIO_Send HPR_AsyncIO_SendEx HPR_AsyncIO_SendTo HPR_AsyncIO_SendToEx HPR_AsyncIO_UnBindIOHandle HPR_AsyncIO_UnBindIOHandleEx HPR_AsyncIO_WriteFile HPR_AsyncIO_WriteFileEx HPR_Atoi32 HPR_Atoi64 HPR_AtomicAdd HPR_AtomicCas HPR_AtomicCasPtr HPR_AtomicDec HPR_AtomicInc HPR_AtomicSet HPR_Bind HPR_BroadCast HPR_CTime HPR_CloseDir HPR_CloseEvent HPR_CloseFile HPR_CloseSocket HPR_CondBroadCast HPR_CondCreate HPR_CondDestroy HPR_CondSignal HPR_CondTimedWait HPR_CondWait HPR_ConnectWithTimeOut HPR_CopyFile HPR_CreateEvent HPR_CreateSocket HPR_CycleBufferDestroy HPR_CycleBufferInit HPR_CycleBufferRead HPR_CycleBufferValue HPR_CycleBufferWrite HPR_Debug HPR_DeleteFile HPR_EnumNetworkEvents HPR_EventSelect HPR_ExpTimeFromTime HPR_ExpTimeFromTimeGMT HPR_ExpTimeFromTimeLocal HPR_FdIsSet HPR_FileFlush HPR_FileIsEOF HPR_FileSeek HPR_FileStat HPR_FindFileInDir HPR_Fini HPR_FiniEx HPR_FreeAdapterInfo HPR_FreeAddressInfo HPR_GetAcceptExSockaddrs HPR_GetAdapterInfo HPR_GetAddr4Int HPR_GetAddr6Int HPR_GetAddrBySockFd HPR_GetAddrInfo HPR_GetAddrPort HPR_GetAddrString HPR_GetAddrType HPR_GetAddressByName HPR_GetAddressInfo HPR_GetBuffSize HPR_GetCPUNumber HPR_GetCPUPerformance HPR_GetCurExePath HPR_GetDsoSym HPR_GetHPRVersion HPR_GetHostName HPR_GetLastError HPR_GetMacAddr HPR_GetMemoryStatus HPR_GetNetWorkFlowData HPR_GetSystemLastError HPR_GetTOS HPR_GetTTL HPR_GetTTL_V6 HPR_GetTimeTick HPR_GetUUID HPR_Htonl HPR_Htons HPR_InetNtop HPR_InetPton HPR_Init HPR_InitEx HPR_Ioctl HPR_Itoa HPR_JoinMultiCastGroup HPR_KillTimer HPR_LeaveMultiCastGroup HPR_LingerOff HPR_LingerOn HPR_Listen HPR_LoadDSo HPR_Ltoa HPR_MakeAddr HPR_MakeAddr4ByInt HPR_MakeAddr6ByInt HPR_MakeAddrByString HPR_MakeDir HPR_MsgQCreateEx HPR_MsgQDestroyEx HPR_MsgQReceiveEx HPR_MsgQSendEx HPR_MutexCreate HPR_MutexDestroy HPR_MutexLock HPR_MutexTryLock HPR_MutexUnlock HPR_Ntohl HPR_Ntohs HPR_OpenDir HPR_OpenFile HPR_OutputDebug HPR_OutputDebugString HPR_Poll HPR_PollEx HPR_Rand HPR_ReadFile HPR_Recv HPR_RecvFrom HPR_RecvWithTimeOut HPR_Recvn HPR_RemoveDir HPR_RenameFile HPR_ResetEvent HPR_Select HPR_SelectEx HPR_SemCreate HPR_SemDestroy HPR_SemPost HPR_SemTimedWait HPR_SemWait HPR_Send HPR_SendTo HPR_Sendn HPR_SetAddrPort HPR_SetBuffSize HPR_SetEvent HPR_SetLastError HPR_SetMultiCastTTL HPR_SetMultiCastTTL_V6 HPR_SetNoDelay HPR_SetNonBlock HPR_SetReuseAddr HPR_SetSystemLastError HPR_SetTOS HPR_SetTTL HPR_SetTTL_V6 HPR_SetTimeOut HPR_SetTimer HPR_ShutDown HPR_SimpleHashCreate HPR_SimpleHashDestroy HPR_SimpleHashEnter HPR_SimpleHashFind HPR_SimpleHashRemove HPR_SimpleIntHashCreate HPR_SimpleIntHashDestroy HPR_SimpleIntHashEnter HPR_SimpleIntHashFind HPR_SimpleIntHashRemove HPR_Sleep HPR_StrFmtTime HPR_StrToi32 HPR_StrToi64 HPR_Strcasecmp HPR_Strcasestr HPR_Strchr HPR_Strcmp HPR_Strcpy HPR_Strdup HPR_StringFromUUID HPR_Strncasecmp HPR_Strnchr HPR_Strncmp HPR_Strncpy HPR_Strndup HPR_Strnstr HPR_Strstr HPR_ThreadDetached_Create HPR_ThreadPoolFlex_Create HPR_ThreadPoolFlex_Destroy HPR_ThreadPoolFlex_Work HPR_ThreadPool_Create HPR_ThreadPool_CreateEx HPR_ThreadPool_CreateFlex HPR_ThreadPool_Destroy HPR_ThreadPool_Work HPR_ThreadPool_WorkEx HPR_ThreadTls_Create HPR_ThreadTls_Destroy HPR_ThreadTls_GetValue HPR_ThreadTls_SetValue HPR_Thread_Create HPR_Thread_Exit HPR_Thread_GetSelfId HPR_Thread_Resume HPR_Thread_SetPriority HPR_Thread_SetSchedPolicy HPR_Thread_Suspend HPR_Thread_Wait HPR_TimeFromAnsiTime HPR_TimeFromExpTime HPR_TimeFromExpTimeGMT HPR_TimeNow HPR_USleep HPR_UnloadDSo HPR_WaitForMultipleObjects HPR_WaitForSingleObject HPR_WriteFile HPR_ZeroMemory