AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
hl2.exe
Resource
win10v2004-20230621-en
Target
hl2.exe
Size
188KB
MD5
342257685d2b727ed5e7e2a42b5efdef
SHA1
cc478d1f78c8d08e2a57fb157383717ed6ac7272
SHA256
9ad2117cd847f2702595b230e61f95abdcbe22acf6858af10f0fc79faf433a0e
SHA512
db7e8411af110380fec8e011c0daf16ab564a37f6a9563317cb0df6c943e4302062295304c017bb936739b30a5c98ed3f7b5115fae35b3e4a50022331e6b2f60
SSDEEP
3072:4NsE6yJALaG0fWqQ5CaUNGu+RXEB8AXooiURGQUSgzqeWUixVz8Kj8TDGsbe99dg:UH6AHYqLUsUUIuKixN/8TDGsbaA
Checks for missing Authenticode signature.
resource |
---|
hl2.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
LocalFree
GetLastError
FormatMessageA
LoadLibraryExA
GetModuleFileNameA
WriteConsoleW
DecodePointer
FlushFileBuffers
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetACP
HeapAlloc
HeapFree
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileType
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringW
LCMapStringW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
MessageBoxA
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ