AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
hl2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
hl2.exe
Resource
win10v2004-20230703-en
Target
hl2.exe
Size
188KB
MD5
aa276f0dddb5fef051c8676c1736db07
SHA1
21a742b85263ec92cebe3778b2d861c42ce9c2a1
SHA256
823f0e25b0b224ce5e948c49771782be3b624a2260334a71292d530477813a57
SHA512
9eb8329bb55277c7a86e7d91b8faaae6870689f4a1a9fcc05d8d67d848f70083398646ea5707aac6e2a7dafadc8469906074b111b3bbde4aa85ef5aab5bc159c
SSDEEP
3072:/NsE6yJALaG0fWqQ5CaUNGu+RXEB8AJooiURGQUSgzqeWUixVz8Kj8TDGsbe99dg:lH6AHYqLUsyUIuKixN/8TDGsbaA
Checks for missing Authenticode signature.
resource |
---|
hl2.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
LocalFree
GetLastError
FormatMessageA
LoadLibraryExA
GetModuleFileNameA
WriteConsoleW
DecodePointer
FlushFileBuffers
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetACP
HeapAlloc
HeapFree
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileType
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringW
LCMapStringW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
MessageBoxA
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ