CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
hlds.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
hlds.exe
Resource
win10v2004-20231023-en
General
-
Target
hlds.exe
-
Size
279KB
-
MD5
acb4e8d78aa7700b80ca9ffe7941deeb
-
SHA1
beade6a5974962bfd28854b5b61d2bf59931bfdc
-
SHA256
5a2b5fd39474fa39d8bbe09c2d6d18a45d0d25c50bda3a863412b68a16b0808d
-
SHA512
4a6623b9ddf8d7b199076e4ddb5fdc802cab0f767a352ae9825b90356618f39c6f93d45b3f360e0ede4df1c238a9fb2bac24ab3a6cedcb6e1fdfe81f2ba33ffd
-
SSDEEP
3072:6qnN3NPUwA/cvVGFTKuxxFb5HbRuzuB2KGZy0um+sIvSK:bN3NcwA/D5Kwx5jQ/Ix3/t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hlds.exe
Files
-
hlds.exe.exe windows:5 windows x86
7d4ab0d2762e62471e04427f37310cd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACleanup
WSAStartup
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
kernel32
HeapSize
GetConsoleCP
GetLastError
LoadLibraryW
GetProcAddress
SetLastError
GetModuleFileNameW
CreateFileW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
CloseHandle
FreeLibrary
IsDebuggerPresent
GetModuleFileNameA
GetModuleHandleA
GetCurrentDirectoryA
GetConsoleTitleA
GetTickCount
SetConsoleTitleA
Sleep
AllocConsole
GetStdHandle
SetConsoleCtrlHandler
FreeConsole
GetNumberOfConsoleInputEvents
ReadConsoleInputA
MultiByteToWideChar
SetEndOfFile
WriteFile
GetConsoleScreenBufferInfo
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
GetLargestConsoleWindowSize
SetConsoleWindowInfo
SetConsoleScreenBufferSize
MapViewOfFile
UnmapViewOfFile
ReadConsoleOutputCharacterA
WriteConsoleInputA
WaitForMultipleObjects
SetEvent
CreateEventA
LoadLibraryA
FlushFileBuffers
ReadConsoleW
GetConsoleMode
ReadFile
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
SetFilePointerEx
WriteConsoleW
DecodePointer
WideCharToMultiByte
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
EncodePointer
VirtualQuery
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryW
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetTimeZoneInformation
GetFullPathNameW
SetStdHandle
GetFileAttributesExW
HeapReAlloc
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
user32
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
PostQuitMessage
ShowWindow
SetWindowPos
wsprintfA
MessageBoxA
PostMessageA
FindWindowA
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ