C:\Projects\Hotline\svn\Software\Code\HotlineGL.exe.pdb
Static task
static1
1 signatures
General
-
Target
HotlineGL.exe
-
Size
7.1MB
-
MD5
f6d0a31750e5cb17bc050920c3c29fd6
-
SHA1
a3f7ac447f145764078bbb9d4c99efdbb33f5e74
-
SHA256
ef171897a23a210fbe1099d7b0ad215ed18fc023ff3978ddb682afe5656f91c8
-
SHA512
264f2eb051089a38256cb80c3ab90dd1f29aff25ddd453f97ad341acbb3efc14de64e56032e905898abda1f4e42cb935ef975514f8cc94b27555aeb6b7dd8915
-
SSDEEP
98304:NxaNOM0XbD0TXKZ2kF+Pm3DOBFHJYyVoNXL3a1k5Q4qxeb9AkpxPW9Ok8qhzts8+:0OM0cT6ZMAYpPVoz9GUgM6
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HotlineGL.exe
Files
-
HotlineGL.exe.exe windows:5 windows x86 arch:x86
8a7b8dd31a88bbffd31179218f1e2c57
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
openal32
alBufferData
alSourceQueueBuffers
alSourceUnqueueBuffers
alGenBuffers
alSourceStop
alDeleteSources
alGetSourcei
alSourcePlay
alSourcef
alSourcei
alGenSources
alDeleteBuffers
alGetError
alcMakeContextCurrent
alcCreateContext
alcOpenDevice
alcCloseDevice
alcDestroyContext
libvorbisfile
ov_clear
ov_read
ov_info
ov_open_callbacks
dbghelp
SymCleanup
SymLoadModule
SymInitialize
SymSetOptions
SymGetOptions
SymGetModuleBase
SymGetSymFromAddr
StackWalk
SymFunctionTableAccess
SymGetLineFromAddr
kernel32
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedExchange
DecodePointer
EncodePointer
GetCommandLineW
WideCharToMultiByte
LoadLibraryExA
GetSystemInfo
CreateFileW
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetFileSizeEx
IsDebuggerPresent
DebugBreak
CreateSemaphoreA
QueryPerformanceFrequency
QueryPerformanceCounter
ResetEvent
SetEvent
CreateEventA
ReleaseSemaphore
WaitForSingleObject
GetExitCodeThread
InterlockedCompareExchange
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetProcessHeap
OutputDebugStringA
IsBadWritePtr
ReadProcessMemory
GetCurrentProcess
IsBadReadPtr
GetCurrentProcessId
GetVersionExA
GetProcAddress
LoadLibraryA
SetLastError
CloseHandle
IsBadCodePtr
OpenProcess
GetModuleHandleA
GetLastError
lstrcpynA
lstrlenA
GetModuleFileNameA
CreateFileA
FormatMessageA
GetCurrentThread
GetTickCount
CreateDirectoryA
CreateThread
FreeLibrary
LocalFree
Sleep
GetCurrentThreadId
SetThreadPriority
GetSystemTimeAsFileTime
HeapFree
RaiseException
user32
SetLastErrorEx
ClipCursor
GetFocus
ShowCursor
GetSystemMetrics
wsprintfA
PeekMessageA
ReleaseDC
GetClientRect
GetDC
PostMessageA
SendMessageA
RegisterWindowMessageA
SetParent
SystemParametersInfoA
SetWindowPos
SetWindowLongA
ChangeDisplaySettingsA
DefWindowProcA
CreateWindowExA
RegisterClassA
GetWindowLongA
GetWindowInfo
GetCursorPos
DestroyWindow
PostQuitMessage
SetFocus
SwitchToThisWindow
ShowWindow
UpdateWindow
RegisterDeviceNotificationA
LoadCursorA
LoadIconA
EnumDisplaySettingsA
DispatchMessageA
TranslateMessage
GetWindowRect
shell32
CommandLineToArgvW
SHGetFolderPathA
msvcp100
??1_Container_base12@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?_Xlength_error@std@@YAXPBD@Z
msvcr100
??3@YAXPAX@Z
sscanf
__CxxFrameHandler3
??2@YAPAXI@Z
strrchr
memcpy
memset
strncpy
free
fflush
__iob_func
printf
fwrite
fclose
fprintf
fopen
memmove
_purecall
fread
??_V@YAXPAX@Z
fseek
ferror
sscanf_s
atoi
atof
_vsnprintf_s
isspace
tolower
isalpha
isalnum
strncmp
strchr
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
sprintf
_CIsin
_CIsqrt
_CIfmod
_CIatan2
_CIcos
strstr
_stat64i32
_errno
wcstombs
_fseeki64
remove
realloc
malloc
ceil
floor
rand
isdigit
_stricmp
qsort
toupper
_CItan
memchr
sprintf_s
wcsstr
swscanf_s
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
_CIacos
_CIatan
_CIasin
_CItanh
_CIcosh
_CIsinh
modf
_CIpow
_CIlog10
_CIlog
_CIexp
frexp
ldexp
srand
_HUGE
strtod
strpbrk
_snprintf
abort
longjmp
_setjmp3
strcoll
localeconv
fgets
isxdigit
isupper
ispunct
isgraph
iscntrl
islower
_difftime64
_gmtime64
_localtime64
_mktime64
system
rename
tmpnam
getenv
clock
strftime
setlocale
_pclose
_popen
tmpfile
fscanf
ungetc
clearerr
_ftelli64
ftell
strerror
feof
getc
freopen
strspn
_time64
setvbuf
dinput8
DirectInput8Create
winmm
timeGetTime
timeBeginPeriod
timeEndPeriod
opengl32
glCopyTexSubImage2D
glReadBuffer
glDrawBuffer
wglDeleteContext
glGetFloatv
glPixelStorei
glFrontFace
glTexImage2D
glBindTexture
glTexSubImage2D
wglCreateContext
glShadeModel
glAlphaFunc
glDepthFunc
glCullFace
glPolygonMode
glStencilOp
glStencilFunc
glStencilMask
glGetTexImage
glEnableClientState
glDisableClientState
glClearColor
glClearDepth
glClear
glTexParameteri
glTexParameterfv
glTexParameterf
glDeleteTextures
glGenTextures
glReadPixels
glClearStencil
glDrawArrays
glGetError
glViewport
glScissor
wglMakeCurrent
glGetString
glDrawElements
glBlendFunc
wglGetProcAddress
glPointSize
glLineWidth
glColorMask
glPolygonOffset
glDepthMask
glEnable
glDisable
glTexEnvi
glHint
cg
cgDestroyProgram
cgCreateContext
cgSetParameterSettingMode
cgGetParameterResource
cgGetNamedParameter
cgGetParameterResourceIndex
cgGetErrorString
cgGetLastListing
cgCreateProgramFromEffect
cgCreateProgram
cgDestroyContext
cgUpdateProgramParameters
cgGetError
cggl
cgGLSetParameterPointer
cgGLEnableClientState
cgGLSetDebugMode
cgGLBindProgram
cgGLEnableProfile
cgGLSetParameter4fv
cgGLDisableProfile
cgGLUnbindProgram
cgGLDisableTextureParameter
cgGLLoadProgram
cgGLIsProfileSupported
cgGLSetParameter2fv
cgGLSetParameterArray3f
cgGLSetParameter3fv
cgGLSetParameterArray4f
cgGLSetMatrixParameterArrayfc
cgGLSetMatrixParameterfc
cgGLGetTextureEnum
cgGLSetParameter1f
cgGLSetParameterArray1f
cgGLDisableClientState
cgGLGetLatestProfile
cgGLSetTextureParameter
cgGLEnableTextureParameter
cgGLSetParameterArray2f
xinput1_3
ord3
ord2
gdi32
DescribePixelFormat
SwapBuffers
SetPixelFormat
ChoosePixelFormat
ole32
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 757KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ