F:\ReHLDS+ReApi+ReGameDLL\ReHLDS\msvc\Release\hlds.pdb
Static task
static1
Behavioral task
behavioral1
Sample
hlds.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
hlds.exe
Resource
win10v2004-20231215-en
General
-
Target
hlds.exe
-
Size
279KB
-
MD5
7bf5f34dc6086d5d97e1f4d69595fee2
-
SHA1
fcb914d0f75fa5d67c170b38d261880935dc7403
-
SHA256
5437663896bac6cd9a7deb4768a82485417821aee597f9dc1348a4a9c2e4f1b3
-
SHA512
a9261df3e7d7dd7ea524d1f8534539919c5e619b375a34ea043bfd57661b21a4299c7cddaa000a26d3b1a4013cf46386db40c70009444a4c2a7a5f46ca6c7e04
-
SSDEEP
3072:4E3eJQPVDgzZV0/vU/Diqu53eb2EOaimU8VCehynmCHJDbum+sIvSpM:+cJIZV0AWqc3eKEEIot63/E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hlds.exe
Files
-
hlds.exe.exe windows:5 windows x86 arch:x86
ef26ca99025892c16ca02755d94e0cc3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSACleanup
WSAStartup
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
kernel32
HeapSize
GetConsoleCP
GetLastError
LoadLibraryW
GetProcAddress
SetLastError
GetModuleFileNameW
CreateFileW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
CloseHandle
FreeLibrary
IsDebuggerPresent
GetModuleFileNameA
GetModuleHandleA
GetCurrentDirectoryA
GetConsoleTitleA
GetTickCount
SetConsoleTitleA
Sleep
AllocConsole
GetStdHandle
SetConsoleCtrlHandler
FreeConsole
GetNumberOfConsoleInputEvents
ReadConsoleInputA
MultiByteToWideChar
SetEndOfFile
WriteFile
GetConsoleScreenBufferInfo
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
GetLargestConsoleWindowSize
SetConsoleWindowInfo
SetConsoleScreenBufferSize
MapViewOfFile
UnmapViewOfFile
ReadConsoleOutputCharacterA
WriteConsoleInputA
WaitForMultipleObjects
SetEvent
CreateEventA
LoadLibraryA
FlushFileBuffers
ReadConsoleW
GetConsoleMode
ReadFile
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
SetFilePointerEx
WriteConsoleW
DecodePointer
WideCharToMultiByte
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
VirtualQuery
RaiseException
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryW
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetTimeZoneInformation
GetFullPathNameW
SetStdHandle
GetFileAttributesExW
HeapReAlloc
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
user32
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
PostQuitMessage
ShowWindow
SetWindowPos
wsprintfA
MessageBoxA
FindWindowA
PostMessageA
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
Exports
Exports
CreateInterface
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ