left4dead2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

left4dead2.exe
Size

356KB
MD5

6d32f4f522c6ae3d396bd6ad3c741568
SHA1

fdd55982b2e1f4411e40a90201c4ecd2aa2e2ef3
SHA256

7223483544111e6a8b3865dd83d73f5543760c9050ec6b25c332bd5d9731e6b9
SHA512

adc722e2f5f5683f01e3be2ff04bfaf6ff27ac3e6d6d0180c8e56704779ef97b5e426e100fbb4d6d30bcb759b1d2ca5854e0aa6d703250cbb418530db9d76fef
SSDEEP

6144:N7nhK8GU/aDLReXJeev7Mh6E/avArvaI4zFKjKfr0jIf:N7nhdX7ghRC+YzF8Ks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
left4dead2.exe

Files

left4dead2.exe
.exe windows:5 windows x86 arch:x86

Password: 1337

60fdf83a03bbfa0121d6a68d69eb4ef0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\buildslave\l4d2_rel_win32\build\src\launcher_main\Release\default.pdb

Imports

user32

MessageBoxA

kernel32

TlsFree
FlushFileBuffers
GetProcAddress
LocalFree
FormatMessageA
GetLastError
LoadLibraryExA
GetModuleFileNameA
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetEnvironmentVariableW
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
SetEnvironmentVariableA
Sleep
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
CompareStringW
HeapSize
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1337

60fdf83a03bbfa0121d6a68d69eb4ef0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

kernel32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 304KB - Virtual size: 304KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 304KB - Virtual size: 304KB

.reloc
Size: 4KB - Virtual size: 3KB