C:\Gitlab-Runner\builds\HQ33PpjF\1\motion-twin\deadcells\client\.tools\hashlink\Release\hl.pdb
Static task
static1
1 signatures
General
-
Target
deadcells.exe
-
Size
17.5MB
-
MD5
d6af5973c1f836c7066bb6467331662e
-
SHA1
451c284a07414318341d6256a125ce288d9adf9a
-
SHA256
37d11a666df2d0789a61908a38ba4b0a1e701bebe897bbcba18ea375658bba09
-
SHA512
cb6501a3b5129c25c69ac02c75f24bb2c204c3f7b73936d69201d350415d80aedce258947c5ab20c06ca77c88614e45f219f1619566d90cffc59f563e9ea7e01
-
SSDEEP
393216:YrGzRGM56Qm1c79WxKAG1ML92EKAG1ML92nKAG1ML92:YrGL6Qm1c79WxKAG1ML92EKAG1ML92ns
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deadcells.exe
Files
-
deadcells.exe.exe windows:6 windows x86 arch:x86
6f3a01b9e56529b5162f87102fb6271c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
libhl
hl_dyn_castd
hl_alloc_dynbool
hl_dyn_setf
hl_dyn_getp
hl_dyn_setd
hlt_void
hl_same_type
hl_make_dyn
hl_alloc_obj
hl_alloc_strbytes
hl_alloc_closure_ptr
hl_alloc_executable_memory
hl_get_obj_rt
hl_alloc_enum
hl_alloc_dynamic
hl_to_virtual
hl_dyn_casti
hl_alloc_virtual
hl_assert
hl_dyn_call
hl_socket_recv
hl_socket_listen
hl_get_thread
hl_socket_bind
hl_dyn_seti
hlt_bytes
hl_throw
hl_gc_threads_info
hl_dyn_setp
hl_socket_new
hl_thread_start
hl_dyn_castp
hl_sys_sleep
hl_socket_send
hl_rethrow
hl_dyn_geti
hl_setup_callbacks
hl_dyn_getd
hl_socket_init
hl_init_virtual
hl_sys_getpid
hl_free_executable_memory
hl_gc_set_dump_types
hl_socket_accept
hl_setup_exception
hl_remove_root
hl_fatal_fmt
hl_fatal_error
hl_obj_field_fetch
hl_flush_proto
hl_init_enum
hl_sys_init
hl_exception_stack
hl_to_string
hl_register_thread
hl_global_init
hl_add_root
hl_pad_struct
hl_setup_reload_check
hl_dyn_call_safe
hl_global_free
hl_hash_utf8
hl_is_dynamic
hl_dyn_castf
hl_dyn_getf
hl_alloc_dynobj
hl_dyn_call_obj
hl_dyn_compare
hlt_dyn
hl_type_size
hl_socket_close
hl_alloc_init
hl_from_utf8
hl_zalloc
hl_hash_gen
hl_free
hl_malloc
hl_utf8_length
user32
MessageBoxA
kernel32
EndUpdateResourceW
TerminateProcess
IsDebuggerPresent
SizeofResource
GetModuleFileNameW
LoadResource
FindResourceW
UpdateResourceW
CopyFileW
BeginUpdateResourceW
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
vcruntime140
strstr
__intrinsic_setjmp
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
memset
_except_handler4_common
memcpy
wcsrchr
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vswprintf
fread
_wfopen
fseek
__stdio_common_vfwprintf
fclose
ftell
__stdio_common_vsprintf
_set_fmode
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
terminate
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___wargv
__p___argc
_set_app_type
_exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
fmod
_CIfmod
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
api-ms-win-crt-filesystem-l1-1-0
_wstat32
api-ms-win-crt-convert-l1-1-0
wcstol
wcstombs
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Exports
Exports
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17.5MB - Virtual size: 17.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ