D:\operagx\CS2-Internal-main\CS2-Internal-main\x64\Release\Source Engine.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Source Engine.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
Source Engine.dll
Resource
win7-20231129-en
Behavioral task
behavioral3
Sample
Source Engine.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Source Engine.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Source Engine.dll
Resource
win11-20240419-en
General
-
Target
Source Engine.dll
-
Size
825KB
-
MD5
33b66f9800b0a65cad9f20689567f319
-
SHA1
6a784f61c9a91b8b39321ad8926b5c398ddcebf9
-
SHA256
3eac13ee7bff4694890548c72f9fb5a50e9e3c7e1f04edf1657e89f0b1c8d94d
-
SHA512
a9b4f8f0d862761c416668b6a266272dc26eda1615680fe48ad2257de98a801259d997822ea8f242e1613fb1bd1d0ad3e6e5ac3f700b3ae95ca7823802fb0af9
-
SSDEEP
12288:64tc//dHbLhTLLScNBO0ms1NV3EOYsndxd4Mnkoobv6P4SJhSRdumgXbi+:68kBJv4sbFEOXPKMnk+P4SES+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Source Engine.dll
Files
-
Source Engine.dll.dll windows:6 windows x64 arch:x64
64bc5769dcaf339722afb7e9090d6d20
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
AllocConsole
SetEndOfFile
WriteConsoleW
HeapReAlloc
HeapSize
CreateFileW
SetStdHandle
GetStringTypeW
GetProcessHeap
GlobalLock
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GlobalFree
GlobalAlloc
VirtualQuery
GetCurrentThread
GetModuleHandleA
GetCurrentThreadId
VirtualProtect
ResumeThread
FlushInstructionCache
GetCurrentProcess
SetThreadContext
GetThreadContext
VirtualFree
GetLastError
SuspendThread
VirtualAlloc
SetLastError
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
CloseHandle
user32
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
IsChild
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
ReleaseCapture
GetKeyState
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
CallWindowProcA
SetWindowLongPtrA
mouse_event
GetAsyncKeyState
SendInput
SetCursorPos
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
d3dcompiler_47
D3DCompile
Sections
.text Size: 420KB - Virtual size: 419KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ