CreateInterface
Static task
static1
1 signatures
General
-
Target
hl.exe
-
Size
88KB
-
MD5
adcbfb4dfc2f4f07df0db5b373754532
-
SHA1
03b941572daf3f00afeaf4f4a08828254ca8eedf
-
SHA256
5f6d02aad249fa05255880ac4f4853b0308a206609013660f0b6c48cc9157293
-
SHA512
174d3becdca68596ff5b39aa7000909716ee32d5bafbfe4b6379a8bbdbb50958f65622859663859af5a9d1cff14a1605006100ece43b87a6fa27e3ba6f78f171
-
SSDEEP
1536:LUEtXr0hFBKexYTMUD9dRqTjG/0OxkkV1gx+7yBkO6ESmooN3+:L/tbwFRY0w0iZV1O+7yBZpSmooN3+
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hl.exe
Files
-
hl.exe.exe windows:4 windows x86 arch:x86
b3b0ad92c8bb9dcebe36d7de9fa58b16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSAStartup
WSACleanup
kernel32
GetModuleHandleA
GetLongPathNameA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetCommandLineA
WaitForSingleObject
FreeLibrary
CreateMutexA
GetCurrentDirectoryA
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetEndOfFile
LoadLibraryA
GetProcAddress
GetUserDefaultLCID
GetVersionExA
GetLastError
LeaveCriticalSection
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
MultiByteToWideChar
HeapAlloc
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetLocaleInfoW
FatalAppExitA
SetEnvironmentVariableW
WideCharToMultiByte
HeapDestroy
HeapCreate
GetFullPathNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
SetFilePointer
GetTimeZoneInformation
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
Sleep
user32
FindWindowA
PostMessageA
wsprintfA
MessageBoxA
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 33.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ