C:\Users\void\Documents\xyz\cheats\l4d2 - UC\compiled\l4d2-x86.pdb
Static task
static1
1 signatures
General
-
Target
l4dx86.dll
-
Size
306KB
-
MD5
a5f74689abc42f57c9b576c55b615c26
-
SHA1
eb38ee15bdcec445666a111eb866bdaff19ab996
-
SHA256
fc5625237f287f59a2d9d5cd4b9202e861f1cb46f9a76bf2d14272baafa0397d
-
SHA512
8577e3f6e65fd8e5fd6da776451a0d061d39b148601f07f2503e825dd8fcc012c353a258e1653c4fa2bd01c8b66f79e79917e2eacf308380fd3dbdca1af7a5eb
-
SSDEEP
6144:xlRDn69YcsxVDYRwiULpbWj2KZrKo5teJV309VV9qT:DVnw0Lgj2CKowV30bqT
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource l4dx86.dll
Files
-
l4dx86.dll.dll windows:6 windows x86 arch:x86
3d0952c558c9893c9363447d48d28dd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetCurrentProcessId
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
GetModuleHandleW
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
DisableThreadLibraryCalls
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
K32GetModuleInformation
WritePrivateProfileStringA
CreateDirectoryA
GetPrivateProfileStringA
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateThread
GetModuleHandleA
Sleep
user32
GetAsyncKeyState
FindWindowA
DestroyWindow
DefWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassExA
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
IsChild
GetForegroundWindow
SetCapture
SetCursor
EmptyClipboard
GetClipboardData
ReleaseCapture
SetCursorPos
OpenClipboard
CloseClipboard
SetClipboardData
GetWindowThreadProcessId
GetKeyState
GetCursorPos
EnumWindows
MessageBoxA
CallWindowProcA
SetWindowLongA
GetClientRect
shell32
SHGetFolderPathA
msvcp140
_Query_perf_counter
?_Xlength_error@std@@YAXPBD@Z
_Query_perf_frequency
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
xinput1_3
ord4
ord2
vcruntime140
__current_exception_context
_CxxThrowException
memset
_except_handler4_common
__current_exception
strstr
__std_exception_copy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
__std_type_info_destroy_list
memchr
memcpy
memmove
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
ftell
__stdio_common_vsscanf
fread
_wfopen
fwrite
fclose
fseek
fflush
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
_callnewh
api-ms-win-crt-utility-l1-1-0
srand
rand
qsort
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
_initterm
_initterm_e
_seh_filter_dll
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-math-l1-1-0
_libm_sse2_sqrt_precise
floor
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
_libm_sse2_acos_precise
_CIatan2
ceil
roundf
_fdclass
Sections
.text Size: 254KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ