Static task
static1
Behavioral task
behavioral1
Sample
hl.cc.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
hl.cc.exe
Resource
win11-20241007-en
General
-
Target
hl.cc.exe
-
Size
17.2MB
-
MD5
c6b2d5071382fa1e7d9e330809308aa7
-
SHA1
6b48cd72f4dc960180425de6f7d98890b4c957b5
-
SHA256
39fcadb8a7d5058434d1c87e5be48d2735d12dea7a83de63c243c707f0390ac3
-
SHA512
48bcef5104fc74296d288c8ca9b2055803e0c18e0207e7673d56d203b63753bae5752f878a5212cfb463db65aac6a6c1bc70db6e0ac8055e92546bd4c9b4c259
-
SSDEEP
393216:lFd/+iwD0vNcE3GWMMdpwTsbMtb3dXPzBW+6zXIle:ln9U+2E3QkSjPzBh0Yl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hl.cc.exe
Files
-
hl.cc.exe.exe windows:6 windows x64 arch:x64
e3791a410630417ef1718e3207e3d120
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
OpenClipboard
gdi32
GetDeviceCaps
advapi32
CryptDestroyKey
ole32
StringFromGUID2
msvcp140
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
ntdll
NtQuerySystemInformation
dbghelp
SymCleanup
urlmon
URLDownloadToFileA
shlwapi
PathFileExistsA
d3d9
Direct3DCreate9
imm32
ImmReleaseContext
normaliz
IdnToAscii
wldap32
ord143
crypt32
CertAddCertificateContextToStore
ws2_32
WSACleanup
psapi
GetModuleInformation
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
api-ms-win-crt-convert-l1-1-0
strtoll
api-ms-win-crt-stdio-l1-1-0
fputs
api-ms-win-crt-heap-l1-1-0
realloc
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-filesystem-l1-1-0
_wremove
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-time-l1-1-0
_gmtime64
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-environment-l1-1-0
_dupenv_s
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-math-l1-1-0
fmodf
Sections
.text Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.,:N Size: - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.#6n Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r%H Size: 17.2MB - Virtual size: 17.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ