hl2[.]exe | Triage™

General

Target
hl2.exe
Size 104KB
Sample260826-mt3r6ack6z
SHA256 4a06de84351ffbccc9bb1575c21142074c240f54902557e13e40ba037976d25f
MD5 7c271bbd974c760f516f1c9f9b61e0f2
SHA1 a1c9b9f1a9cc568ed707d880f78d16ce6d60ab4f
SHA512 f640b9f1eea0e5374522da490bd318bd17528f12d85ef1bd1566594c0d645de11cd1449fceadaa6751540dc95b2b3599b38a32f9bfa5700d75d81989095935e8
SSDEEP 1536:hXRI3bwH4YFDLkqwaif9vk39HNJ24F8ikWjlnX7X5XYZXP/b1:zIraLLkqFlN8biLjlnLJI//b
TLSH
T118A33B027654C472C004853FEF9A9AFD1B3DEE0ADC6CA54397947E4DFE325CA9A2610B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hl2.exe

File Explorer

hl2.exe

.exe 104KB

hl2.exe

IMPHASH cb0c89c8809572d2eb2a359aa1fc9ebf
SHA256 4a06de84351ffbccc9bb1575c21142074c240f54902557e13e40ba037976d25f
MD5 7c271bbd974c760f516f1c9f9b61e0f2
SHA1 a1c9b9f1a9cc568ed707d880f78d16ce6d60ab4f
SHA512 f640b9f1eea0e5374522da490bd318bd17528f12d85ef1bd1566594c0d645de11cd1449fceadaa6751540dc95b2b3599b38a32f9bfa5700d75d81989095935e8
SSDEEP 1536:hXRI3bwH4YFDLkqwaif9vk39HNJ24F8ikWjlnX7X5XYZXP/b1:zIraLLkqFlN8biLjlnLJI//b
TLSH
T118A33B027654C472C004853FEF9A9AFD1B3DEE0ADC6CA54397947E4DFE325CA9A2610B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5436

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

u:\projects\staging\src\launcher_main\Release\launcher_main.pdb

kernel32

GetProcAddress LocalFree FormatMessageA GetLastError LoadLibraryA GetModuleFileNameA CloseHandle GetTimeZoneInformation MultiByteToWideChar GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA SetEnvironmentVariableA WideCharToMultiByte SetEnvironmentVariableW ExitProcess TerminateProcess GetCurrentProcess HeapFree HeapAlloc DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection WriteFile GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc SetLastError GetCurrentThreadId GetCurrentThread TlsFree TlsSetValue TlsGetValue HeapDestroy HeapCreate VirtualFree HeapReAlloc VirtualAlloc IsBadWritePtr InitializeCriticalSection RtlUnwind InterlockedExchange VirtualQuery SetFilePointer CompareStringA GetCPInfo CompareStringW GetACP GetOEMCP HeapSize SetStdHandle QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA VirtualProtect GetSystemInfo LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage FlushFileBuffers GetLocaleInfoW

user32

MessageBoxA

Resubmissions

Sharing