??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
766553681865b2ce6025949b6e73606fb0212c3f5f6b510f8e614496f54e80cb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
766553681865b2ce6025949b6e73606fb0212c3f5f6b510f8e614496f54e80cb.exe
Resource
win10v2004-20220812-en
General
-
Target
766553681865b2ce6025949b6e73606fb0212c3f5f6b510f8e614496f54e80cb
-
Size
299KB
-
MD5
419432bc750206172761b688da206d60
-
SHA1
734f3c86444a9e032c4f171ebaea87ceb37a7624
-
SHA256
766553681865b2ce6025949b6e73606fb0212c3f5f6b510f8e614496f54e80cb
-
SHA512
c257251ad6d006a86da080e0f9f3cd5fff96aba44f2315148ee6ddfc189e91c03d8ebd90e809d0937890f6770c6b2724fece7ad3fb57347c17d87196cd1f5c33
-
SSDEEP
6144:z4OYjkZnPt89VcxCWTBD7wkOS5kh5jcNl+AsbXq4:z4OYjkZn1HxCWTmzjcNlBD4
Malware Config
Signatures
Files
-
766553681865b2ce6025949b6e73606fb0212c3f5f6b510f8e614496f54e80cb.exe windows x86
f3ffca0bc3373e53aa8f5ddb9225cc64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
bdlogicutils
?BDLogicUtilsLibrary_Unit@BDLogicUtils@@YAHXZ
?BDLogicUtilsLibrary_Init@BDLogicUtils@@YAHXZ
?GetBDCrashCatcher@BDLogicUtils@@YAPAVIBDCrashCatcher@1@XZ
?GetBDMReportMgr@BDLogicUtils@@YAPAVIBDMReportMgr@1@XZ
shlwapi
PathAddBackslashW
PathAppendW
wnsprintfW
PathFileExistsW
kernel32
GetSystemDirectoryW
TerminateProcess
HeapAlloc
GetProcessHeap
GetWindowsDirectoryW
UnmapViewOfFile
GetFileSizeEx
WideCharToMultiByte
CreateFileMappingW
Sleep
GetFileSize
MapViewOfFile
LocalFree
LocalAlloc
ReleaseMutex
InitializeCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrcpynW
GetVersionExW
ExpandEnvironmentStringsW
GetCurrentProcessId
DeleteFileW
GetCurrentProcess
MoveFileExW
HeapFree
CreateFileW
ReadFile
GetTickCount
GetCurrentThreadId
GetCommandLineW
ExitProcess
OpenProcess
CreateThread
GetModuleFileNameW
WaitForSingleObject
OpenMutexW
CloseHandle
CreateMutexW
GetLastError
FreeLibrary
GetProcAddress
GetModuleHandleW
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
MoveFileW
GetBinaryTypeW
IsBadReadPtr
GetSystemWow64DirectoryW
GetSystemWindowsDirectoryW
DebugBreak
user32
UnregisterClassA
DestroyIcon
ReleaseDC
GetDC
GetWindowRect
PostMessageW
SetWindowPos
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
SetFocus
IsWindow
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
ShowWindow
DefWindowProcW
PostQuitMessage
SendMessageW
gdi32
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
GetStockObject
GetDeviceCaps
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
shell32
SHGetFolderPathW
CommandLineToArgvW
ole32
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
oleaut32
SysAllocString
VariantClear
VariantInit
SysFreeString
msvcp80
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
msvcr80
_except_handler4_common
??3@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
memcpy
??_V@YAXPAX@Z
??8type_info@@QBE_NABV0@@Z
_purecall
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
memset
_wtol
setlocale
_vswprintf
free
malloc
_wtoi
swprintf_s
_invalid_parameter_noinfo
vswprintf_s
_wcsnicmp
swscanf_s
wcsncpy_s
atof
wcstombs_s
realloc
_snwprintf_s
wcsncat_s
calloc
_snwprintf
_ftelli64
_fseeki64
fopen
fread
ferror
fwrite
ftell
fseek
fclose
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
gdiplus
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipFree
GdipReleaseDC
GdipGetDC
GdipAlloc
GdipGetImageEncoders
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
imagehlp
MapAndLoad
UnMapAndLoad
Exports
Exports
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE