Static task
static1
Behavioral task
behavioral1
Sample
ad6dc281c89994f3b122ef1d4218598ed6342c9659378b8c636a0d65a2592138.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad6dc281c89994f3b122ef1d4218598ed6342c9659378b8c636a0d65a2592138.exe
Resource
win10v2004-20220812-en
General
-
Target
ad6dc281c89994f3b122ef1d4218598ed6342c9659378b8c636a0d65a2592138
-
Size
134KB
-
MD5
008022fae4ecb1a1ca3d70ffb74490c0
-
SHA1
4afddbdf475866b22f4f4ca5d7cb25a0cdc91c82
-
SHA256
ad6dc281c89994f3b122ef1d4218598ed6342c9659378b8c636a0d65a2592138
-
SHA512
b40585192b0733f1edf1ada169e5f0d922c924d0741589cb11eacaf9dc3f94118065b15ffba237d0be120e49e94a9a03a1d4bd83bd22126a458d3dae470ff643
-
SSDEEP
3072:B9xwVYQm7dHRw5BjUmbpw3XNc6zYhH1vOvXyY:B9LTxw5BjUwEuH1mvX
Malware Config
Signatures
Files
-
ad6dc281c89994f3b122ef1d4218598ed6342c9659378b8c636a0d65a2592138.exe windows x86
c00b7ae04a97e8101de1d9cb92b0b04d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
bdlogicutils
?BDLogicUtilsLibrary_Init@BDLogicUtils@@YAHXZ
?BDLogicUtilsLibrary_Unit@BDLogicUtils@@YAHXZ
?GetBDMReportMgr@BDLogicUtils@@YAPAVIBDMReportMgr@1@XZ
?GetBDCrashCatcher@BDLogicUtils@@YAPAVIBDCrashCatcher@1@XZ
kernel32
LoadLibraryW
GetProcAddress
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
user32
wsprintfW
msvcp80
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
msvcr80
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_initterm
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_wcmdln
exit
_exit
_cexit
__wgetmainargs
_amsg_exit
??2@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
?terminate@@YAXXZ
_wcsicmp
__CxxFrameHandler3
_XcptFilter
memset
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE