C:\build\PO_REL_4_100_15_8_1\win_external_wl\src\wl\cpl\TrayApp\Release\dell\bcmwltry.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b4cf5d0628778cb5f0b076a6a93c4eda.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4cf5d0628778cb5f0b076a6a93c4eda.exe
Resource
win10v2004-20240226-en
General
-
Target
b4cf5d0628778cb5f0b076a6a93c4eda
-
Size
1.2MB
-
MD5
b4cf5d0628778cb5f0b076a6a93c4eda
-
SHA1
095eb903aff9f2da1c459ac39b7f8013394e0fd6
-
SHA256
e4d6b526cdc406fdbd30002beaecb1fec6f04acf1e6ba09de0a72159fc13c39c
-
SHA512
eded76b43c88f828713baf8bf858ccaf778d4ec9072258a14b7cff347887e94e0e20f9f65cb98e5beb0ccecc6f709528a7ee79a208d6f571070e4a91f2cd93ed
-
SSDEEP
12288:Rw0hoVJ2A4/nZz8PQm2i0ufoWQIGmtyY6:Rw0WJ2bnZz8PQmv0ufoCo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4cf5d0628778cb5f0b076a6a93c4eda
Files
-
b4cf5d0628778cb5f0b076a6a93c4eda.exe windows:5 windows x86 arch:x86
d05adfa20986f6688e312ec7075160bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetQueryOptionA
HttpSendRequestA
InternetOpenA
HttpQueryInfoA
InternetSetOptionA
InternetErrorDlg
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
InternetReadFile
InternetCanonicalizeUrlA
crypt32
CertAddCertificateContextToStore
CertFreeCertificateContext
CertCloseStore
CertOpenStore
CertOpenSystemStoreA
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CryptDecodeObject
CertGetNameStringA
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertFindExtension
CertSetCertificateContextProperty
CertCreateCertificateContext
CertFindCertificateInStore
cfgmgr32
CM_Get_Device_IDA
CM_Get_DevNode_Status
CM_Locate_DevNodeA
iphlpapi
IpRenewAddress
IpReleaseAddress
GetInterfaceInfo
GetAdaptersInfo
GetIfEntry
NotifyAddrChange
powrprof
GetCurrentPowerPolicies
shlwapi
SHDeleteKeyA
bcm1xsup
@B1xsContextType@4
@B1xsIterateAdapters@4
@B1xsIterateAdaptersNext@4
@B1xsStatusNumber@4
@B1xsAdapterGetMacAddress@8
@B1xsCredentialsNumber@4
@B1xsGetLogError@20
@B1xsGlobalConfigCertStores@20
@B1xsStatusFormat@12
@B1xsAdapterAuthenticateStop@4
@B1xsContextRelease@4
@B1xsAdapterGetName@12
@B1xsContextCloseNacInterface@4
@B1xsContextConfigMd5Credentials@12
@B1xsAdapterGetGtcPromptText@8
@B1xsContextConfigTLSCredentials@36
@B1xsRestartAdapterAuthenticate@4
@B1xsContextConfigFASTCredentials@8
@B1xsContextEapFastAIDCallBack@12
@B1xsAdapterAuthenticate@8
@B1xsContextFASTGetPACData@12
@B1xsContextOpenNacInterface@4
@B1xsGlobalConfigLoginCallback@8
@B1xsGlobalOpenContext@4
@B1xsContextConfigPeapCredentials@40
@B1xsAdapterQuery@8
@B1xsStatusRelatedContext@4
@B1xsContextConfigTTLSCredentials@40
mfc71
ord1917
ord1489
ord299
ord2933
ord3997
ord5529
ord2272
ord1486
ord1024
ord6090
ord1161
ord1005
ord588
ord328
ord5403
ord2468
ord6002
ord1482
ord305
ord2271
ord6007
ord1185
ord5717
ord907
ord911
ord4035
ord2475
ord755
ord564
ord2368
ord2372
ord1554
ord2991
ord3195
ord620
ord6067
ord6065
ord2654
ord2719
ord3401
ord3761
ord5613
ord3850
ord265
ord266
ord5563
ord1580
ord3255
ord2346
ord5331
ord6297
ord5320
ord6286
ord6205
ord3174
ord747
ord559
ord749
ord628
ord765
ord4044
ord548
ord763
ord2598
ord675
ord442
ord6305
ord6306
ord3110
ord1440
ord2904
ord3109
ord673
ord4042
ord438
ord1452
ord744
ord5097
ord556
ord6200
ord3648
ord3466
ord2246
ord1913
ord2615
ord5009
ord5012
ord4309
ord4135
ord2939
ord4904
ord943
ord5356
ord2992
ord2425
ord2424
ord4019
ord1557
ord3945
ord5148
ord5205
ord2173
ord1306
ord4277
ord4265
ord395
ord635
ord5165
ord1160
ord4768
ord2253
ord4108
ord4299
ord723
ord1003
ord3296
ord531
ord386
ord2274
ord1091
ord5112
ord1151
ord866
ord660
ord2286
ord974
ord3233
ord423
ord4063
ord5466
ord4353
ord3592
ord4541
ord3683
ord4038
ord4014
ord6278
ord3801
ord6276
ord4326
ord2063
ord2018
ord5583
ord3806
ord1010
ord5102
ord6219
ord5382
ord3832
ord1920
ord2931
ord5224
ord5226
ord3948
ord4568
ord5230
ord5213
ord5566
ord2838
ord4481
ord757
ord1149
ord1150
ord566
ord5383
ord1138
ord5420
ord1200
ord1119
ord593
ord6252
ord5568
ord5569
ord5119
ord334
ord1054
ord1126
ord2248
ord3596
ord5905
ord3428
ord3609
ord3602
ord3635
ord795
ord3169
ord590
ord1128
ord2141
ord331
ord1144
ord1190
ord2815
ord3952
ord2376
ord2942
ord2250
ord314
ord2252
ord796
ord494
ord3534
ord6265
ord6249
ord5380
ord2857
ord476
ord701
ord4314
ord2833
ord807
ord496
ord5459
ord5437
ord908
ord865
ord2328
ord869
ord3022
ord6101
ord584
ord1434
ord5688
ord317
ord4109
ord5493
ord2703
ord3201
ord380
ord629
ord6288
ord1439
ord5323
ord2903
ord5089
ord384
ord1527
ord2371
ord5430
ord2292
ord1916
ord4066
ord2938
ord426
ord663
ord3514
ord1031
ord2306
ord1181
ord2259
ord5341
ord1207
ord1159
ord3051
ord298
ord1250
ord3501
ord3768
ord4102
ord2472
ord1444
ord2310
ord916
ord6212
ord4057
ord6292
ord5326
ord2907
ord5879
ord5627
ord2122
ord2750
ord2753
ord2746
ord3095
ord432
ord667
ord2349
ord5235
ord5233
ord2390
ord2400
ord2398
ord2396
ord2392
ord2415
ord2403
ord300
ord1230
ord6264
ord2911
ord783
ord2280
ord2288
ord2751
ord2275
ord631
ord2322
ord378
ord297
ord781
ord572
ord558
ord2131
ord5438
ord760
ord746
ord3337
ord4261
ord4486
ord3949
ord2644
ord3709
ord3719
ord3718
ord2533
ord2646
ord2540
ord2862
ord2714
ord4307
ord2835
ord2731
ord2537
ord5200
ord1599
ord1655
ord1656
ord1964
ord5175
ord1362
ord4967
ord3345
ord6277
ord3802
ord6279
ord1522
ord2172
ord2178
ord2405
ord2387
ord2385
ord2408
ord2413
ord2394
ord2410
ord934
ord930
ord932
ord928
ord923
ord5960
ord1600
ord4282
ord4722
ord3403
ord5214
ord4185
ord6275
ord5073
ord1908
ord5152
ord4244
ord1402
ord3946
ord1617
ord1620
ord5915
ord1903
ord1084
ord304
ord3684
ord545
ord784
ord762
ord764
ord1193
ord733
ord578
ord310
ord1187
ord1191
ord912
ord5445
ord1211
msvcr71
_snprintf
_localtime64
strftime
_mktime64
_purecall
__CxxFrameHandler
wcscpy
printf
_resetstkoflw
free
malloc
_setmbcp
realloc
_strcmpi
_wcsicmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
_time64
sprintf
_abnormal_termination
_mbstok
atoi
_strdup
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
clock
atol
wcschr
rand
srand
time
isspace
strncpy
fprintf
_iob
_access
strrchr
strstr
strtoul
isxdigit
fgetws
_controlfp
qsort
wcslen
mbstowcs
??8type_info@@QBEHABV0@@Z
_itoa
wcsncpy
memset
__security_error_handler
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler3
kernel32
SetEvent
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiW
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WaitForSingleObject
GetFileAttributesExA
GetModuleFileNameA
CopyFileA
GetComputerNameA
GetWindowsDirectoryA
CloseHandle
CreateEventA
GetModuleHandleA
ResumeThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OpenProcess
HeapFree
HeapAlloc
GetProcessHeap
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
GetProcAddress
LoadLibraryW
GetCurrentThreadId
GetCurrentProcess
WinExec
ResetEvent
GetSystemInfo
DeleteFileA
GetFileAttributesA
GetTempPathA
RaiseException
OpenEventA
GetOverlappedResult
WaitForMultipleObjects
ReadFile
GetFileSize
CreateFileA
FreeLibrary
LoadLibraryA
CreateMutexA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcmpA
SetUnhandledExceptionFilter
GetUserDefaultLangID
DeviceIoControl
SetLastError
OutputDebugStringA
ExpandEnvironmentStringsA
lstrcpyA
GetExitCodeProcess
CreateProcessA
LocalFree
SetFileAttributesA
OpenMutexA
GetSystemDirectoryA
LocalAlloc
QueueUserWorkItem
FindResourceExA
EnumResourceNamesA
GlobalFree
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ExitProcess
GetStartupInfoA
FileTimeToLocalFileTime
user32
EnableWindow
GetWindow
PostMessageA
SendMessageA
GetWindowRect
InvalidateRect
GetParent
SetDlgItemTextA
SetMenuItemInfoA
IsWindow
UnregisterDeviceNotification
RegisterDeviceNotificationA
CharUpperW
CharUpperA
CharLowerW
CharLowerA
PeekMessageA
GetClassNameA
GetSubMenu
GetMenuItemCount
LoadStringA
BroadcastSystemMessageA
PostQuitMessage
TranslateMessage
DispatchMessageA
GetDesktopWindow
MessageBoxA
GetClassInfoA
UnregisterClassA
GetWindowThreadProcessId
EnumThreadWindows
GetPropA
SetWindowLongA
RemovePropA
UpdateWindow
SetProcessWindowStation
CloseWindowStation
CloseDesktop
RegisterWindowMessageA
KillTimer
SetTimer
advapi32
CryptEncrypt
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
LookupAccountSidA
GetUserNameA
RegEnumKeyExA
CreateServiceA
CloseServiceHandle
StartServiceA
OpenServiceA
OpenSCManagerA
RegSetValueExA
CryptGetKeyParam
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegNotifyChangeKeyValue
RegCreateKeyExA
CryptSetProvParam
CryptGetProvParam
CryptDestroyKey
CryptGenKey
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptReleaseContext
CryptDecrypt
CryptDestroyHash
CryptAcquireContextA
CryptGetUserKey
shell32
ShellExecuteA
ole32
StringFromCLSID
CoCreateGuid
CoCreateInstance
ProgIDFromCLSID
CoTaskMemFree
oleaut32
SysFreeString
VariantCopy
RevokeActiveObject
RegisterActiveObject
VariantInit
VariantChangeType
VariantClear
msvcp71
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?is@?$ctype@G@std@@QBE_NFG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
wsock32
WSAGetLastError
WSAStartup
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ws2_32
WSAAddressToStringA
winscard
SCardCancel
SCardEstablishContext
SCardReleaseContext
SCardListReadersA
SCardFreeMemory
SCardGetStatusChangeA
SCardListCardsA
SCardGetCardTypeProviderNameA
Sections
.text Size: 328KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 776KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ