bd2.net-injector-main.zip
- SHA256 36add91184f3542ef6bced4dc17346e3d2fd113f2b7e01f8a25e9b07f2375459
Password
1
Overview
overview
3Static
static
3bd2.net-in...in.zip
windows10-2004-x64
1bd2.net-in...in.zip
windows11-ltsc_2024-x64
1bd2.net-in...lh.rar
windows10-2004-x64
1bd2.net-in...lh.rar
windows11-ltsc_2024-x64
1BD2 Cracke...ry.exe
windows10-2004-x64
3BD2 Cracke...ry.exe
windows11-ltsc_2024-x64
3BD2 Cracke...ry.ico
windows10-2004-x64
3BD2 Cracke...ry.ico
windows11-ltsc_2024-x64
3BD2 Cracke...ry.png
windows10-2004-x64
1BD2 Cracke...ry.png
windows11-ltsc_2024-x64
1BD2 Cracke...r2.dll
windows10-2004-x64
1BD2 Cracke...r2.dll
windows11-ltsc_2024-x64
1BD2 Cracke...co.exe
windows10-2004-x64
3BD2 Cracke...co.exe
windows11-ltsc_2024-x64
3bd2.net-in...DME.md
windows10-2004-x64
3bd2.net-in...DME.md
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bd2.net-injector-main.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bd2.net-injector-main.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
bd2.net-injector-main/BD2 Cracked By @0xabdallh.rar
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
bd2.net-injector-main/BD2 Cracked By @0xabdallh.rar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
BD2 Cracked By @0xabdallh/CipherMasonry.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
BD2 Cracked By @0xabdallh/CipherMasonry.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
BD2 Cracked By @0xabdallh/CipherMasonry.ico
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
BD2 Cracked By @0xabdallh/CipherMasonry.ico
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
BD2 Cracked By @0xabdallh/CipherMasonry.png
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
BD2 Cracked By @0xabdallh/CipherMasonry.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
BD2 Cracked By @0xabdallh/DevComponents.DotNetBar2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
BD2 Cracked By @0xabdallh/DevComponents.DotNetBar2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
BD2 Cracked By @0xabdallh/Quick_Any2Ico.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral14
Sample
BD2 Cracked By @0xabdallh/Quick_Any2Ico.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral15
Sample
bd2.net-injector-main/README.md
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
bd2.net-injector-main/README.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target bd2.net-injector-main.zip
- Size 2.9MB
- Sample261009-yvtreseb74
- SHA256 36add91184f3542ef6bced4dc17346e3d2fd113f2b7e01f8a25e9b07f2375459
- MD5 b6a26dc88df1187173537d55fce14cd5
- SHA1 43b02359e60a6b608e9b6c01b5b0472b8474f75d
- SHA512 1de5e81a63be1f7f7d5787b4c3249a29361d9cf587e877d2dddfc1d26cece0246bac3e2f01386d3ad068c6237f2806b105f02e863471f36251d0fc975a2a56a6
- SSDEEP 49152:CIYWFHdxooMT+hrqBEu4Fq8XQ0DLOo4kOuIYYjlOIooAYH/t5sQ4EYJPO9w:CIY+HooJqaJFNg0DKo4kOuItraNQ4ww
- TLSH T120E5337154B9921EA5DA68B71027707CF1B3F0CE493278632EEAA1B99D1C903D09BCD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/BD2 Cracked By @0xabdallh/CipherMasonry.exe unpack002/BD2 Cracked By @0xabdallh/DevComponents.DotNetBar2.dll
File Explorer
-
bd2.net-injector-main.zip.zip 2.9MB
-
bd2.net-injector-main/BD2 Cracked By @0xabdallh.rar.rar 2.9MB
-
BD2 Cracked By @0xabdallh/CipherMasonry.exe.exe 9.3MB
-
BD2 Cracked By @0xabdallh/CipherMasonry.ico93KB
-
BD2 Cracked By @0xabdallh/CipherMasonry.png.png 1.1MB
-
BD2 Cracked By @0xabdallh/DevComponents.DotNetBar2.dll.dll 4.3MB
-
BD2 Cracked By @0xabdallh/Quick_Any2Ico.exe.exe 604KB
-
bd2.net-injector-main/README.md62B
bd2.net-injector-main/BD2 Cracked By @0xabdallh.rar
- SHA256 c9de560089072666788649776f9f45c3ee10ffba320b3b88a32060c1043fb1b8
- MD5 f5ec240598b2c0f610bfcdb07cbf9722
- SHA1 afd6a2ac403d13672d6f3e7d493d199e0133c502
- SHA512 6ecee5ecc822136f0a01851bfb1f6c7740f80d8932cdef6c900ba24b17342f5af2f4db026bf500f475ea1db9b6f0a9c5fc797b7f93f4037e4acc2e301db07273
- SSDEEP 49152:WOY+thZRoisVOLjyhEuanqkXQGDLqSwkDImWTwKt2W+8r3z58ZGYdb2DD:WOYY7oidy6LnPgGDmSwkDIy/lZ0D
- TLSH T1D6E5336554B9622A32ED5CE72097B068F532E0DE093B39671EE9B0799E2CD43D05ECC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1
BD2 Cracked By @0xabdallh/CipherMasonry.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 df5fadcfe2cad2ca14e728da046557c0939759b092d4af6634043750428703a7
- MD5 15507a03b8b2745420831676581b3520
- SHA1 fe26858f67998b2b840fe0722505c6eedc943f9c
- SHA512 a7a3bfb7904596439a5f0fc4d88371d965b7ca4ff1533d3ba20b2b9d4227cb07eaebdcc2320c1d2ad7bee25a3edf074a6c7fbe35317640dea75b5be4a782855f
- SSDEEP 6144:6owtqoqMEOOmGGfjGRioCRDjRlA1+kHmkHMfWuvz2lofVIKvmGF:thyEOukhhjrYxQiKrF
- TLSH T14BA6D4B9F607E4B1C34FC6700498A8EC12A53ED7D4D24A8997BDF1465C62FCEAE07921
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1
Minor OS version
0
Major OS version
4
Entry point
9510254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
9.1MB
Virtual Size
9.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
258KB
Virtual Size
257KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BD2 Cracked By @0xabdallh/CipherMasonry.ico
- SHA256 da8f4a347048a2659870f4de27cbbc1df97d95408ab09490f4be842c23e9018e
- MD5 5d5d5a921139092e3370bc49e7e328b2
- SHA1 1b446ac1a841a51eed2bc80352d0555c47e1492b
- SHA512 4f2ea62dde39b1a5ec3ebb60ac199796c14a0984da949badb0172307cfcfc8ce38d987045c0cc83c54ed8d785af48f9995abd46f24cac0d391b71b2860e25901
- SSDEEP 1536:5qqqqqqqqqWCvqqlacqqShW0QSxHOa6dnkcEJlTrzgLZcHUc5UvlGS5/5Ko+8hFc:fWnSxuzkHlTwLq0B5/nyJxjmMx
- TLSH T1FF939DC4E9F68E1AC06F6BB114A9C53655BAC2241333C5E659B276A1BF82C427F005FF
- MD5 SHA1 SHA512 SSDEEP TLSH
BD2 Cracked By @0xabdallh/CipherMasonry.png
- SHA256 d5ebcbf4db864f91375fdbb7229209bdd55d3f475416b1cf94e442a933129d0d
- MD5 4e509770e81c555bc146e8b79a820681
- SHA1 dc138ef764b8aa3a5e4338d74ae313f8c224a672
- SHA512 6acdca27748e0a456b3a6d469a07f12eeaad846a8ef6cc22ab56190e510db47e7630742cd1bd45f7c3b64967b8531bc5ff08d7fd5a9c07e49ea0d9599d4c1b23
- SSDEEP 24576:W+pvORabn+UzfHrA+OGT+OAZcrRiUF51KXdG:npvESJ8+OGT9YcNiUF5n
- TLSH T1B63523B11E5A9616DA30F5F3549C7D85F3B938D47F85088E005AE8F09FD0E4A49BE23A
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1
BD2 Cracked By @0xabdallh/DevComponents.DotNetBar2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3e0a315bc5496aa8e701c83c0b277d30fe78b0b567418baa268912df51c09b22
- MD5 d499c22917c1a95a1d80b9ff48673596
- SHA1 638ad22483e5aec468dede04fdc1defe1f7494bf
- SHA512 7c5272619c546efcd1ded6b3c8b7caae8be9c18683d862aa956847c49a703cc1d6ac878a65f20083f1fafcb8ce5fd7bf4cb90aa115ce58d4c33d3b7aa916cfb4
- SSDEEP 49152:jfbOYjjGPzyrpoU9L2+46BLhFt+eCdmvMAeQt6xfYUanWPsrtm/l:GYjjJoWLXB+Xda
- TLSH T18F267C4173B4DA3BE0AF8374C12A219943F6D61AE3E3FB665AA1B07D3D43B405907297
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1
Minor OS version
0
Major OS version
4
Entry point
4544211
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.textxc
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.datax
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
86B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
BD2 Cracked By @0xabdallh/Quick_Any2Ico.exe
- IMPHASH 8d52eced451405641e40b828c939be90
- SHA256 743ef7485a91b491a372d980fc436e050cdf1875a5ae7f0f318d764fc0815506
- MD5 922fbb3f8c8c9fa22b1e56a19204fcf8
- SHA1 abf6db58082b299e4749213e67a4aa2a1d94785c
- SHA512 972f1f51e5e9f66ae37f1ba148fccf2889692ca0a9359707c0b62ee12c722f4bb74621e0da92cbccb86f132a2f28133e383f5814a23738e87a7725b4dcb467dc
- SSDEEP 12288:1Fq8T/5aDd5+6C0ylreuv2YJH9JSogw+V:1Y8TBaDdc6xylr/jJdEw+V
- TLSH T1BDD46C5279638571C8A5453CC279BAF2022CAC262B3549DF63D42A2F6F625D22F33773
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1
Digest
54:08:a9:c9:e4:e0:4e:87:40:f9:f6:4d:50:98:4f:e2:cf:5a:f9:3c:a7:6c:db:f4:fc:b3:5e:46:44:ee:1a:1d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
Chains
Apr 10, 2023
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Digest
b0:1c:95:47:ca:0b:71:d9:c6:7e:97:82:21:e9:2e:c5:14:bc:5b:78
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
Chains
Apr 10, 2023
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=789 849 163 00025,CN=DOS SANTOS DA SILVA ALFREDO,O=DOS SANTOS DA SILVA ALFREDO,ST=Occitanie,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652
Serial Number
9e:b8:63:20:bc:00:ab:f1:85:bb:de:03:32:c2:6f:58
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 10, 2022 - Jan 9, 2025
Minor OS version
1
Major OS version
5
Entry point
231552
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\VisualStudio\Projects\Quick_Any2Ico\Release\Quick_Any2Ico.pdb
kernel32
GetStringTypeW
GetACP
GetStdHandle
GetModuleHandleExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
HeapAlloc
EncodePointer
RaiseException
RtlUnwind
InitializeSListHead
GetCurrentThreadId
GetStartupInfoW
WriteConsoleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
DecodePointer
LoadLibraryExW
OpenThread
QueryPerformanceCounter
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
WritePrivateProfileSectionW
VerifyVersionInfoW
SleepEx
WideCharToMultiByte
CopyFileW
FreeLibrary
GetFileSize
GetModuleHandleW
CreateProcessW
GetCurrentProcessId
MoveFileExW
LocalFree
SetFilePointerEx
GlobalLock
CreateDirectoryW
GetProcAddress
FindResourceW
LoadResource
CreateThread
LoadLibraryW
CloseHandle
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileType
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GlobalUnlock
GetConsoleMode
VerSetConditionMask
ExitProcess
IsDebuggerPresent
GlobalFree
DeleteFileW
GlobalAlloc
QueryPerformanceFrequency
LockResource
TerminateThread
GetLastError
Sleep
GetPrivateProfileStringW
GetExitCodeThread
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
LocalAlloc
WaitForSingleObject
FindClose
GetPrivateProfileSectionW
Thread32First
EnumResourceNamesW
SetFilePointer
SetErrorMode
Thread32Next
GetProcessId
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
InterlockedDecrement
ExpandEnvironmentStringsW
WriteFile
GetCurrentProcess
GetLongPathNameW
FindNextFileW
SetLastError
WritePrivateProfileStringW
GetFileSizeEx
FindFirstFileW
SizeofResource
ReadFile
EnterCriticalSection
user32
GetWindow
PostMessageW
ShowWindowAsync
AdjustWindowRectEx
DefWindowProcW
GetMenuItemInfoW
DeferWindowPos
GetMessageW
GetCursorPos
ReleaseDC
ChildWindowFromPoint
InvalidateRect
LoadImageW
SetForegroundWindow
UpdateWindow
PtInRect
GetParent
SetSystemCursor
GetDC
GetWindowRect
SetWindowPos
CopyImage
EnumChildWindows
SetWindowRgn
CopyIcon
FillRect
CreateWindowExW
GetIconInfo
DeleteMenu
SendMessageW
GetSystemMetrics
UnregisterClassW
GetClassInfoExW
SystemParametersInfoW
GetSysColorBrush
DrawIconEx
GetClassLongW
GetClientRect
RemoveMenu
SetWindowLongW
SetCursor
SetClipboardData
EndDeferWindowPos
GetWindowDC
GetClassNameW
LoadCursorW
TranslateMessage
GetUpdateRect
TranslateAcceleratorW
BringWindowToTop
GetMenuStringW
SetFocus
GetWindowRgnBox
DestroyMenu
CreateAcceleratorTableW
EnumWindows
IsWindowEnabled
GetForegroundWindow
GetSysColor
GetTopWindow
SetMenuDefaultItem
SetMenuInfo
MapWindowPoints
PeekMessageW
EmptyClipboard
DestroyAcceleratorTable
SetMenuItemInfoW
GetMenuItemID
GetFocus
DestroyWindow
BeginPaint
EndPaint
GetWindowRgn
CloseClipboard
DefDlgProcW
GetWindowThreadProcessId
GetWindowLongW
EnableWindow
GetWindowTextW
FindWindowExW
RegisterClassExW
IsWindowVisible
DestroyIcon
IsDialogMessageW
RedrawWindow
DispatchMessageW
OpenClipboard
GetAsyncKeyState
BeginDeferWindowPos
IsWindow
ShowWindow
WindowFromPoint
gdi32
GetBkColor
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
PatBlt
StretchBlt
CreateFontW
GetStockObject
GetDIBits
CreatePatternBrush
OffsetRgn
CreateRectRgn
DeleteDC
GetTextExtentPoint32W
SetTextColor
SetBkMode
SelectClipRgn
GetObjectW
ExcludeClipRect
SetBkColor
SetStretchBltMode
DeleteObject
CreateSolidBrush
ExtSelectClipRgn
CombineRgn
FillRgn
SetBrushOrgEx
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
AllocateAndInitializeSid
TreeResetNamedSecurityInfoW
CreateWellKnownSid
CryptDecrypt
RegCreateKeyExW
SetNamedSecurityInfoW
CryptCreateHash
CryptHashData
IsValidSid
RegSetValueExW
AddAce
CryptDestroyHash
FreeSid
CheckTokenMembership
InitializeAcl
RegOpenKeyExW
CryptSetKeyParam
CryptImportKey
GetLengthSid
CryptGetHashParam
RegQueryValueExW
CryptReleaseContext
CryptEncrypt
GetAce
CryptAcquireContextW
RegCloseKey
CryptDestroyKey
shell32
SHGetDesktopFolder
ord62
ord155
ord190
DragQueryPoint
SHGetFolderPathW
CommandLineToArgvW
FindExecutableW
SHGetPathFromIDListW
SHChangeNotify
DragQueryFileW
ShellExecuteExW
ord6
SHBrowseForFolderW
SHCreateItemFromParsingName
DragFinish
ExtractAssociatedIconW
Shell_NotifyIconW
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
oleaut32
SysFreeString
SysAllocString
VariantClear
shlwapi
PathParseIconLocationW
PathFindOnPathW
ord176
PathFileExistsW
PathIsRootW
PathUnmakeSystemFolderW
PathIsDirectoryW
PathMakeSystemFolderW
gdiplus
GdipSetInterpolationMode
GdipCreatePath
GdipSetSmoothingMode
GdipDisposeImage
GdipDeletePath
GdiplusStartup
GdiplusShutdown
GdipAddPathLine
GdipGetImageHeight
GdipFillPolygonI
GdipGetRegionHRgn
GdipSetCompositingQuality
GdipGetImageEncoders
GdipResetPath
GdipCreateFromHWND
GdipCreateRegionPath
GdipCreateHBITMAPFromBitmap
GdipSetPixelOffsetMode
GdipFillRectangle
GdipClosePathFigure
GdipFree
GdipDrawPath
GdipBitmapLockBits
GdipDrawRectangleI
GdipImageRotateFlip
GdipAddPathPolygon
GdipCreateFromHDC
GdipFillEllipseI
GdipFillEllipse
GdipDrawEllipse
GdipDeleteRegion
GdipGetImageGraphicsContext
GdipFillRectangleI
ord1
GdipGetImageEncodersSize
GdipDeleteGraphics
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipSaveImageToStream
GdipDeletePen
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreatePen1
GdipDrawImageRectRectI
GdipDrawLineI
GdipSaveImageToFile
GdipCreateSolidFill
GdipDrawImageRect
GdipCloneImage
GdipBitmapUnlockBits
GdipDeleteBrush
GdipFillPath
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
comctl32
ord413
ImageList_Destroy
ImageList_DrawEx
ord412
ord411
ImageList_Replace
ImageList_Create
ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ord410
psapi
EnumProcesses
GetModuleFileNameExW
uxtheme
SetWindowTheme
wininet
InternetQueryDataAvailable
InternetOpenUrlW
FtpOpenFileW
InternetReadFile
InternetOpenW
InternetSetOptionW
InternetGetConnectedState
InternetConnectW
InternetCloseHandle
InternetCrackUrlW
HttpQueryInfoW
FtpGetFileSize
Name
.text
Size
301KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=129, id=243, version=40116,
count=26, id=242, version=40116,
count=18, id=260, version=26706,
count=21, id=259, version=26706,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=53, id=261, version=26706,
count=20, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=663, id=1, productName=Unmarked objects,
count=2, id=265, version=27048,
count=1, id=255, version=27048,
count=1, id=151,
count=1, id=258, version=27048,
bd2.net-injector-main/README.md
- SHA256 90b29383780ea706a768fb2dd90d8e4c3505095284462b88227a97889bc31301
- MD5 e9069ab5ac758ce883eb9edbc51c57e1
- SHA1 f124898be7b21b221bd3905dc4ff114c23a3da6c
- SHA512 39fc7147bef100d19aca324e7a97a28cdada9ab163d79a3acb346e8b0449a1bb1f5d37d541ac1e8bc03fb773f09ea355a918521b34441ba2ab0908b667e2900e
- TLSH T10CA022BBC0830C00030A0CE08082A0082220A80A08C00FC0C000A220A0BEA3E0F0AB8B
- MD5 SHA1 SHA512 TLSH