0168ddb2a32978bebbcd0cbb484e52f165b38c7767adbedfeeb07c36e3a2f937

Sharing

Copy URL Twitter E-mail

General

Target

0168ddb2a32978bebbcd0cbb484e52f165b38c7767adbedfeeb07c36e3a2f937
Size

1.3MB
MD5

2fce4d7cde645c318f0aa873f1dc4156
SHA1

40b658c66fe1d6ea1e64af81243533a651f2282c
SHA256

0168ddb2a32978bebbcd0cbb484e52f165b38c7767adbedfeeb07c36e3a2f937
SHA512

a0522a27a2240b39414bc26186d54e61a3d0bddca4d4c7fbbb32e359924dcf306f7cf21ca05086ac61a260c9703a265f0fb1b7d4da32930c5b8f32dba2d25ed0
SSDEEP

24576:99FupaxQ5OTMMP9DtvP9ZLMFcnqyaF7ivm:hVQC9DtvP9ZrCS

Score

1^/10

Malware Config

Signatures

Files

0168ddb2a32978bebbcd0cbb484e52f165b38c7767adbedfeeb07c36e3a2f937
.dll windows:6 windows x64

4eef5806e63e315b0d1e7a2fb8bd2880

Code Sign

11:ea:9b:47:ed:c5:35:77:34:0f:a1:4e:14:7e:91:32
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/02/2010, 00:00

Not After

22/02/2012, 23:59

Subject

CN=Xtreaming Technology Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Xtreaming Technology Inc.,L=Taichung,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:51:2f:c7:c7:aa:c3:0b
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2002, 00:00

Not After

20/09/2052, 23:59

Subject

CN=DigiCert Timestamp 2023 - 1,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:51:2f:c7:c7:aa:c3:0b
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2002, 00:00

Not After

20/09/2052, 23:59

Subject

CN=DigiCert Timestamp 2023 - 1,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:51:2f:c7:c7:aa:c3:0b
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2002, 00:00

Not After

20/09/2052, 23:59

Subject

CN=DigiCert Timestamp 2023 - 1,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:51:2f:c7:c7:aa:c3:0b
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2002, 00:00

Not After

20/09/2052, 23:59

Subject

CN=DigiCert Timestamp 2023 - 1,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:51:2f:c7:c7:aa:c3:0b
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2002, 00:00

Not After

20/09/2052, 23:59

Subject

CN=DigiCert Timestamp 2023 - 1,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

39:85:0d:35:b4:f3:d8:9b
Certificate

Issuer

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/05/2000, 00:00

Not After

07/05/2060, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:85:0d:35:b4:f3:d8:9b
Certificate

Issuer

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/05/2000, 00:00

Not After

07/05/2060, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:85:0d:35:b4:f3:d8:9b
Certificate

Issuer

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/05/2000, 00:00

Not After

07/05/2060, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:85:0d:35:b4:f3:d8:9b
Certificate

Issuer

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/05/2000, 00:00

Not After

07/05/2060, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:85:0d:35:b4:f3:d8:9b
Certificate

Issuer

CN=DigiCert Assured ID Root CA - G2,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/05/2000, 00:00

Not After

07/05/2060, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA1 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:52:aa:02:26:9d:a6:43:4e:49:cc:56:eb:fa:b0:89:50:56:06:f8
Signer

Actual PE Digest

6f:52:aa:02:26:9d:a6:43:4e:49:cc:56:eb:fa:b0:89:50:56:06:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gfx

?GetInterface@Material@@UEAAPEAVBaseInterface@@VInterface_ID@@@Z
??0Material@@QEAA@XZ

maxutil

?NumInterfaces@BaseInterfaceServer@@UEBAHXZ
?GetInterfaceAt@BaseInterfaceServer@@UEBAPEAVBaseInterface@@H@Z
??1BaseInterfaceServer@@UEAA@XZ
?UtilDeallocateMemory@@YAXPEAX@Z
?GetInterface@InterfaceServer@@UEAAPEAVBaseInterface@@VInterface_ID@@@Z
?TBInsertAt@@YAHPEAPEAUTabHdr@@HHPEBXHH@Z
??0Exception@Util@MaxSDK@@QEAA@AEBV012@@Z
??4WStr@@QEAAAEAV0@PEB_W@Z
?zfree@@YAXPEAPEAX@Z
??0OutOfRangeException@Util@MaxSDK@@QEAA@AEBV012@@Z
??1OutOfRangeException@Util@MaxSDK@@UEAA@XZ
??0OutOfRangeException@Util@MaxSDK@@QEAA@PEB_W@Z
??3MaxHeapOperators@@SAXPEAX@Z
??2MaxHeapOperators@@SAPEAX_K@Z
??0WStr@@QEAA@PEB_W@Z
??1InterfaceServer@@UEAA@XZ

paramblk2

?NumParamBlockDescs@ClassDesc2@@UEAAHXZ
?MakeAutoParamBlocks@ClassDesc2@@UEAAXPEAVReferenceMaker@@@Z
?InvalidateUI@ClassDesc2@@UEAAXPEAVParamBlockDesc2@@@Z
?GetParamMap@ClassDesc2@@UEAAPEAVIParamMap2@@H@Z
?GetParamBlockDescByID@ClassDesc2@@UEAAPEAVParamBlockDesc2@@F@Z
?GetParamBlockDesc@ClassDesc2@@UEAAPEAVParamBlockDesc2@@H@Z
?EndEditParams@ClassDesc2@@UEAAXPEAVIObjParam@@PEAVReferenceMaker@@KPEAVAnimatable@@@Z
?NumParamMaps@ClassDesc2@@UEAAHXZ
?AddParamBlockDesc@ClassDesc2@@UEAAXPEAVParamBlockDesc2@@@Z
?InvalidateUI@ParamBlockDesc2@@QEAAXXZ
?ParamOption@ParamBlockDesc2@@QEAAXFHZZ
??1ParamBlockDesc2@@UEAA@XZ
??0ParamBlockDesc2@@QEAA@FPEB_W_JPEAVClassDesc2@@GZZ
?SetUserDlgProc@ClassDesc2@@QEAA_NPEAVParamBlockDesc2@@FPEAVParamMap2UserDlgProc@@@Z
??1ClassDesc2@@UEAA@XZ
??0ClassDesc2@@QEAA@XZ
?ResetClassParams@ClassDesc2@@UEAAXH@Z
?SetUserDlgProc@ParamBlockDesc2@@QEAAXFPEAVParamMap2UserDlgProc@@@Z
?BeginEditParams@ClassDesc2@@UEAAXPEAVIObjParam@@PEAVReferenceMaker@@KPEAVAnimatable@@@Z

core

?Load@ReferenceMaker@@UEAA?AW4IOResult@@PEAVILoad@@K@Z
?Load@ReferenceMaker@@UEAA?AW4IOResult@@PEAVILoad@@@Z
?IsAnimated@Animatable@@UEAAHXZ
?InvalidateChannels@Object@@UEAAXK@Z
?GetTimeRange@Animatable@@UEAA?AVInterval@@K@Z
?GetSubObjectLevel@BaseObject@@UEAAHXZ
?GetRsrcString@ClassDesc@@UEAAPEB_W_J@Z
?GetRenderItems@BaseObject@@UEBAAEBVRenderItemHandleArray@Graphics@MaxSDK@@XZ
?GetReference@ReferenceMaker@@UEAAPEAVReferenceTarget@@H@Z
?GetProperty@Animatable@@UEAAPEAXK@Z
?GetObjectDisplayRequirement@BaseObject@@UEBAKXZ
?GetInterface@Object@@UEAAPEAXK@Z
?GetInterface@Object@@UEAAPEAVBaseInterface@@VInterface_ID@@@Z
?GetInterface@ClassDesc@@UEAAPEAVFPInterface@@VInterface_ID@@@Z
?GetInterface@ClassDesc@@UEAAPEAVFPInterface@@PEB_W@Z
?GetDeformBBox@Object@@UEAAXHAEAVBox3@@PEAVMatrix3@@H@Z
?GetCollapseTypes@Object@@UEAAXAEAV?$Tab@VClass_ID@@@@AEAV?$Tab@PEAVWStr@@@@@Z
?GetClassName@ReferenceTarget@@UEBAXAEAVWStr@@_N@Z
?FreeChannels@Object@@UEAAXK@Z
?EnumAuxFiles@ReferenceMaker@@UEAAXAEAVAssetEnumCallback@@K@Z
?DoEnumDependentsImpl@ReferenceTarget@@MEAAHPEAVDependentEnumProc@@@Z
?DeleteThis@Animatable@@UEAAXXZ
?DeleteAllRefsToMe@ReferenceTarget@@UEAA?AW4RefResult@@XZ
?Deform@Object@@UEAAXPEAVDeformer@@H@Z
?ConvertToType@Object@@UEAAPEAV1@HVClass_ID@@@Z
?Clone@ReferenceTarget@@UEAAPEAV1@AEAVRemapDir@@@Z
?ClassID@Animatable@@UEAA?AVClass_ID@@XZ
?ChannelValidity@Object@@UEAA?AVInterval@@HH@Z
?CanConvertToType@Object@@UEAAHVClass_ID@@@Z
?BaseClone@ReferenceTarget@@UEAAXPEAV1@0AEAVRemapDir@@@Z
?AutoDelete@ReferenceTarget@@UEAA?AW4RefResult@@XZ
?AddInterface@ClassDesc@@UEAAXPEAVFPInterface@@@Z
?MakeHitRegion@@YAXAEAVHitRegion@@HHHPEAVIPoint2@@@Z
??1Object@@UEAA@XZ
??0Object@@QEAA@XZ
??0ObjectState@@QEAA@PEAVObject@@@Z
?GetCOREInterface@@YAPEAVInterface@@XZ
?GetSystemUnitScale@@YANH@Z
?ReplaceReference@ReferenceMaker@@QEAA?AW4RefResult@@HPEAVReferenceTarget@@H@Z
??0Interval@@QEAA@HH@Z
?SubAnimName@Animatable@@UEAA?AVWStr@@H_N@Z
?SubAnimRevertSetKeyBuffer@Animatable@@UEAAXH@Z
?SubAnimSetKeyBufferPresent@Animatable@@UEAAHH@Z
?SvCanConcludeLink@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@1@Z
?SvCanDetach@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanDetachRel@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@H1@Z
?SvCanInitiateLink@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanRemoveThis@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanSelect@Object@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanSetName@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvDetach@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvDetachRel@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@H1@Z
?SvEditProperties@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvGetMultiSelectCallback@Object@@UEAAPEAVMultiSelectCallback@@PEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvGetName@Object@@UEAA?AVWStr@@PEAVIGraphObjectManager@@PEAVIGraphNode@@_N@Z
?SvGetRefTip@Animatable@@UEAA?AVWStr@@PEAVIGraphObjectManager@@PEAVIGraphNode@@1@Z
?SvGetRelTip@Animatable@@UEAA?AVWStr@@PEAVIGraphObjectManager@@PEAVIGraphNode@@H1@Z
?SvGetSwatchColor@Animatable@@UEAAKPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvGetTip@Animatable@@UEAA?AVWStr@@PEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvHandleDoubleClick@Object@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvHandleRelDoubleClick@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@H1@Z
?SvHighlightColor@Object@@UEAAKPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvIsHighlighted@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvIsInactive@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvIsSelected@Object@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvLinkChild@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@1@Z
?SvRemoveThis@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvSetName@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@AEBVWStr@@@Z
?MaybeEnlargeViewportRect@Object@@UEAAXPEAVGraphicsWindow@@AEAVBox2@@@Z
?SubAnimCommitSetKeyBuffer@Animatable@@UEAAXHH@Z
?MouseCycleStarted@Animatable@@UEAAXH@Z
?NewAndCopyChannels@Object@@UEAAXK@Z
?NodeName@Animatable@@UEAA?AVWStr@@XZ
?NotifyDependents@ReferenceTarget@@UEAA?AW4RefResult@@AEBVInterval@@_KIKHPEAV1@W4NotifyDependentsOption@@@Z
?NumRefs@ReferenceMaker@@UEAAHXZ
?OKToChangeTopology@BaseObject@@UEAAHAEAVWStr@@@Z
?ObjectValidity@Object@@UEAA?AVInterval@@H@Z
?Rand11@RandGenerator@@QEAAMXZ
?Rand01@RandGenerator@@QEAAMXZ
?rand@RandGenerator@@QEAAIXZ
??0RandGenerator@@QEAA@XZ
?PrepareDisplay@BaseObject@@UEAA_NAEBVUpdateDisplayContext@Graphics@MaxSDK@@@Z
?ReduceCaches@Object@@UEAAXH@Z
?ReleaseInterface@Animatable@@UEAAXKPEAX@Z
?RescaleWorldUnits@ReferenceMaker@@UEAAXM@Z
?Save@ReferenceMaker@@UEAA?AW4IOResult@@PEAVISave@@@Z
?Save@ReferenceMaker@@UEAA?AW4IOResult@@PEAVISave@@K@Z
?SaveEnum@ReferenceMaker@@UEAAXAEAVSaveEnumProc@@H@Z
?MapKeys@Animatable@@UEAAXPEAVTimeMap@@K@Z
?SvTraverseAnimGraph@Control@@UEAA?AVSvGraphNodeReference@@PEAVIGraphObjectManager@@PEAVAnimatable@@HK@Z
?SvLinkChild@Control@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@1@Z
?SvIsSelected@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvHighlightColor@Animatable@@UEAAKPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvHandleDoubleClick@Control@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvGetName@Control@@UEAA?AVWStr@@PEAVIGraphObjectManager@@PEAVIGraphNode@@_N@Z
?SvGetMultiSelectCallback@Animatable@@UEAAPEAVMultiSelectCallback@@PEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvEditProperties@Control@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanSelect@Animatable@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanInitiateLink@Control@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanConcludeLink@Control@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@1@Z
?SuperClassID@ReferenceTarget@@UEAAKXZ
?SubAnimName@Control@@UEAA?AVWStr@@H_N@Z
?SetChannelValidity@Object@@UEAAXHVInterval@@@Z
?SubAnim@Control@@UEAAPEAVAnimatable@@H@Z
?SetReference@Control@@MEAAXHPEAVReferenceTarget@@@Z
?SetORT@Control@@UEAAXHH@Z
?Save@Control@@UEAA?AW4IOResult@@PEAVISave@@@Z
?SetProperty@Animatable@@UEAAHKPEAX@Z
?PaintFCurves@Control@@UEAAHPEAVParamDimensionBase@@PEAUHDC__@@AEAVBox2@@2MHMHK@Z
?NumSubs@Control@@UEAAHXZ
?NumRefs@Control@@UEAAHXZ
?GetReference@Control@@UEAAPEAVReferenceTarget@@H@Z
?GetLocalTMComponents@Control@@UEAA_NHAEAUTMComponentsArg@@AEAVMatrix3Indirect@@@Z
?GetInterface@ReferenceTarget@@UEAAPEAVBaseInterface@@VInterface_ID@@@Z
?GetInterface@Control@@UEAAPEAXK@Z
?GetFCurveExtents@Control@@UEAAHPEAVParamDimensionBase@@AEAM1K@Z
?EvalVisibility@Control@@UEAAMHAEAVView@@VBox3@@AEAVInterval@@@Z
?EnableORTs@Control@@UEAAXH@Z
?BaseClone@Control@@UEAAXPEAVReferenceTarget@@0AEAVRemapDir@@@Z
?Load@Control@@UEAA?AW4IOResult@@PEAVILoad@@@Z
??0Control@@QEAA@XZ
??1ReferenceTarget@@MEAA@XZ
?triObjectClassID@@3VClass_ID@@A
?IsClosed@PolyLine@@QEBAHXZ
?AddKnot@Spline3D@@QEAAHAEBVSplineKnot@@H@Z
?Segments@PolyLine@@QEBAHXZ
?splineShapeClassID@@3VClass_ID@@A
?genericShapeClassID@@3VClass_ID@@A
?TotalChannelsUsed@Modifier@@UEAAKXZ
?TotalChannelsChanged@Modifier@@UEAAKXZ
?SvTraverseAnimGraph@Modifier@@UEAA?AVSvGraphNodeReference@@PEAVIGraphObjectManager@@PEAVAnimatable@@HK@Z
?SvSetName@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@AEBVWStr@@@Z
?SvRemoveThis@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvLinkChild@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@1@Z
?SvIsSelected@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvHighlightColor@Modifier@@UEAAKPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvHandleDoubleClick@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvGetName@Modifier@@UEAA?AVWStr@@PEAVIGraphObjectManager@@PEAVIGraphNode@@_N@Z
?SvGetMultiSelectCallback@Modifier@@UEAAPEAVMultiSelectCallback@@PEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanSetName@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanSelect@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanRemoveThis@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanInitiateLink@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@@Z
?SvCanConcludeLink@Modifier@@UEAA_NPEAVIGraphObjectManager@@PEAVIGraphNode@@1@Z
?SetName@Modifier@@UEAAXVWStr@@@Z
?Save@Modifier@@UEAA?AW4IOResult@@PEAVISave@@@Z
?LocalValidity@Modifier@@UEAA?AVInterval@@H@Z
?Load@Modifier@@UEAA?AW4IOResult@@PEAVILoad@@@Z
?GetName@Modifier@@UEBA?AVWStr@@_N@Z
?GetInterface@BaseObject@@UEAAPEAXK@Z
?GetInterface@BaseObject@@UEAAPEAVBaseInterface@@VInterface_ID@@@Z
?GetIDerivedObject@Modifier@@UEAAXPEAVModContext@@AEAPEAVIDerivedObject@@AEAH@Z
?EnumModContexts@Modifier@@UEAAXPEAVModContextEnumProc@@@Z
?EnableModInViews@Modifier@@UEAAXXZ
?EnableModInRender@Modifier@@UEAAXXZ
?EnableMod@Modifier@@UEAAXXZ
?DisableModInViews@Modifier@@UEAAXXZ
?DisableModInRender@Modifier@@UEAAXXZ
?DisableMod@Modifier@@UEAAXXZ
?CopyAdditionalChannels@Modifier@@UEAAXPEAVObject@@0@Z
?UpdateSels@BezierShape@@QEAAXH@Z
?NewSpline@BezierShape@@QEAAPEAVSpline3D@@HHH@Z
?InvalidateGeomCache@BezierShape@@QEAAXXZ
?Init@BezierShape@@QEAAXXZ
??0SplineKnot@@QEAA@HHAEBVPoint3@@00HHHHHHHHHK@Z
??1PolyShape@@QEAA@XZ
??0PolyShape@@QEAA@XZ
??1Modifier@@UEAA@XZ
??0Modifier@@QEAA@XZ
?theHold@@3VHold@@A
?PickAnimatable@PickModeCallback@@UEAAHPEAVAnimatable@@@Z
??1ObjectState@@QEAA@XZ
??0ObjectState@@QEAA@AEBV0@@Z
?ApplyScaling@@YAXAEAVMatrix3@@AEBVScaleValue@@@Z
?GetTicksPerFrame@@YAHXZ
?DoEnumDependents@ReferenceTarget@@QEAAHPEAVDependentEnumProc@@@Z
??1DependentEnumProc@@MEAA@XZ
??0DependentEnumProc@@IEAA@XZ
?Accept@Hold@@QEAAXPEB_W@Z
?Begin@Hold@@QEAAXXZ
?ReleaseICustButton@@YAXPEAVICustButton@@@Z
?GetICustButton@@YAPEAVICustButton@@PEAUHWND__@@@Z
?SetReference@ReferenceMaker@@MEAAXHPEAVReferenceTarget@@@Z
?ReleaseISpinner@@YAXPEAVISpinnerControl@@@Z
?GetISpinner@@YAPEAVISpinnerControl@@PEAUHWND__@@@Z
?defaultDim@@3PEAVParamDimension@@EA
?ShallowCopy@Object@@UEAAXPEAV1@K@Z
?UpdatePerViewItems@BaseObject@@UEAA_NAEBVUpdateDisplayContext@Graphics@MaxSDK@@AEAVUpdateNodeContext@34@AEAVUpdateViewContext@34@AEAVIRenderItemContainer@34@@Z
?UpdatePerNodeItems@BaseObject@@UEAA_NAEBVUpdateDisplayContext@Graphics@MaxSDK@@AEAVUpdateNodeContext@34@AEAVIRenderItemContainer@34@@Z
?SpecifySaveReferences@ReferenceMaker@@UEAA_NAEAVReferenceSaveManager@@@Z
?MouseCycleCompleted@Animatable@@UEAAXH@Z
?SvTraverseAnimGraph@Object@@UEAA?AVSvGraphNodeReference@@PEAVIGraphObjectManager@@PEAVAnimatable@@HK@Z

geom

??HPoint3@@QEBA?AV0@AEBV0@@Z
?Invert@Matrix3@@QEAAXXZ
??0Point3@@QEAA@XZ
??0Point3@@QEAA@MMM@Z
?Length@Point3@@QEBAMXZ
??YPoint3@@QEAAAEAV0@AEBV0@@Z
??_0Point3@@QEAAAEAV0@M@Z
??LPoint3@@QEBAMAEBV0@@Z
?RotateY@Matrix3@@QEAAXM@Z
?GetAddr@Matrix3@@QEAAPEAY02MXZ
?RotateX@Matrix3@@QEAAXM@Z
?Intersects@Box3@@QEBA_NAEBV1@@Z
?Contains@Box3@@QEBA_NAEBV1@@Z
?Contains@Box3@@QEBA_NAEBVPoint3@@@Z
?IncludePoints@Box3@@QEAAXPEBVPoint3@@HPEAVMatrix3@@@Z
?MakeCube@Box3@@QEAAXAEBVPoint3@@M@Z
?MaxComponent@Point3@@QEBAHXZ
??APoint3@@QEAAAEAMH@Z
?RotateZ@Matrix3@@QEAAXM@Z
??0Matrix3@@QEAA@AEBVPoint3@@000@Z
?ClearIdentFlag@Matrix3@@QEAAXI@Z
??TPoint3@@QEBA?AV0@AEBV0@@Z
?Normalize@Point3@@QEBA?AV1@XZ
??GPoint3@@QEBA?AV0@XZ
??ABox3@@QEBA?AVPoint3@@H@Z
?SetRow@Matrix3@@QEAAXHVPoint3@@@Z
?GetRow@Matrix3@@QEBA?AVPoint3@@H@Z
??D@YA?AVPoint3@@AEBVMatrix3@@AEBV0@@Z
??XPoint3@@QEAAAEAV0@M@Z
??YBox3@@QEAAAEAV0@AEBV0@@Z
??0Box3@@QEAA@XZ
?PreRotateMatrix@@YAXAEAVMatrix3@@AEBVQuat@@@Z
??DMatrix3@@QEBA?AV0@AEBV0@@Z
??0IPoint2@@QEAA@XZ
?PreTranslate@Matrix3@@QEAAXAEBVPoint3@@@Z
?GetTrans@Matrix3@@QEBAAEBVPoint3@@XZ
??0Matrix3@@QEAA@_N@Z
??0Matrix3@@QEAA@XZ
??ZPoint3@@QEAAAEAV0@AEBV0@@Z
??YBox3@@QEAAAEAV0@AEBVPoint3@@@Z
?Init@Box3@@QEAAXXZ
?SetTrans@Matrix3@@QEAAXAEBVPoint3@@@Z
?IdentityMatrix@Matrix3@@QEAAXXZ
??D@YA?AVPoint3@@AEBV0@AEBVMatrix3@@@Z
??DPoint3@@QEBA?AV0@AEBV0@@Z
??0Point3@@QEAA@HHH@Z
??GPoint3@@QEBA?AV0@AEBV0@@Z

kernel32

InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
ReleaseSemaphore
GetSystemTimeAsFileTime
SetHandleInformation
GetComputerNameExW
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
CreateFileMappingW
FreeEnvironmentStringsW
GetEnvironmentStringsW
FindNextFileW
WriteConsoleW
GetConsoleMode
SetStdHandle
GetStdHandle
SystemTimeToFileTime
GetSystemTime
DuplicateHandle
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileSize
FileTimeToLocalFileTime
MoveFileExW
SetFileAttributesW
GetFullPathNameW
GetFileTime
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetExitCodeThread
TerminateThread
ExitThread
SetThreadPriority
GetCurrentThreadId
CreateThread
Sleep
RaiseException
LoadLibraryA
FreeLibrary
GetSystemDirectoryA
SetConsoleCtrlHandler
GetCurrentProcessId
FormatMessageW
GetModuleHandleW
SetLastError
GetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
CreateSemaphoreW
WaitForMultipleObjects
CreateMutexW
ReleaseMutex
InitializeSListHead
ResetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcAddress
GetSystemDirectoryW
GetCurrentProcess
GetModuleHandleA
DisableThreadLibraryCalls
CloseHandle
CreateEventW
WaitForSingleObject
SetEvent
GetSystemInfo

user32

MsgWaitForMultipleObjects
ShowWindow
CreateWindowExA
UpdateWindow
UnregisterClassA
RegisterClassA
DefWindowProcA
PostMessageA
EnableWindow
LoadCursorA
LoadIconA
MessageBoxA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadStringW
MessageBeep
GetClientRect
InvalidateRect
ReleaseCapture
SetCapture
RegisterClassW
DefWindowProcW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowLongPtrW
GetWindowLongPtrW
MessageBoxW
EndPaint
BeginPaint
CheckDlgButton
SetDlgItemTextA
GetDlgItem
SetWindowTextA

gdi32

SetDCBrushColor
Rectangle
GetStockObject
CreatePen
Ellipse
SetDCPenColor
MoveToEx
SetTextColor
SetBkMode
SelectObject
LineTo
TextOutA

advapi32

GetOldestEventLogRecord
OpenEventLogW
ReadEventLogA
DeregisterEventSource
ReportEventW
CloseEventLog

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

ws2_32

htons
recv
WSASetLastError
connect
closesocket
WSAGetLastError
accept
shutdown
WSAStartup
WSACleanup
getsockopt
setsockopt
WSACreateEvent
WSAEventSelect
socket
getservbyport
htonl
inet_addr
WSAIoctl
inet_ntoa
__WSAFDIsSet
bind
ntohs
getservbyname
gethostbyaddr
ioctlsocket
getpeername
getsockname
gethostbyname
listen
select
WSAEnumNetworkEvents
recvfrom
sendto
send

vcruntime140

_CxxThrowException
memcpy
__std_terminate
__C_specific_handler
memmove
__std_exception_copy
__std_exception_destroy
_purecall
__std_type_info_destroy_list
memset
memcmp
strstr
strchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
_open_osfhandle
_dup2
fflush
__stdio_common_vsprintf_s
_close
__stdio_common_vsprintf
_dup

api-ms-win-crt-math-l1-1-0

cosf
tanf
fabs
sqrtf
expf
floor
sinf
asinf

api-ms-win-crt-runtime-l1-1-0

_beginthread
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
_cexit
abort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

strnlen
strncpy
tolower
strncpy_s
strcat_s
isalpha
isupper
strcpy_s
isdigit
isspace

api-ms-win-crt-heap-l1-1-0

realloc
calloc
_callnewh
free
malloc

api-ms-win-crt-time-l1-1-0

_mktime64
_localtime64
_gmtime64
_time64
asctime

api-ms-win-crt-convert-l1-1-0

_ecvt
wctomb
_fcvt
strtoul
mbtowc

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-utility-l1-1-0

rand

Exports

Exports

??0MNChannelContainer@MaxSDK@@QEAA@PEAVMNMesh@@@Z
??0NURBSTrimPoint@@QEAA@NW4NURBSTrimDirection@@@Z
??1MNChannelContainer@MaxSDK@@QEAA@XZ
?GetChannel@NURBSTextureChannel@@AEAAHXZ
?GetDirection@NURBSTrimPoint@@QEAA?AW4NURBSTrimDirection@@XZ
?GetParameter@NURBSTrimPoint@@QEAANXZ
?GetTextureSurface@NURBSTextureChannel@@AEAAAEAVNURBSTextureSurface@@XZ
?MAlloc@MNMesh@@AEAAXH_N@Z
?MShrink@MNMesh@@AEAAXH@Z
LibClassDesc
LibDescription
LibNumberClasses
LibVersion
SetupBusStopParamBlocks
SetupCrossModParamBlocks
SetupObstacleParamBlocks
SetupParkingParamBlocks
SetupRoadModParamBlocks
SetupSpeedLimiterParamBlocks
SetupStopLineParamBlocks
saloModuleInternalsFree
saloModuleInternalsVer

Sections

.text
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

".cl."1
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

".cl."2
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

".cl."3
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

".cl."4
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

".cl."5
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

".cl."6
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

".cl."7
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4eef5806e63e315b0d1e7a2fb8bd2880

Code Sign

11:ea:9b:47:ed:c5:35:77:34:0f:a1:4e:14:7e:91:32Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

61:0c:12:06:00:00:00:00:00:1bCertificate

Key Usages

78:51:2f:c7:c7:aa:c3:0bCertificate

Extended Key Usages

Key Usages

78:51:2f:c7:c7:aa:c3:0bCertificate

Extended Key Usages

Key Usages

78:51:2f:c7:c7:aa:c3:0bCertificate

Extended Key Usages

Key Usages

78:51:2f:c7:c7:aa:c3:0bCertificate

Extended Key Usages

Key Usages

78:51:2f:c7:c7:aa:c3:0bCertificate

Extended Key Usages

Key Usages

39:85:0d:35:b4:f3:d8:9bCertificate

Extended Key Usages

Key Usages

39:85:0d:35:b4:f3:d8:9bCertificate

Extended Key Usages

Key Usages

39:85:0d:35:b4:f3:d8:9bCertificate

Extended Key Usages

Key Usages

39:85:0d:35:b4:f3:d8:9bCertificate

Extended Key Usages

Key Usages

39:85:0d:35:b4:f3:d8:9bCertificate

Extended Key Usages

Key Usages

6f:52:aa:02:26:9d:a6:43:4e:49:cc:56:eb:fa:b0:89:50:56:06:f8Signer

Headers

DLL Characteristics

File Characteristics

Imports

gfx

maxutil

paramblk2

core

geom

kernel32

user32

gdi32

advapi32

msvcp140

ws2_32

vcruntime140

vcruntime140_1

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 650KB - Virtual size: 650KB

".cl."1 Size: 512B - Virtual size: 512B

".cl."2 Size: 512B - Virtual size: 512B

".cl."3 Size: 512B - Virtual size: 512B

11:ea:9b:47:ed:c5:35:77:34:0f:a1:4e:14:7e:91:32
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

78:51:2f:c7:c7:aa:c3:0b
Certificate

78:51:2f:c7:c7:aa:c3:0b
Certificate

78:51:2f:c7:c7:aa:c3:0b
Certificate

78:51:2f:c7:c7:aa:c3:0b
Certificate

78:51:2f:c7:c7:aa:c3:0b
Certificate

39:85:0d:35:b4:f3:d8:9b
Certificate

39:85:0d:35:b4:f3:d8:9b
Certificate

39:85:0d:35:b4:f3:d8:9b
Certificate

39:85:0d:35:b4:f3:d8:9b
Certificate

39:85:0d:35:b4:f3:d8:9b
Certificate

6f:52:aa:02:26:9d:a6:43:4e:49:cc:56:eb:fa:b0:89:50:56:06:f8
Signer

.text
Size: 650KB - Virtual size: 650KB

".cl."1
Size: 512B - Virtual size: 512B

".cl."2
Size: 512B - Virtual size: 512B

".cl."3
Size: 512B - Virtual size: 512B

".cl."4
Size: 512B - Virtual size: 512B

".cl."5
Size: 512B - Virtual size: 512B

".cl."6
Size: 512B - Virtual size: 512B

".cl."7
Size: 512B - Virtual size: 512B

.rdata
Size: 260KB - Virtual size: 260KB

.data
Size: 320KB - Virtual size: 340KB

.pdata
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 22KB - Virtual size: 22KB

.reloc
Size: 10KB - Virtual size: 10KB