46192667cc7d687d897b0ef190a9283932f8e2a7c61bcb8ca7532db56e7fe14f

Sharing

Copy URL

Twitter E-mail

General

Target

46192667cc7d687d897b0ef190a9283932f8e2a7c61bcb8ca7532db56e7fe14f
Size

69KB
MD5

b9a33ed64e80b142e7ddc0cd036ed4bf
SHA1

bfaa21b84ae07491bb8d27455ab4cd6c17ad291f
SHA256

46192667cc7d687d897b0ef190a9283932f8e2a7c61bcb8ca7532db56e7fe14f
SHA512

0992a804b45445e2ab8f584b90098df54461268fee6fb054739fa1f3e649c6e1ac38552a6e0d876342e9422a9f40021a62f5a077cb4047c6da3c6997b066afea
SSDEEP

1536:dpAIRY9obVkXMFqzlvhzJyTLN4h7NvYlb6NEvK5wOfl6Gz:H/RY901FqJvhzMN67NvYlDK5wOfl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46192667cc7d687d897b0ef190a9283932f8e2a7c61bcb8ca7532db56e7fe14f

Files

46192667cc7d687d897b0ef190a9283932f8e2a7c61bcb8ca7532db56e7fe14f
.dll windows:5 windows x86 arch:x86

728279d54d179e3321a6f9da97aaab5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nms.ave.algcore.common

??0IParam@Common@Core@AVE@NMS@@QAE@XZ
?SetTranslate@mippVolumeTransform@Common@Core@AVE@NMS@@QAEXMMM@Z
?SetRotate@mippVolumeTransform@Common@Core@AVE@NMS@@QAEXMMMMMMM@Z
?GetTranslateZ@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetTranslateY@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetTranslateX@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetRotateVectorZ@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetRotateVectorY@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetRotateVectorX@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetRotateAngle@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetRotateCenterZ@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetRotateCenterY@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetRotateCenterX@mippVolumeTransform@Common@Core@AVE@NMS@@QAEMXZ
?GetVolTransform@mippSingleVolData@Common@Core@AVE@NMS@@QAEPAVmippVolumeTransform@2345@XZ
?GetSliceThickness@mippSingleVolDataInfo@Common@Core@AVE@NMS@@QBEMXZ
?GetHeightFov@mippSingleVolDataInfo@Common@Core@AVE@NMS@@QBEMXZ
?GetWidthFov@mippSingleVolDataInfo@Common@Core@AVE@NMS@@QBEMXZ
?GetDataInfo@mippSingleVolData@Common@Core@AVE@NMS@@QAEPAVmippSingleVolDataInfo@2345@XZ
?GetData16@mippSingleVolData@Common@Core@AVE@NMS@@QAEPAPAFXZ
??1IParam@Common@Core@AVE@NMS@@UAE@XZ
?GetSliceSpacing@mippSingleVolDataInfo@Common@Core@AVE@NMS@@QBEMXZ
?GetSliceNum@mippSingleVolDataInfo@Common@Core@AVE@NMS@@QBEHXZ
?GetSliceHeight@mippSingleVolDataInfo@Common@Core@AVE@NMS@@QBEHXZ
?GetSliceWidth@mippSingleVolDataInfo@Common@Core@AVE@NMS@@QBEHXZ

msvcp100

?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

msvcr100

memcpy
__CxxFrameHandler3
_CxxThrowException
__RTDynamicCast
_CIexp
_CIlog
_CIsqrt
_CIcos
_CIasin
_CIsin
memset
_CIacos
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
_CIatan
memmove
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
ceil
exit
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
??3@YAXPAX@Z

kernel32

EncodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DecodePointer

Exports

Exports

??0mippRegistrationAlgorithm@@QAE@ABV0@@Z
??0mippRegistrationAlgorithm@@QAE@XZ
??0mippRiRegistrationAlgAdapter@Registration@Core@AVE@NMS@@QAE@XZ
??0mippRiRegistrationParam@Registration@Core@AVE@NMS@@QAE@ABV01234@@Z
??0mippRiRegistrationParam@Registration@Core@AVE@NMS@@QAE@XZ
??1mippRegistrationAlgorithm@@UAE@XZ
??1mippRiRegistrationAlgAdapter@Registration@Core@AVE@NMS@@QAE@XZ
??1mippRiRegistrationParam@Registration@Core@AVE@NMS@@UAE@XZ
??4mippRegistrationAlgorithm@@QAEAAV0@ABV0@@Z
??4mippRiRegistrationAlgAdapter@Registration@Core@AVE@NMS@@QAEAAV01234@ABV01234@@Z
??4mippRiRegistrationParam@Registration@Core@AVE@NMS@@QAEAAV01234@ABV01234@@Z
??_7mippRegistrationAlgorithm@@6B@
??_7mippRiRegistrationParam@Registration@Core@AVE@NMS@@6B@
?GetFloVolData@mippRiRegistrationParam@Registration@Core@AVE@NMS@@QAEPAVmippSingleVolData@Common@345@XZ
?GetRefVolData@mippRiRegistrationParam@Registration@Core@AVE@NMS@@QAEPAVmippSingleVolData@Common@345@XZ
?RegRun@mippRiRegistrationAlgAdapter@Registration@Core@AVE@NMS@@QAEHXZ
?SetFloVolData@mippRiRegistrationParam@Registration@Core@AVE@NMS@@QAEXPAVmippSingleVolData@Common@345@@Z
?SetParam@mippRiRegistrationAlgAdapter@Registration@Core@AVE@NMS@@QAEHPAVIParam@Common@345@@Z
?SetRefVolData@mippRiRegistrationParam@Registration@Core@AVE@NMS@@QAEXPAVmippSingleVolData@Common@345@@Z

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

728279d54d179e3321a6f9da97aaab5d

Headers

DLL Characteristics

File Characteristics

Imports

nms.ave.algcore.common

msvcp100

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB