89b70fc5c9ed8f79f035acfa53f121033c2f90c7a1c383efd95390c5c7c58799

Sharing

Copy URL Twitter E-mail

General

Target

89b70fc5c9ed8f79f035acfa53f121033c2f90c7a1c383efd95390c5c7c58799
Size

3.5MB
MD5

912d5b7a2a7cd5d1efd72326d8f9f6d6
SHA1

840e3b5a7982b1d69161e9452136d60d215f3fcb
SHA256

89b70fc5c9ed8f79f035acfa53f121033c2f90c7a1c383efd95390c5c7c58799
SHA512

dbb09fc047e486e46bf710c02d1cc44fb61d2c43b15d120a40bf7caa0e6862b8c5f26f1ce48846ac618e6cd7515f26a18400fe138504760a7cd3f9bccb802660
SSDEEP

98304:iZSvY65efqB3kHXch9f8bVK+qn9D36W1uyGiAOqkCQDp2:iZSwFfqB0y1yVK+qB36MuRsqkCQDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89b70fc5c9ed8f79f035acfa53f121033c2f90c7a1c383efd95390c5c7c58799

Files

89b70fc5c9ed8f79f035acfa53f121033c2f90c7a1c383efd95390c5c7c58799
.dll windows:5 windows x64 arch:x64

ab1db247893b2969078c49b5df87a541

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\WiseCAM-Restrict\src\NestProfessional\x64\Release\NestProfessional.pdb

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

advapi32

GetAce

iphlpapi

GetIfTable

shell32

ILFree

hid

HidP_GetCaps

setupapi

SetupInstallFileA

dhcpcsvc

DhcpIsEnabled

dhcpcsvc6

Dhcpv6IsEnabled

psapi

EnumProcesses

wsock32

bind

msvcp100

?_Xlength_error@std@@YAXPEBD@Z

msvcr100

tan

nesttargets

??0AuthenticationConfig@authentication@@QEAA@XZ

shlwapi

PathAppendA

Exports

Exports

AddPoly
AddPolyNode
AppendAuxilaryPolyline_WH
AppendBatch_WH
AppendMaterialInnerHole_WH
AppendMaterialPolyline_WH
AppendMaterial_WH
AppendPartCoEdge_WH
AppendPartInnerHole_WH
AppendPartPolyline_WH
AppendPart_WH
AppendPolylineNode_WH
AppendTask_WH
BeginAddPoly
BuildBatch_WH
BuildCustomPartID_WH
BuildMaterial_WH
BuildPart_WH
BuildPolyline_WH
BuildTask_WH
CGALOuterNofitPolygon
CreateNestTask_WH
DeleteBatch_WH
DeleteNestTask_WH
DeletePart_WH
DeleteTask_WH
GetArea
GetBatchList_WH
GetBatchResultVectorSize_WH
GetBatchResultVector_WH
GetBatchResult_WH
GetBatchSize_WH
GetBatch_WH
GetError_WH
GetMinTransferXY
GetNestSheetMaterialInfo_WH
GetNestSheetStrategy_WH
GetNestSheet_WH
GetNestStatus_WH
GetPlacementPartInfo_WH
GetPlacementVectorSize_WH
GetPlacement_WH
GetProgress_WH
GetTaskResultNestSheetVector_WH
GetTaskResultSheetCount_WH
GetTaskResultSize_WH
GetTaskResult_WH
GetTaskResultunNestMaterial_WH
GetTaskResultunNestParts_WH
InitNestTask_WH
InitNest_WH
OpenJsonFile
OuterNofitPolygon
OuterNofitPolygonList
SaveJsonFile
SetAccessType_WH
SetPartDistanceCompensation
ShowAddPoly
ShowAddPolyVec
StartNest_WH
StopNest_WH
WaitStop_WH

Sections

.AKS1
Size: 672KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AKS2
Size: 2.8MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AKS3
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ab1db247893b2969078c49b5df87a541

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

iphlpapi

shell32

hid

setupapi

dhcpcsvc

dhcpcsvc6

psapi

wsock32

msvcp100

msvcr100

nesttargets

shlwapi

Exports

Exports

Sections

.AKS1 Size: 672KB - Virtual size: 1.5MB

.AKS2 Size: 2.8MB - Virtual size: 4.0MB

.AKS3 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.AKS1
Size: 672KB - Virtual size: 1.5MB

.AKS2
Size: 2.8MB - Virtual size: 4.0MB

.AKS3
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB