9c9624714c6704da427b776e66b89870c8c71d90aece61c9c4a9cf11d8a8ab5c

Sharing

Copy URL Twitter E-mail

General

Target

9c9624714c6704da427b776e66b89870c8c71d90aece61c9c4a9cf11d8a8ab5c
Size

2.7MB
MD5

970c50db713e45da10eacf377c6895cb
SHA1

9a0a81be335522b63608b0f8d6b999ccbe3bf716
SHA256

9c9624714c6704da427b776e66b89870c8c71d90aece61c9c4a9cf11d8a8ab5c
SHA512

df0510ed01eeef89f9b49b6f9fc2ffd9ab162894deda1d241a20276d3fbabd5d17427926d464f1e0972197807c009d871692c8fde7d8e35638753188cea1f389
SSDEEP

49152:Lp83cnsifLIc9ow51EI5n2/HBwM5G9yceaIgHc6cUpy0+wPpNcRZs++tcmtT:Lp8GzeWn2XYlI6cUpy9wRePsPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c9624714c6704da427b776e66b89870c8c71d90aece61c9c4a9cf11d8a8ab5c

Files

9c9624714c6704da427b776e66b89870c8c71d90aece61c9c4a9cf11d8a8ab5c
.dll windows:4 windows x86 arch:x86

4cc4422217060411d2f2866b4a787b33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_unlock
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
??3@YAXPAX@Z
_errno
_snprintf
memset
memcpy
memmove
free
malloc
isspace
strncmp
_telli64
strstr
__iob_func
rewind
rename
_findfirst64i32
remove
feof
fputs
fgetc
_fdopen
_filelengthi64
fwrite
ftell
_close
_write
_lseeki64
_read
atoi
_open
_fseeki64
atof
fseek
fread
strrchr
_beginthreadex
ceil
floor
_localtime64
_time64
strncpy
tolower
toupper
atol
fprintf
fclose
fgets
fopen
sprintf
strchr
_crt_debugger_hook

gdi32

SetTextAlign
ExtTextOutA
EndPage
EndDoc
DeleteObject
DeleteDC
StartDocA
MoveToEx
LineTo
SetPixelV
SetDIBitsToDevice
GetDIBits
GetDeviceCaps
CreateFontA
SelectObject
GetTextMetricsA
CreatePen
SetTextColor
StartPage

user32

SendMessageA
FindWindowA
CharUpperA
PeekMessageA

ole32

CoUninitialize
CoTaskMemFree
CoInitialize

kernel32

FindFirstFileA
GetSystemTime
GetTickCount
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateProcessA
GetCommandLineA
WaitForSingleObject
HeapAlloc
HeapCompact
GetProcessHeaps
FindClose
GetTempPathA
GlobalFree
GlobalSize
GlobalMemoryStatus
GlobalAlloc
ReadFile
GetComputerNameA
GetLocalTime
CloseHandle
WriteFile
SetFilePointer
CreateFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
WideCharToMultiByte
CopyFileA
FormatMessageA
GetThreadLocale
LoadLibraryA
InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTempFileNameA
OpenFileMappingA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
PrintDlgA

shell32

SHGetFolderPathA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

mpr

WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetGetUniversalNameA

netapi32

NetApiBufferFree
NetShareEnum

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ustation

?AddViewTransientHandler@IViewManager@Ustn@Bentley@@QAEXPAUIViewTransients@23@@Z
?SetRotation@IAuxCoordSys@Ustn@Bentley@@QAEHABUrotMatrix@@@Z
?SetType@IAuxCoordSys@Ustn@Bentley@@QAEHW4ACSType@23@@Z
?GetViewInfo@Viewport@Ustn@Bentley@@QBEPAUViewInfo@23@XZ
mdlView_updateViewInfo
mdlViewInfo_setFlags
mdlColor_rgbToHsv
mdlVersion_getVersionNumbers
mdlSystem_pumpMessages
mdlOutput_printf
mdlDialog_openCompletionBar
mdlDialog_show
mdlDialog_closeCompletionBar
mdlView_pointToScreen
mdlWindow_viewWindowGet
mdlWindow_contentRectGetLocal
mdlColorPal_getColorDescr
mdlWindow_lineStyleSetCD
mdlWindow_pointDraw
mdlCExpression_getValue
mdlModelRef_getActive
mdlModelRef_getGlobalOrigin
mdlModelRef_getUorPerMaster
mdlModelRef_getMasterUnit
mdlColor_elementColorToRGB
mdlView_screenToPoint
mdlView_getParameters
mdlView_getDisplayControl
mdlView_getCamera
mdlView_getViewRectangle
mdlView_getLevelDisplayMask
mdlLevel_getIdFromCode
mdlDialog_updateCompletionBar
mdlColor_elementColorFromRGB
mdlColorPal_create
mdlColorPal_destroy
mdlColorDescr_setByRgb
mdlWindow_nativeWindowHandleGet
?SetOrigin@IAuxCoordSys@Ustn@Bentley@@QAEHABU_dPoint3d@@@Z
mdlLevelLibrary_getModelRef
mdlCnv_convertMultibyteToUnicode
mdlLevel_create
mdlLevelTable_rewrite
mdlText_create
mdlElement_setProperties
mdlElement_setSymbology
mdlElement_display
mdlElement_add
mdlText_extractShape
mdlEllipse_create
mdlLine_create
dlmSystem_callMdlFunction
mdlLineString_create
?GetIPickGeom@ViewContext@Ustn@Bentley@@QAEPAUIPickGeom@23@XZ
?GetViewport@ViewContext@Ustn@Bentley@@QBEPAUViewport@23@XZ
?GetIViewDraw@ViewContext@Ustn@Bentley@@QAEPAUIViewDraw@23@XZ
?GetViewNumber@Viewport@Ustn@Bentley@@QBEHXZ
?GetViewBox@Viewport@Ustn@Bentley@@QBEXPAU_dPoint3d@@W4MstnCoordSystem@@_N@Z
?GetDrawPurpose@ViewContext@Ustn@Bentley@@QBE?AW4DrawPurpose@@XZ
?GetPixelSizeAtPoint@Viewport@Ustn@Bentley@@QAENPBU_dPoint3d@@W4MstnCoordSystem@@@Z
?GetContrastToBackgroundColor@Viewport@Ustn@Bentley@@QBEIXZ
?GetDrawViewFlags@IDrawGeom@Ustn@Bentley@@QAEPBUviewflags@@XZ
?SetSymbology@IViewDraw@Ustn@Bentley@@QAEXHHHH@Z
?DrawPointCloud@IDrawGeom@Ustn@Bentley@@QAEXPAUIPointCloudDrawParams@23@@Z
?DrawRaster@IDrawGeom@Ustn@Bentley@@QAEXQBU_dPoint3d@@HHHHHPBEPBU4@@Z
mdlView_getFlags
?GetOverrideMatSymb@ViewContext@Ustn@Bentley@@QAEPAUOvrMatSymb@23@XZ
?SetTransparentFillColor@OvrMatSymb@Ustn@Bentley@@QAEXI@Z
?ActivateOverrideMatSymb@ViewContext@Ustn@Bentley@@QAEXXZ
?GetManager@IViewManager@Ustn@Bentley@@SAAAU123@XZ
?DropViewTransientHandler@IViewManager@Ustn@Bentley@@QAEXPAUIViewTransients@23@@Z
mdlView_getViewport
?GetManager@IACSManager@Ustn@Bentley@@SAAAU123@XZ
?GetActive@IACSManager@Ustn@Bentley@@QAEPAUIAuxCoordSys@23@PAUViewport@23@@Z
mdlViewInfo_getFlags

toolsubs

mdlBitMask_getHighestBit
mdlBitMask_setBit
mdlBitMask_getBit
mdlBitMask_create
mdlBitMask_free

msbspline

mdlBspline_freeSurface
mdlBspline_minimumDistanceToSurface

Exports

Exports

AbortClear
AbortEnd
AbortRaise
AbortStart
Aborted
AccFindPos
AccTimeRange
AddonSetPassword
AdiLstAdd
AdiLstAlloc
AdiLstEmpty
AdiLstFind
AdiLstFree
AdiLstRemove
AdiSwapDir
AngEdgeFindClosest
AngEdgeSort
AngleFix
AngleGetBase
AskelProsentti
AttAdd
AttAlloc
AttConvertFromRad
AttConvertFromTopEye
AttEmpty
AttFindChain
AttFixBegEnd
AttFree
AttInterpolatePos
AttParseFld
AverBackGround
AverMeanErr
AverScanProfTbls
BitStreamGet
BldAddAngleGraph
BldAddNormalGraph
BldAddPlane
BldAddPnt
BldAddRange
BldAddToLine
BldAddToSum
BldAddToSumWgt
BldAnyPointsClose
BldAreaEnough
BldAssignMarked
BldAttemptAll
BldAttemptDiffer
BldAttemptMarked
BldAveDist
BldAveTurnAngle
BldAverageFlag
BldBoundAngle
BldBoundAngleTry
BldBoundRect
BldBoundRectIp
BldBoundariesNearby
BldBuildingLim
BldCalcPlane
BldCalcPlaneDir
BldChangeGroup
BldClassifyPts
BldCnvToLine
BldCompactBaseline
BldCompactBest
BldCompactMaxVal
BldCompactOffsets
BldCompactValue
BldComputeAveZ
BldComputeBoundDirs
BldComputeOnlyRatio
BldComputePlanarityRatio
BldCountCodePlane
BldCountMarked
BldCreateNormalGraph
BldDeleteDups
BldDeleteExt
BldDeleteLinearXy
BldDeletePlane
BldDeleteVertices
BldDirRangePts
BldEatCompact
BldEatCutBeg
BldEatCutEdge
BldEatCutEnd
BldEatLinePts
BldEatMaxCut
BldEatRectangular
BldEdgeSum
BldElevDiffer
BldEquateFit
BldEquateFitLine
BldEquateMarkedCplx
BldEquateMarkedPts
BldEquateRemovePnt
BldExcludeDetails
BldFigCloseInd
BldFigCloseMark
BldFigCloseToPnt
BldFigInit
BldFillAngleGraph
BldFilterInit
BldFindAngleGraphMax
BldFindBuildings
BldFindCircleMark
BldFindClosestAngle
BldFindClosestNormal
BldFindDirId
BldFindGraphMax
BldFindPlaneId
BldFindPnt
BldFindTrees
BldFindWorst
BldFitPlane
BldFixAngle
BldFlagGood
BldFree
BldFreeDirId
BldFreeSymId
BldGatherSurfacePts
BldGatherTablePts
BldGetAllPts
BldGetMarkedPts
BldGetPlanePts
BldGoodGroup
BldGraphPosNormal
BldGroupBase
BldGroupCount
BldInit
BldIsPlaneNeighbour
BldLeftSide
BldLineDst
BldLineToPlaEqt
BldMarkAll
BldMarkAssigned
BldMarkBadNormals
BldMarkBoundary
BldMarkByAngle
BldMarkByNormal
BldMarkCircle
BldMarkClose
BldMarkCloseFig
BldMarkExpansion
BldMarkFar
BldMarkHoles
BldMarkInside
BldMarkMarked
BldMarkOutside
BldMarkPlane
BldMarkPts
BldMarkSteep
BldMarkWalls
BldNearbyBoundary
BldNeighMinMax
BldNewPlaneId
BldNormalMatch
BldPerimeter
BldPlanarityEquate
BldPlanarityRatio
BldPlanarityRemovable
BldPlaneAngle
BldPlaneAreaSum
BldPlaneBoundBox
BldPlaneCmp
BldPlaneDir
BldPlaneDst
BldPlaneDz
BldPlaneElevatePts
BldPlaneFlagAll
BldPlaneFlagDir
BldPlaneMarkAll
BldPlaneMarkDir
BldPlaneMarkSym
BldPlaneModel
BldPlaneNormal
BldPlanePtInside
BldPlaneZ
BldPlanesIntersect
BldPlnAlloc
BldPlnEmpty
BldPlnFree
BldPntAlloc
BldPntFindXy
BldPntFree
BldPointClose
BldProcessGroup
BldRangeFix
BldRangeMarked
BldReassignPts
BldSameAttempt
BldShapeCenter
BldSortGroup
BldSortPlanes
BldSortPtsPlane
BldSortPtsZ
BldSortVrtCmp
BldSortVrtXy
BldSubFromLine
BldSubFromSum
BldSubFromSumWgt
BldSumAdd
BldSumInit
BldTreeGroup
BldTreeLim
BldWorstDst
BlkBoundOverlap
BlkComparisonName
BlkComputeArea
BlkComputeRange
BlkCountFlagged
BlkDeleteFlagged
BlkEmpty
BlkExpandBound
BlkExpandBoundIp
BlkFieldMatch
BlkFindBoundary
BlkFindFileName
BlkFindFlagRange
BlkFindIp
BlkFindKeyin
BlkFindMinFlag
BlkFindPass
BlkFindPnt
BlkFlagAll
BlkFlagIntersect
BlkFlagOutControl
BlkFreePass
BlkGetFile
BlkGetFileNumber
BlkGetRange
BlkGetRangeIp
BlkGetVrtPtr
BlkIsRectangle
BlkMarkAll
BlkMarkFromFlag
BlkMarkOverlap
BlkNameFromFormula
BlkNamesMatch
BlkOverlap
BlkPntInside
BlkPrefixLen
BlkRangeAll
BlkRangeFlagged
BlkReadCount
BlkStatCompBlock
BlkStatCompLine
BlkTblSort
BlkVerticesDp
BlkVerticesDpAlloc
BlkVerticesIp
BlkVrtAlloc
BlkVrtFree
BmpComputeRotation
BmpLstAdd
BmpLstAddBmp
BmpLstAlloc
BmpLstCreate
BmpLstDeleteMarked
BmpLstFree
BmpLstSort
BmpSortCmp
BndVrtComputeConvex
BndVrtComputeDirect
BndVrtComputeSect
BplCountPoints
BpoLstAdd
BpoLstAlloc
BpoLstCreate
BpoLstFree
BpoLstPurge
BrkBetterClose
BrkCombineDstVar
BrkCompAlloc
BrkCompFree
BrkCompInsSum
BrkComputeGrid
BrkComputeTriVal
BrkFillTranslation
BrkFindBest
BrkFindMedian
BrkFlagClose
BrkGetNormalZ
BrkInvalidateEdges
BrkLstAdd
BrkLstAlloc
BrkLstCreate
BrkLstFree
BrkMarkBestPlanar
BrkMarkMostPlanar
BrkNrmToEquation
BrkPlanesIntersect
BrkPntEmpty
BrkPolyIsEar
BrkPolygonTin
BrkPotBestConnection
BrkPotChainLen2d
BrkPotCollect
BrkPotCollectChain
BrkPotCompute
BrkPotDirection
BrkPotEmpty
BrkPotFigCircle
BrkPotFigInit
BrkPotGetDps
BrkPotLengthMul
BrkPotMarkCloseOut
BrkPotMarkRecomp
BrkPotNormalRating
BrkPotRateConnection
BrkPotRating
BrkPotRemoveLoners
BrkPotRemoveWeak
BrkPotReverseChain
BrkPotSetBest
BrkPotSetLen
BrkPotSort
BrkRemovePoint
BrkScaleByMedian
BrkTinAddTriangle
BrkTinBuild
BrkTinFree
BrkTinInit
BsgLstAddSect
BsgLstAlloc
BsgLstCreate
BsgLstFree
BusyPumpMessages
ButtonItemDxy
BvtLstAlloc
BvtLstAppend
BvtLstEmpty
BvtLstFree
BvtLstPrepend
CFDPeaks
CadMemAllocable
CadSystem
CadTopWindow
CamRowFields
CapComputeAve
CapComputeCount
CapComputeMax
CapFindByIndexes
CapFindClosest
CapFirstLast
CapResetShift
CapSortLast
CasComputeOrg
CbpFindLowestGround
CbpGroupCount
CbpGroupPolygons
CbpMoveGroup
CbpPolyInside
CbpSameXySegment
ChkAssignNumbers
ChkBldComputeCtr
ChkBldCopy
ChkBldFindNbr
ChkBldFree
ChkBldInit
ChkCatenaryVrt
ChkClosestCatenary
ChkCollectMark
ChkEdgLstAlloc
ChkEdgLstFree
ChkEdgeAdd
ChkEdgeAlloc
ChkEdgeCopy
ChkEdgeDelFlag
ChkEdgeDelMark
ChkEdgeDelete
ChkEdgeDeleteEpt
ChkEdgeDrw
ChkEdgeEmpty
ChkEdgeFindEpt
ChkEdgeFindId
ChkEdgeFindSmallest
ChkEdgeFix
ChkEdgeFlagAll
ChkEdgeFlagEmpty
ChkEdgeFree
ChkEdgeHasNbr
ChkEdgeInsertSeg
ChkEdgeInsertVrt
ChkEdgeMarkAll
ChkEdgeMarkEmpty
ChkEdgeMarkHoles
ChkEdgeMarkInternal
ChkEdgeMarkMasters
ChkEdgeMarkOrphan
ChkEdgeMarkOuter
ChkEdgeMarkSingleNbr
ChkEdgeMaxVct
ChkEdgeReassignHoles
ChkEdgeTop
ChkEdgeValidAb
ChkEdgeVrt
ChkEptAdd
ChkEptDir
ChkEptEqual
ChkEptFind
ChkEptFlagAll
ChkEptFlagEdge
ChkEptLinear
ChkEptLstAlloc
ChkEptLstFree
ChkEptMarkAll
ChkEptMarkEdge
ChkEptMnmx
ChkExtrudeLowest
ChkFindClosest
ChkFixGetBit
ChkFixSetBit
ChkNewPatchId
ChkNumberCmp
ChkPatAdd
ChkPatCollectNeigh
ChkPatDelMark
ChkPatDelete
ChkPatEmpty
ChkPatFindId
ChkPatLstAlloc
ChkPatLstFree
ChkPatMarkAll
ChkPlaneDirAngle
ChkRecompFlag
ChkRecompMark
ChkResetShift
ChkSectAveAngle
ChkSectBestDir
ChkSectDominantAngle
ChkSectOrg
ChkSectVertices
ChkSegDeleteMarked
ChkSegEmpty
ChkSegFind
ChkSegFlagAll
ChkSegMarkAll
ChkSortCatenaries
ChkSortNumber
ChkTowerFirstLast
ChrIsAlpha
ChrIsDigit
ChrIsSpace
ChrLower
ChrUpper
ChsLineDepth
ChvEptAddVote
ChvEptFlagAll
ChvEptFlagEdge
ChvEptInitSums
ChvEptMarkAll
ChvEptRangeFlag
ClipRectCombine
CloMarkCloseby
ClockGetDate
ClockGetTime
ClrAreEqual
ClrCompareRgb
ClrCompareVisual
ClrFindIndex
ClrHsvToRgb
ClrRgbSet
ClrRgbToHsv
ClrSetRgb
ClsTblFromStr
ClsTblSet
ClsTblToStr
ClsTblToValue
CodeEmpty
ColCloseCoverage
ColComputeLineProj
ColComputeLineVecs
ColComputeRanges
ColConvertVectors
ColFillLineUsage
ColFlagRangeLaps
ColMarkBack
ColMarkBackCube
ColMarkCloseOther
ColMarkClosePts
ColMarkFarPts
ColMarkKeepPts
ColMarkLaps
CompletionBarClose
CompletionBarOpen
CopFindTimeRange
CopProcTables
CopSearchCopy
CopyStripSpaces
CraApplyDegree
CraCalcPntClr
CraCalcPntCls
CraElevToRgb
CraFillGapsRgb
CraHvToRgb
CraLtcToRgb
CrdGetSetup
CrdSetSetup
CrfFlagOut
CrfFlagRefObj
CrfShpFlagOne

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cc4422217060411d2f2866b4a787b33

Headers

File Characteristics

Imports

msvcr80

gdi32

user32

ole32

kernel32

comdlg32

shell32

mpr

netapi32

advapi32

ustation

toolsubs

msbspline

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 304KB - Virtual size: 300KB

.data Size: 4KB - Virtual size: 261KB

.data1 Size: 8KB - Virtual size: 4KB

.trace Size: 24KB - Virtual size: 20KB

.reloc Size: 68KB - Virtual size: 67KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 304KB - Virtual size: 300KB

.data
Size: 4KB - Virtual size: 261KB

.data1
Size: 8KB - Virtual size: 4KB

.trace
Size: 24KB - Virtual size: 20KB

.reloc
Size: 68KB - Virtual size: 67KB