3d0daee5f958a32be7f64f6f613334428597d9fabeb530da6b9ad2dd7dcc182a

Sharing

Copy URL Twitter E-mail

General

Target

3d0daee5f958a32be7f64f6f613334428597d9fabeb530da6b9ad2dd7dcc182a
Size

17KB
MD5

d05234016fa81eb1c9db8dc18464b9b9
SHA1

520ff859f9f0d05064e3238cf6b14da65734c5dd
SHA256

3d0daee5f958a32be7f64f6f613334428597d9fabeb530da6b9ad2dd7dcc182a
SHA512

df434af5cfd2b9c75b98d99a1efcb51fb57027c57e3ad95b3a789c78aa0298bcbf99cc0e52cb9c04ef94706a59c7b2ea514e3faab937c2bfe2c6fbb33351d5ac
SSDEEP

384:yDsYMbp2yEBfAtdHsnNEStYSNH23n4OlEJO+XxIq8:y4YWT8+dHcE2H234Ol0jhIl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d0daee5f958a32be7f64f6f613334428597d9fabeb530da6b9ad2dd7dcc182a

Files

3d0daee5f958a32be7f64f6f613334428597d9fabeb530da6b9ad2dd7dcc182a
.dll windows:5 windows x64 arch:x64

c90a2642d1ecd512205845dd35f404d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\project\wsq\DLL\NX-vs2010\x64\Release\NXopen.pdb

Imports

libufun

UF_UI_write_listing_window
UF_UI_open_listing_window

libnxopencpp

?GetSession@Session@NXOpen@@SAPEAV12@XZ
?Display@PartCollection@NXOpen@@QEAAPEAVPart@2@XZ
?Work@PartCollection@NXOpen@@QEAAPEAVPart@2@XZ
?Get@NXObjectManager@NXOpen@@SAPEAVTaggedObject@2@I@Z
?CAMSetup@Part@NXOpen@@QEAAPEAV0CAM@2@XZ
?CreatePoint@PointCollection@NXOpen@@QEAAPEAVPoint@2@AEBUPoint3d@2@@Z
?Points@BasePart@NXOpen@@QEAAPEAVPointCollection@2@XZ
?Commit@Builder@NXOpen@@QEAAPEAVNXObject@2@XZ
?Destroy@Builder@NXOpen@@QEAAXXZ
?Parts@Session@NXOpen@@QEAAPEAVPartCollection@2@XZ

libnxopencpp_cam

?CAMOperationCollection@CAMSetup@CAM@NXOpen@@QEAAPEAVOperationCollection@23@XZ
?SetRegionStartPoints@NcmSubopBuilder@CAM@NXOpen@@QEAAXAEBV?$vector@PEAVPoint@NXOpen@@V?$allocator@PEAVPoint@NXOpen@@@std@@@std@@@Z
?NonCuttingBuilder@PlanarOperationBuilder@CAM@NXOpen@@QEAAPEAVNcmPlanarBuilder@23@XZ
?CreatePlanarMillingBuilder@OperationCollection@CAM@NXOpen@@QEAAPEAVPlanarMillingBuilder@23@PEAVCAMObject@23@@Z

mfc100

ord1274
ord1272
ord893
ord2051
ord3285
ord2014
ord2012
ord2040
ord1945
ord2002
ord396
ord1914
ord2050
ord2048
ord1906
ord1844
ord1895
ord322
ord1275
ord321
ord13144

msvcr100

_CxxThrowException
memset
??0exception@std@@QEAA@AEBQEBD@Z
??1exception@std@@UEAA@XZ
memmove
??0exception@std@@QEAA@AEBV01@@Z
?what@exception@std@@UEBAPEBDXZ
__CxxFrameHandler3
_malloc_crt
_initterm
_initterm_e
free
_encoded_null
_amsg_exit
__C_specific_handler
__CppXcptFilter
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__RTDynamicCast
__clean_type_info_names_internal

kernel32

LocalFree
EncodePointer
DecodePointer
Sleep
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalAlloc

msvcp100

?_Xlength_error@std@@YAXPEBD@Z

Exports

Exports

?NXSigningResource@@YAXXZ
WSQ_SetPlanarStartPoint

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c90a2642d1ecd512205845dd35f404d5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libufun

libnxopencpp

libnxopencpp_cam

mfc100

msvcr100

kernel32

msvcp100

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 552B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 256B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 552B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 256B