a58d5ef8f11d2c3ef1cd7f8dd136823c97dadc64cddaba7a89530eef2cf47409

Sharing

Copy URL Twitter E-mail

General

Target

a58d5ef8f11d2c3ef1cd7f8dd136823c97dadc64cddaba7a89530eef2cf47409
Size

6.4MB
MD5

407af348e1dc2d83d1503cdd90e54507
SHA1

59cafd52394010ec40d6d8b44f7a79a568dcafcc
SHA256

a58d5ef8f11d2c3ef1cd7f8dd136823c97dadc64cddaba7a89530eef2cf47409
SHA512

0563ea82f636bb8ddc9454501b7076498a94c5a8bf723d4a1b04f380962b5082fe62c981882dab69292ebd7bebffa2d80cbb02b2349157496ed3a37e76f85f2e
SSDEEP

98304:dqOnalPkcRqbwAK77/S7DdjYUe9Y1CYsd5sllc7ACKa2adk:dqgEkK6wpfIhYUe98CYsdeY7ACKa/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a58d5ef8f11d2c3ef1cd7f8dd136823c97dadc64cddaba7a89530eef2cf47409

Files

a58d5ef8f11d2c3ef1cd7f8dd136823c97dadc64cddaba7a89530eef2cf47409
.dll windows:6 windows x64 arch:x64

d52c708f3c98287c048efec20d5df77b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Made3D\MS_Product\MosmWarehouse\NXCam\NXTools\Application\dlls\x64\MFCNXApp.pdb

Imports

msvcr120

memmove

msvcp120

?_Winerror_map@std@@YAPEBDH@Z

mfc120u

ord6153

kernel32

EnterCriticalSection

user32

GetClassNameW

gdi32

CreateSolidBrush

msimg32

TransparentBlt

shell32

ShellExecuteW

comctl32

_TrackMouseEvent

oleaut32

VariantClear

imagehlp

ImageRvaToVa

Sections

.text
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 621KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d52c708f3c98287c048efec20d5df77b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr120

msvcp120

mfc120u

kernel32

user32

gdi32

msimg32

shell32

comctl32

oleaut32

imagehlp

Sections

.text Size: - Virtual size: 4.3MB

.rdata Size: - Virtual size: 1.3MB

.data Size: - Virtual size: 621KB

.pdata Size: - Virtual size: 53KB

.text Size: - Virtual size: 247KB

.data Size: - Virtual size: 1.8MB

.text Size: 6.4MB - Virtual size: 6.4MB

.data Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 72B

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: - Virtual size: 4.3MB

.rdata
Size: - Virtual size: 1.3MB

.data
Size: - Virtual size: 621KB

.pdata
Size: - Virtual size: 53KB

.text
Size: - Virtual size: 247KB

.data
Size: - Virtual size: 1.8MB

.text
Size: 6.4MB - Virtual size: 6.4MB

.data
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 72B

.rsrc
Size: 18KB - Virtual size: 18KB