44ac0afd88d0a912037e76679eb22f411a78f7c840946867714b532f3fe2c3a4

Sharing

Copy URL Twitter E-mail

General

Target

44ac0afd88d0a912037e76679eb22f411a78f7c840946867714b532f3fe2c3a4
Size

13.1MB
MD5

7c9247cbc5622dc6c79f5c540682cb4e
SHA1

10469c43798614cfcff7f22759cb356e93c5e5bb
SHA256

44ac0afd88d0a912037e76679eb22f411a78f7c840946867714b532f3fe2c3a4
SHA512

71de651ebd03c51bc5f6dd7d0feb3e881ce0019d165bcb0bd5dcc9363c5cd0ef9268fe529f2b556530399ba57e9f91bd13d393f8747bfd5e1f754a2af41502b3
SSDEEP

196608:yAlOX1KUbSfiCNERWkzOGxZCHdsZNVlo7gesdJDMGn/J7IvtN+yTYvprxDymGyps:DmKU2aSQWEzCcKrsdJnknTKFH1dJnV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ac0afd88d0a912037e76679eb22f411a78f7c840946867714b532f3fe2c3a4

Files

44ac0afd88d0a912037e76679eb22f411a78f7c840946867714b532f3fe2c3a4
.dll windows:6 windows x64 arch:x64

893026cf6fba4e4cfddb4cddd741d608

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libufun

UF_UDOBJ_add_integers

libnxopencpp

?CreateCoordinateSystem@CoordinateSystemCollection@NXOpen@@QEAAPEAVCartesianCoordinateSystem@2@PEAVXform@2@W4UpdateOption@SmartObject@2@@Z

libugopenint

UF_VIEW_rotate_view

libnxopenuicpp

?AddMenuItem@TreeListMenu@BlockStyler@NXOpen@@QEAAXHAEBVNXString@3@@Z

mfc140

ord6595

kernel32

WaitForSingleObject
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

KillTimer
GetProcessWindowStation
GetUserObjectInformationW

gdi32

SetBkColor

advapi32

RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

comctl32

ImageList_GetImageInfo

shlwapi

PathFindFileNameA

ole32

CoInitialize

oleaut32

SysAllocString

wininet

InternetOpenA

ws2_32

htons

msvcp140

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

pskernel

PK_BODY_create_solid_sphere

libnxopencpp_annotations

?GetNarrowDimensionPreferences@DimensionPreferences@Annotations@NXOpen@@QEAAPEAVNarrowDimensionPreferences@23@XZ

libnxopencpp_cam

?SetNumberOfSteps@CornerControlBuilder@CAM@NXOpen@@QEAAXH@Z

libnxopencpp_drafting

?CreatePreferencesBuilder@SettingsManager@Drafting@NXOpen@@QEAAPEAVPreferencesBuilder@23@XZ

libnxopencpp_drawings

?SuppressViewBreaks@DraftingViewCollection@Drawings@NXOpen@@QEAAXPEAVDraftingView@23@@Z

libnxopencpp_facet

?DeleteTemporaryFacesAndEdges@FacetedBodyCollection@Facet@NXOpen@@QEAAXXZ

libnxopencpp_features

?AllowSelfIntersectingSection@ExtrudeBuilder@Features@NXOpen@@QEAAX_N@Z

libnxopencpp_geometricanalysis

?PerformCheck@SimpleInterference@GeometricAnalysis@NXOpen@@QEAA?AW4Result@123@XZ

libnxopencpp_geometricutilities

?SetTrimType@Extend@GeometricUtilities@NXOpen@@QEAAXW4ExtendType@123@@Z

libnxopencpp_preferences

?GetAngularTolerances@AnnotationPreferences@Preferences@NXOpen@@QEAAPEAVAngularTolerance@Annotations@3@XZ

libufun_cam

UF_CAM_is_session_initialized

libugopenint_cam

UF_UI_ONT_ask_view

hid

HidD_GetFeature

setupapi

SetupDiEnumDeviceInterfaces

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoA

libxl64

xlCreateBookA

psapi

GetModuleBaseNameA

vcruntime140

memmove

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-runtime-l1-1-0

_initterm

api-ms-win-crt-stdio-l1-1-0

fread

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-multibyte-l1-1-0

_mbscmp

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-time-l1-1-0

strftime

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

asin

Exports

Exports

?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload

Sections

.text
Size: - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xc0
Size: - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xc1
Size: 12.8MB - Virtual size: 12.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 317KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

893026cf6fba4e4cfddb4cddd741d608

Headers

DLL Characteristics

File Characteristics

Imports

libufun

libnxopencpp

libugopenint

libnxopenuicpp

mfc140

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wininet

ws2_32

msvcp140

pskernel

libnxopencpp_annotations

libnxopencpp_cam

libnxopencpp_drafting

libnxopencpp_drawings

libnxopencpp_facet

libnxopencpp_features

libnxopencpp_geometricanalysis

libnxopencpp_geometricutilities

libnxopencpp_preferences

libufun_cam

libugopenint_cam

hid

setupapi

iphlpapi

version

libxl64

psapi

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 8.8MB

.rdata Size: - Virtual size: 2.7MB

.data Size: - Virtual size: 298KB

.pdata Size: - Virtual size: 263KB

.xc0 Size: - Virtual size: 10.3MB

.xc1 Size: 12.8MB - Virtual size: 12.8MB

.reloc Size: 512B - Virtual size: 160B

.rsrc Size: 317KB - Virtual size: 2.8MB

.text
Size: - Virtual size: 8.8MB

.rdata
Size: - Virtual size: 2.7MB

.data
Size: - Virtual size: 298KB

.pdata
Size: - Virtual size: 263KB

.xc0
Size: - Virtual size: 10.3MB

.xc1
Size: 12.8MB - Virtual size: 12.8MB

.reloc
Size: 512B - Virtual size: 160B

.rsrc
Size: 317KB - Virtual size: 2.8MB