?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
Static task
static1
Behavioral task
behavioral1
Sample
ab99bd5688bc24092a4c34041656c8ada930de75e17b4a5e5c56ae856768a7e0.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ab99bd5688bc24092a4c34041656c8ada930de75e17b4a5e5c56ae856768a7e0.dll
Resource
win10v2004-20240426-en
Target
ab99bd5688bc24092a4c34041656c8ada930de75e17b4a5e5c56ae856768a7e0
Size
13.3MB
MD5
0e7cd754878769b188c8de20b7fb366b
SHA1
772bac139f76ffb3db4b0bc9620e9d76e749eab3
SHA256
ab99bd5688bc24092a4c34041656c8ada930de75e17b4a5e5c56ae856768a7e0
SHA512
3ff9a241f185a4616f6d00786fafca3c3624df5170c4df635a66b59ebd6e06ddad012c75ccc32fcfe8d68bcf0f7ed0e73d51cca46267e56cef26d32b891d366b
SSDEEP
393216:YCBee4XyU/KtZvKIQ6j2kUoTf6ei0AQKjw:VBeeqN/KryIp79AQIw
Checks for missing Authenticode signature.
resource |
---|
ab99bd5688bc24092a4c34041656c8ada930de75e17b4a5e5c56ae856768a7e0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
UF_DRF_ask_label_info
?Features@Part@NXOpen@@QEAAPEAVFeatureCollection@02@XZ
UF_UI_ask_open_part_filename
?AddCancelHandler@BlockDialog@BlockStyler@NXOpen@@QEAAXAEBV?$Callback0@H@3@@Z
ord970
__clean_type_info_names_internal
DeviceIoControl
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WindowFromPoint
GetProcessWindowStation
GetUserObjectInformationW
GetTextExtentPoint32A
RegDeleteValueA
SHGetSpecialFolderLocation
_TrackMouseEvent
PathCombineA
CoUninitialize
SysAllocString
InternetOpenUrlA
WSAStartup
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
PK_TOPOL_find_box
?SetGap@CenterlineSettingsBuilder@Annotations@NXOpen@@QEAAXN@Z
?MaxCutStep@MillCutParameters@CAM@NXOpen@@QEAAPEAVInheritableToolDepBuilder@23@XZ
?ViewStyle@PreferencesBuilder@Drafting@NXOpen@@QEAAPEAVViewStyleBuilder@Drawings@3@XZ
?SetInterferingSolids@ViewStyleHiddenLinesBuilder@Drawings@NXOpen@@QEAAXW4HiddenLineInterferingSolidsOption@Preferences@3@@Z
?DeleteTemporaryFacesAndEdges@FacetedBodyCollection@Facet@NXOpen@@QEAAXXZ
?SetOffsetMode@AOCSBuilder@Features@NXOpen@@QEAAXW4OffsetType@123@@Z
?PerformCheck@SimpleInterference@GeometricAnalysis@NXOpen@@QEAA?AW4Result@123@XZ
?Append@BoundingObjectBuilderList@GeometricUtilities@NXOpen@@QEAAXPEAVBoundingObjectBuilder@23@@Z
?SetObjectNameDisplay@PartVisualizationNamesBorders@Preferences@NXOpen@@QEAAXW4NameDisplay@123@@Z
HidD_GetFeature
SetupDiDestroyDeviceInfoList
GetAdaptersInfo
GetFileVersionInfoA
xlCreateBookA
GetModuleBaseNameA
?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ