e901775af6715df347c790be69a79f8123c216ab65830fb863c6ddefa55b183b

Sharing

Copy URL Twitter E-mail

General

Target

e901775af6715df347c790be69a79f8123c216ab65830fb863c6ddefa55b183b
Size

13.1MB
MD5

1d3f9c7e239b9a949ace3d2dcf1817e3
SHA1

7a2999cecc7c814ef9ed2459baed62b658f7a71b
SHA256

e901775af6715df347c790be69a79f8123c216ab65830fb863c6ddefa55b183b
SHA512

1eb1e347934d8647a3d83327b6e8236977b893c3bb1eddac5e9eedf8e14e5959aa55d72e103583a957da3cf7183e84e065bd16e8a07e59259332a895520994ef
SSDEEP

196608:C+Egtqm8OA7zLHPygrGYPCKEUl3GW7+DaNErwMA+EUX1iVRxMlEa:37M/LPGKCKHl2W779LsX1iVvMua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e901775af6715df347c790be69a79f8123c216ab65830fb863c6ddefa55b183b

Files

e901775af6715df347c790be69a79f8123c216ab65830fb863c6ddefa55b183b
.dll windows:6 windows x64 arch:x64

0e57cdee8cf355a5cf0b4bdbdaefad82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libufun

UF_MODL_ask_distance_tolerance

libnxopencpp

?SetUserAttribute@NXObject@NXOpen@@QEAAXPEBDHNW4Option@Update@2@@Z

libugopenint

UF_VIEW_rotate_view

libnxopenuicpp

?AddCancelHandler@DialogItem@UIStyler@NXOpen@@QEAAXAEBV?$Callback1@W4DialogState@UIStyler@NXOpen@@PEAVStylerEvent@23@@3@_N@Z

mfc140

ord3239

kernel32

ReleaseSemaphore
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

IsIconic
GetProcessWindowStation
GetUserObjectInformationW

gdi32

CreateRectRgn

advapi32

RegCloseKey

shell32

ShellExecuteExA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA

ole32

CoUninitialize

oleaut32

VariantTimeToSystemTime

wininet

InternetOpenUrlA

ws2_32

send

msvcp140

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

pskernel

PK_TOPOL_find_box

libnxopencpp_annotations

?SetAngularTolerance@DimensionData@Annotations@NXOpen@@QEAAXPEAVAngularTolerance@23@@Z

libnxopencpp_cam

?MaximumCornerAngle@CornerControlBuilder@CAM@NXOpen@@QEAAPEAVInheritableDoubleBuilder@23@XZ

libnxopencpp_drafting

?ViewStyle@PreferencesBuilder@Drafting@NXOpen@@QEAAPEAVViewStyleBuilder@Drawings@3@XZ

libnxopencpp_drawings

?RenderingStyle@ShadingViewStyle@Drawings@NXOpen@@QEAA?AW4ShadingRenderingStyleOption@Preferences@3@XZ

libnxopencpp_facet

?DeleteTemporaryFacesAndEdges@FacetedBodyCollection@Facet@NXOpen@@QEAAXXZ

libnxopencpp_features

?AllowSelfIntersectingSection@ExtrudeBuilder@Features@NXOpen@@QEAAX_N@Z

libnxopencpp_geometricanalysis

?PerformCheck@SimpleInterference@GeometricAnalysis@NXOpen@@QEAA?AW4Result@123@XZ

libnxopencpp_geometricutilities

?Value@Extend@GeometricUtilities@NXOpen@@QEAAPEAVExpression@3@XZ

libnxopencpp_preferences

?GetAngularTolerances@AnnotationPreferences@Preferences@NXOpen@@QEAAPEAVAngularTolerance@Annotations@3@XZ

libufun_cam

UF_CAM_is_session_initialized

libugopenint_cam

UF_UI_ONT_ask_view

hid

HidD_FreePreparsedData

setupapi

SetupDiGetDeviceInterfaceDetailA

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoA

libxl64

xlCreateBookA

psapi

GetModuleBaseNameA

vcruntime140

__RTtypeid

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-multibyte-l1-1-0

_mbstok

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-time-l1-1-0

_ftime64

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

asin

Exports

Exports

?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload

Sections

.text
Size: - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xc0
Size: - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xc1
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 317KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e57cdee8cf355a5cf0b4bdbdaefad82

Headers

DLL Characteristics

File Characteristics

Imports

libufun

libnxopencpp

libugopenint

libnxopenuicpp

mfc140

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wininet

ws2_32

msvcp140

pskernel

libnxopencpp_annotations

libnxopencpp_cam

libnxopencpp_drafting

libnxopencpp_drawings

libnxopencpp_facet

libnxopencpp_features

libnxopencpp_geometricanalysis

libnxopencpp_geometricutilities

libnxopencpp_preferences

libufun_cam

libugopenint_cam

hid

setupapi

iphlpapi

version

libxl64

psapi

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 8.8MB

.rdata Size: - Virtual size: 2.7MB

.data Size: - Virtual size: 298KB

.pdata Size: - Virtual size: 263KB

.xc0 Size: - Virtual size: 10.3MB

.xc1 Size: 12.7MB - Virtual size: 12.7MB

.reloc Size: 512B - Virtual size: 224B

.rsrc Size: 317KB - Virtual size: 2.8MB

.text
Size: - Virtual size: 8.8MB

.rdata
Size: - Virtual size: 2.7MB

.data
Size: - Virtual size: 298KB

.pdata
Size: - Virtual size: 263KB

.xc0
Size: - Virtual size: 10.3MB

.xc1
Size: 12.7MB - Virtual size: 12.7MB

.reloc
Size: 512B - Virtual size: 224B

.rsrc
Size: 317KB - Virtual size: 2.8MB