17f35ef53d9396ef623ed0fc9a6c649d280877a9ab111a8de6489da9e3409075

Sharing

Copy URL Twitter E-mail

General

Target

17f35ef53d9396ef623ed0fc9a6c649d280877a9ab111a8de6489da9e3409075
Size

306KB
MD5

32ca6e99e54369e765499584c8ef3bc9
SHA1

30bb68ee4ebcc79dc941fab983960e7423ea9a69
SHA256

17f35ef53d9396ef623ed0fc9a6c649d280877a9ab111a8de6489da9e3409075
SHA512

8c5ac22a16fb51e28f2911ce8c17b2c9aa1f9f5249b0bc4bef3f938bc76436aad437f50cb6fd8f3fbca4aa2eae8d37ebaf5bffd8b095e1b36473a01da85ea5cf
SSDEEP

6144:SpBaMMM50rV1sqMDyfCFb+mofKezLBkkQ+:0BafMuroqM9eHBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f35ef53d9396ef623ed0fc9a6c649d280877a9ab111a8de6489da9e3409075

Files

17f35ef53d9396ef623ed0fc9a6c649d280877a9ab111a8de6489da9e3409075
.dll windows:6 windows x64 arch:x64

f2db1c36a011baefa8d07ccc21ccbdaa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

UE4Editor-Voronoi.pdb

Imports

ue4editor-core

?ZeroVector@FVector@@2U1@B
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?QuantizeSize@FMemory@@SA_K_KI@Z
?Free@FMemory@@SAXPEAX@Z
??$LogBogusChars@_WD@FGenericPlatformString@@CAXPEBDH@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEB_WZZ
?CheckVerifyFailedImpl@FDebug@@CAXPEBD0HPEB_WZZ
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate
memmove
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

terminate
_invalid_parameter_noinfo_noreturn
_crt_atexit
_initterm
_crt_at_quick_exit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_cexit

api-ms-win-crt-math-l1-1-0

_finite
pow

api-ms-win-crt-stdio-l1-1-0

puts
__acrt_iob_func
__stdio_common_vfprintf

kernel32

GetStartupInfoW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetModuleHandleW
InitializeSListHead
IsDebuggerPresent
RtlCaptureContext

Exports

Exports

??0FVoronoiDiagram@@QEAA@AEBV?$TArrayView@$$CBUFVector@@H@@AEBUFBox@@MM@Z
??0FVoronoiDiagram@@QEAA@AEBV?$TArrayView@$$CBUFVector@@H@@MM@Z
??1FVoronoiDiagram@@QEAA@XZ
?AddSites@FVoronoiDiagram@@QEAAXAEBV?$TArrayView@$$CBUFVector@@H@@M@Z
?ComputeAllCells@FVoronoiDiagram@@QEAAXAEAV?$TArray@UFVoronoiCellInfo@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?DefaultBoundingBoxSlack@FVoronoiDiagram@@2MB
?FindCell@FVoronoiDiagram@@QEAAHAEBUFVector@@@Z
?GetVoronoiEdges@@YA_NAEBV?$TArrayView@$$CBUFVector@@H@@AEBUFBox@@AEAV?$TArray@U?$TTuple@UFVector@@U1@@@V?$TSizedDefaultAllocator@$0CA@@@@@AEAV?$TArray@HV?$TSizedDefaultAllocator@$0CA@@@@@M@Z
?Num@FVoronoiDiagram@@QEBAHXZ
?VoronoiNeighbors@@YA_NAEBV?$TArrayView@$$CBUFVector@@H@@AEAV?$TArray@V?$TArray@HV?$TSizedDefaultAllocator@$0CA@@@@@V?$TSizedDefaultAllocator@$0CA@@@@@_NM@Z
InitializeModule

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2db1c36a011baefa8d07ccc21ccbdaa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ue4editor-core

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 227KB - Virtual size: 226KB

.uedbg Size: 2KB - Virtual size: 2KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 7KB - Virtual size: 6KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 512B - Virtual size: 284B

.text
Size: 227KB - Virtual size: 226KB

.uedbg
Size: 2KB - Virtual size: 2KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 512B - Virtual size: 284B