a50f327833d1e21bede89daf5c2e9303023514a18217ac772b71967c1ddec8ad

Sharing

Copy URL Twitter E-mail

General

Target

a50f327833d1e21bede89daf5c2e9303023514a18217ac772b71967c1ddec8ad
Size

168KB
MD5

d07de56b55dbbb2ca35443644426064c
SHA1

71ab6252f06109e2de81321c2422024cf54333b9
SHA256

a50f327833d1e21bede89daf5c2e9303023514a18217ac772b71967c1ddec8ad
SHA512

2d01ffcacb619ede2bfabd90af08b51b30eaa260143dddcb51f81e75ab48c86cd849aff669b19ebd6248bd3e05aa04f729fbbae59a1c32b0df9f96a10ddfefd5
SSDEEP

3072:zI9E1XmtQvSLmJv50OiXyfzJfd2ED78/fPHgDO3DH:zdBr0mx/78/XHgDO3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a50f327833d1e21bede89daf5c2e9303023514a18217ac772b71967c1ddec8ad

Files

a50f327833d1e21bede89daf5c2e9303023514a18217ac772b71967c1ddec8ad
.dll windows:4 windows x86 arch:x86

88ac11eff34ac78408569a90e964fb3a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WritePrivateProfileStringW
GetPrivateProfileStringW
GetModuleHandleW
GetSystemTimeAsFileTime
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW

ole32

CLSIDFromProgID

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

mfc80u

ord1571
ord5327
ord6293
ord1476
ord5558
ord3990
ord2121
ord2260
ord870
ord896
ord277
ord860
ord2895
ord6111
ord5711
ord1472
ord5442
ord2261
ord6167
ord745
ord3927
ord6173
ord557
ord894
ord5524
ord6002
ord5712
ord5485
ord4078
ord1176
ord764
ord774
ord280
ord577
ord762
ord776
ord293
ord1479
ord282
ord6700
ord2311
ord283
ord266
ord2340
ord3249
ord1172
ord5316
ord6282

msvcr80

free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
_encode_pointer
__dllonexit
_malloc_crt
?terminate@@YAXXZ
fwrite
_wtoi
_wtof
_wcsdup
memcpy
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
_purecall
_decode_pointer
_onexit
_unlock
_lock
fread

acdb17

?swapReferences@AcDbObject@@UAE?AW4ErrorStatus@Acad@@ABVAcDbIdMapping@@@Z
?audit@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PAVAcDbAuditInfo@@@Z
?dwgInFields@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgOutFields@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dxfInFields@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDxfFiler@@@Z
?dxfOutFields@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDxfFiler@@@Z
?mergeStyle@AcDbObject@@UBE?AW4DuplicateRecordCloning@AcDb@@XZ
?xData@AcDbObject@@UBEPAUresbuf@@PB_W@Z
?setXData@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PBUresbuf@@@Z
?applyPartialUndo@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@PAVAcRxClass@@@Z
?addPersistentReactor@AcDbObject@@UAEXVAcDbObjectId@@@Z
?removePersistentReactor@AcDbObject@@UAE?AW4ErrorStatus@Acad@@VAcDbObjectId@@@Z
?recvPropagateModify@AcDbObject@@UAEXPBV1@@Z
?xmitPropagateModify@AcDbObject@@UBEXXZ
?deepClone@AcDbObject@@UBE?AW4ErrorStatus@Acad@@PAV1@AAPAV1@AAVAcDbIdMapping@@H@Z
?wblockClone@AcDbObject@@UBE?AW4ErrorStatus@Acad@@PAVAcRxObject@@AAPAV1@AAVAcDbIdMapping@@H@Z
?cancelled@AcDbObject@@UAEXPBV1@@Z
?copied@AcDbObject@@UAEXPBV1@0@Z
?erased@AcDbObject@@UAEXPBV1@H@Z
?goodbye@AcDbObject@@UAEXPBV1@@Z
?openedForModify@AcDbObject@@UAEXPBV1@@Z
?modified@AcDbObject@@UAEXPBV1@@Z
?subObjModified@AcDbObject@@UAEXPBV1@0@Z
?modifyUndone@AcDbObject@@UAEXPBV1@@Z
?modifiedXData@AcDbObject@@UAEXPBV1@@Z
?unappended@AcDbObject@@UAEXPBV1@@Z
?reappended@AcDbObject@@UAEXPBV1@@Z
?objectClosed@AcDbObject@@UAEXVAcDbObjectId@@@Z
?modifiedGraphics@AcDbObject@@UAEXPBVAcDbEntity@@@Z
?getObjectSaveVersion@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PBVAcDbDxfFiler@@AAW4AcDbDwgVersion@AcDb@@AAW4MaintenanceReleaseVersion@6@@Z
?getObjectSaveVersion@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PBVAcDbDwgFiler@@AAW4AcDbDwgVersion@AcDb@@AAW4MaintenanceReleaseVersion@6@@Z
?decomposeForSave@AcDbObject@@UAE?AW4ErrorStatus@Acad@@W4AcDbDwgVersion@AcDb@@AAPAV1@AAVAcDbObjectId@@AAH@Z
?drawable@AcDbEntity@@UAEPAVAcGiDrawable@@XZ
?getClassID@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@PAU_GUID@@@Z
?setField@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PB_WPAVAcDbField@@AAVAcDbObjectId@@@Z
?removeField@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PB_W@Z
?removeField@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PB_WAAVAcDbObjectId@@@Z
?removeField@AcDbObject@@UAE?AW4ErrorStatus@Acad@@VAcDbObjectId@@@Z
?setColor@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABVAcCmColor@@H@Z
?setColorIndex@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@GH@Z
?setTransparency@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABVAcCmTransparency@@H@Z
?setPlotStyleName@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@W4PlotStyleNameType@AcDb@@VAcDbObjectId@@H@Z
?setPlotStyleName@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PB_WH@Z
?setLayer@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@VAcDbObjectId@@H_N@Z
?setLayer@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PB_WH_N@Z
?setLinetype@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@VAcDbObjectId@@H@Z
?setLinetype@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PB_WH@Z
?subSwapIdWith@AcDbObject@@UAE?AW4ErrorStatus@Acad@@VAcDbObjectId@@HH@Z
?setMaterial@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@PB_WH@Z
?getMaterialMapper@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@AAVAcGiMapper@@@Z
?setMaterialMapper@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABVAcGiMapper@@H@Z
?setLinetypeScale@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@NH@Z
?setVisibility@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@W4Visibility@AcDb@@H@Z
?setLineWeight@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@W4LineWeight@AcDb@@H@Z
?collisionType@AcDbEntity@@UBE?AW4CollisionType@AcDb@@XZ
?castShadows@AcDbEntity@@UBE_NXZ
?setCastShadows@AcDbEntity@@UAEX_N@Z
?receiveShadows@AcDbEntity@@UBE_NXZ
?setReceiveShadows@AcDbEntity@@UAEX_N@Z
?getEcs@AcDbEntity@@UBEXAAVAcGeMatrix3d@@@Z
?getGeomExtents@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@AAVAcDbExtents@@@Z
?addSubentPaths@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@VAcDbFullSubentPath@@V?$AcArrayObjectCopyReallocator@VAcDbFullSubentPath@@@@@@@Z
?deleteSubentPaths@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@VAcDbFullSubentPath@@V?$AcArrayObjectCopyReallocator@VAcDbFullSubentPath@@@@@@@Z
?getSubentClassId@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@ABVAcDbFullSubentPath@@PAU_GUID@@@Z
?transformSubentPathsBy@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@VAcDbFullSubentPath@@V?$AcArrayObjectCopyReallocator@VAcDbFullSubentPath@@@@@@ABVAcGeMatrix3d@@@Z
?getGripPointsAtSubentPath@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@ABVAcDbFullSubentPath@@AAV?$AcArray@PAVAcDbGripData@@V?$AcArrayMemCopyReallocator@PAVAcDbGripData@@@@@@NHABVAcGeVector3d@@H@Z
?moveGripPointsAtSubentPaths@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@VAcDbFullSubentPath@@V?$AcArrayObjectCopyReallocator@VAcDbFullSubentPath@@@@@@ABV?$AcArray@PAXV?$AcArrayMemCopyReallocator@PAX@@@@ABVAcGeVector3d@@H@Z
?getSubentPathGeomExtents@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@ABVAcDbFullSubentPath@@AAVAcDbExtents@@@Z
?getSubentPathsAtGsMarker@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@KHABVAcGePoint3d@@ABVAcGeFastTransform@@AAHAAPAVAcDbFullSubentPath@@HPAVAcDbObjectId@@@Z
?getSubentPathsAtGsMarker@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@KHABVAcGePoint3d@@ABVAcGeMatrix3d@@AAHAAPAVAcDbFullSubentPath@@HPAVAcDbObjectId@@@Z
?getGsMarkersAtSubentPath@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@ABVAcDbFullSubentPath@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@@Z
?highlight@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@ABVAcDbFullSubentPath@@H@Z
?unhighlight@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@ABVAcDbFullSubentPath@@H@Z
?subentPtr@AcDbEntity@@UBEPAV1@ABVAcDbFullSubentPath@@@Z
?getOsnapPoints@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@W4OsnapMode@AcDb@@HABVAcGePoint3d@@1ABVAcGeFastTransform@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@ABVAcGeMatrix3d@@@Z
?getOsnapPoints@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@W4OsnapMode@AcDb@@HABVAcGePoint3d@@1ABVAcGeMatrix3d@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@2@Z
?getOsnapPoints@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@W4OsnapMode@AcDb@@HABVAcGePoint3d@@1ABVAcGeFastTransform@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@@Z
?getOsnapPoints@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@W4OsnapMode@AcDb@@HABVAcGePoint3d@@1ABVAcGeMatrix3d@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@@Z
?getGripPoints@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@AAV?$AcArray@PAVAcDbGripData@@V?$AcArrayMemCopyReallocator@PAVAcDbGripData@@@@@@NHABVAcGeVector3d@@H@Z
?getGripPoints@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@1@Z
?moveGripPointsAt@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@PAXV?$AcArrayMemCopyReallocator@PAX@@@@ABVAcGeVector3d@@H@Z
?moveGripPointsAt@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@ABVAcGeVector3d@@@Z
?getStretchPoints@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@@Z
?moveStretchPointsAt@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@ABVAcGeVector3d@@@Z
?intersectWith@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@PBV1@W4Intersect@AcDb@@ABVAcGePlane@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@HH@Z
?intersectWith@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@PBV1@W4Intersect@AcDb@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@HH@Z
?list@AcDbEntity@@UBEXXZ
?transformBy@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABVAcGeFastTransform@@@Z
?transformBy@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@ABVAcGeMatrix3d@@@Z
?getTransformedCopy@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@ABVAcGeMatrix3d@@AAPAV1@@Z
?explode@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@AAV?$AcArray@PAXV?$AcArrayMemCopyReallocator@PAX@@@@@Z
?saveAs@AcDbEntity@@UAEXPAVAcGiWorldDraw@@W4SaveType@AcDb@@@Z
?getCompoundObjectTransform@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@AAVAcGeMatrix3d@@@Z
?subSetDatabaseDefaults@AcDbEntity@@UAEXPAVAcDbDatabase@@@Z
?cloneMeForDragging@AcDbEntity@@UAEHXZ
?hideMeForDragging@AcDbEntity@@UBE_NXZ
?dragStatus@AcDbEntity@@UAEXW4DragStat@AcDb@@@Z
?gripStatus@AcDbEntity@@UAEXW4GripStat@AcDb@@@Z
?subentGripStatus@AcDbEntity@@UAEXW4GripStat@AcDb@@ABVAcDbFullSubentPath@@@Z
?getGripEntityUCS@AcDbEntity@@UBE?AW4ErrorStatus@Acad@@PBXAAVAcGeVector3d@@AAVAcGePoint3d@@1@Z
??1AcadAppInfo@@UAE@XZ
?writeToRegistry@AcadAppInfo@@QAE?AW4ErrorStatus@AcadApp@@_N0@Z
?setLoadReason@AcadAppInfo@@QAEXW4LoadReasons@AcadApp@@@Z
?setAppDesc@AcadAppInfo@@QAEXPB_W@Z
?setModuleName@AcadAppInfo@@QAEXPB_W@Z
?setAppName@AcadAppInfo@@QAEXPB_W@Z
??0AcadAppInfo@@QAE@XZ
s_pServices
?desc@AcRxDictionary@@SAPAVAcRxClass@@XZ
acutPrintf
?acrxRegisterService@@YAPAXPB_W@Z
?allocRawMem@AcHeapOperators@@CGPAXI@Z
?getSymbolTable@AcDbDatabase@@QAE?AW4ErrorStatus@Acad@@AAPAVAcDbBlockTable@@W4OpenMode@AcDb@@@Z
??1AcAxDocLock@@QAE@XZ
?step@AcDbBlockTableRecordIterator@@QAEX_N0@Z
?assertWriteEnabled@AcDbObject@@QAEXHH@Z
?getEntity@AcDbBlockTableRecordIterator@@QBE?AW4ErrorStatus@Acad@@AAPAVAcDbEntity@@W4OpenMode@AcDb@@_N@Z
?done@AcDbBlockTableRecordIterator@@QBE_NXZ
?newIterator@AcDbBlockTableRecord@@QBE?AW4ErrorStatus@Acad@@AAPAVAcDbBlockTableRecordIterator@@_N1@Z
??0AcAxDocLock@@QAE@XZ
?getAt@AcDbBlockTable@@QBE?AW4ErrorStatus@Acad@@PB_WAAPAVAcDbBlockTableRecord@@W4OpenMode@AcDb@@_N@Z
?close@AcDbObject@@QAE?AW4ErrorStatus@Acad@@XZ
?appendAcDbEntity@AcDbBlockTableRecord@@QAE?AW4ErrorStatus@Acad@@AAVAcDbObjectId@@PAVAcDbEntity@@@Z
?tilemode@AcDbDatabase@@QBE_NXZ
?acdbOpenAcDbObject@@YG?AW4ErrorStatus@Acad@@AAPAVAcDbObject@@VAcDbObjectId@@W4OpenMode@AcDb@@PBVAcRxClass@@_N@Z
?newAcRxClass@@YAPAVAcRxClass@@PB_W0HHHP6APAVAcRxObject@@XZ00P6AXPBV1@AAPA_WH@Z@Z
acrx_abort
?luprec@AcDbDatabase@@QBEFXZ
?acdbOpenAcDbEntity@@YA?AW4ErrorStatus@Acad@@AAPAVAcDbEntity@@VAcDbObjectId@@W4OpenMode@AcDb@@_N@Z
?assertReadEnabled@AcDbObject@@QBEXXZ
?set@AcDbExtents@@QAE?AW4ErrorStatus@Acad@@ABVAcGePoint3d@@0@Z
?setTextSize@AcGiTextStyle@@UAEXN@Z
?erase@AcDbObject@@QAE?AW4ErrorStatus@Acad@@H@Z
??1AcCmColor@@UAE@XZ
?entityColor@AcCmColor@@QBE?AVAcCmEntityColor@@XZ
?colorIndex@AcCmEntityColor@@QBEFXZ
??0AcDbText@@QAE@ABVAcGePoint3d@@PB_WVAcDbObjectId@@NN@Z
?loadStyleRec@AcGiTextStyle@@UBEHXZ
?fromAcDbTextStyle@@YA?AW4ErrorStatus@Acad@@AAVAcGiTextStyle@@ABVAcDbObjectId@@@Z
??0AcDbCircle@@QAE@ABVAcGePoint3d@@ABVAcGeVector3d@@N@Z
??4AcCmColor@@QAEAAV0@ABV0@@Z
??0AcCmColor@@QAE@XZ
?layer@AcDbEntity@@QBEPA_WXZ
?acdbOpenAcDbObject@@YA?AW4ErrorStatus@Acad@@AAPAVAcDbObject@@VAcDbObjectId@@W4OpenMode@AcDb@@_N@Z
?acutDelBuffer@@YAXAAPAX@Z
?dwgInFields@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgOutFields@AcDbObject@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?desc@AcDbDictionary@@SAPAVAcRxClass@@XZ
?getAt@AcDbDictionary@@QBE?AW4ErrorStatus@Acad@@PB_WAAPAVAcDbObject@@W4OpenMode@AcDb@@@Z
?extensionDictionary@AcDbObject@@QBE?AVAcDbObjectId@@XZ
?objectId@AcDbObject@@QBE?AVAcDbObjectId@@XZ
?setAt@AcDbDictionary@@QAE?AW4ErrorStatus@Acad@@PB_WPAVAcDbObject@@AAVAcDbObjectId@@@Z
?createExtensionDictionary@AcDbObject@@QAE?AW4ErrorStatus@Acad@@XZ
??0AcDbObject@@IAE@XZ
?setAttributes@AcDbObject@@UAEKPAVAcGiDrawableTraits@@@Z
?worldDraw@AcDbObject@@UAEHPAVAcGiWorldDraw@@@Z
?viewportDraw@AcDbObject@@UAEXPAVAcGiViewportDraw@@@Z
?setGsNode@AcDbObject@@UAEXPAVAcGsNode@@@Z
?gsNode@AcDbObject@@UBEPAVAcGsNode@@XZ
?audit@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PAVAcDbAuditInfo@@@Z
?dxfInFields@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDxfFiler@@@Z
?dxfOutFields@AcDbObject@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDxfFiler@@@Z
?applyPartialUndo@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@PAVAcRxClass@@@Z
?drawable@AcDbObject@@UAEPAVAcGiDrawable@@XZ
?getClassID@AcDbObject@@UBE?AW4ErrorStatus@Acad@@PAU_GUID@@@Z
?addVertexAt@AcDbPolyline@@QAE?AW4ErrorStatus@Acad@@IABVAcGePoint2d@@NNN@Z
??0AcDbPolyline@@QAE@XZ
?getSymbolTable@AcDbDatabase@@QAE?AW4ErrorStatus@Acad@@AAPAVAcDbTextStyleTable@@W4OpenMode@AcDb@@@Z
acutRelRb
?setFromRbChain@AcDbXrecord@@QAE?AW4ErrorStatus@Acad@@ABUresbuf@@PAVAcDbDatabase@@@Z
?remove@AcDbDictionary@@QAE?AW4ErrorStatus@Acad@@PB_W@Z
??0AcDbXrecord@@QAE@XZ
??0AcDbDictionary@@QAE@XZ
?getNamedObjectsDictionary@AcDbDatabase@@QAE?AW4ErrorStatus@Acad@@AAPAVAcDbDictionary@@W4OpenMode@AcDb@@@Z
?getAt@AcDbTextStyleTable@@QBE?AW4ErrorStatus@Acad@@PB_WAAVAcDbObjectId@@_N@Z
?extents@AcGiTextStyle@@UBE?AVAcGePoint2d@@PB_WHHHPAVAcGiWorldDraw@@@Z
?accmGetColorFromRGBName@@YA?AW4ErrorStatus@Acad@@AAVAcCmColor@@PB_W@Z
?accmGetColorFromACIName@@YA?AW4ErrorStatus@Acad@@AAVAcCmColor@@PB_W@Z
?desc@AcDbTextStyleTableRecord@@SAPAVAcRxClass@@XZ
?getName@AcDbSymbolTableRecord@@QBE?AW4ErrorStatus@Acad@@AAPB_W@Z
?textstyle@AcDbDatabase@@QBE?AVAcDbObjectId@@XZ
?rbChain@AcDbXrecord@@QBE?AW4ErrorStatus@Acad@@PAPAUresbuf@@PAVAcDbDatabase@@@Z
??0AcGiTextStyle@@QAE@XZ
??1AcGiTextStyle@@UAE@XZ
??0AcDbFullSubentPath@@QAE@VAcDbObjectId@@VAcDbSubentId@@@Z
??1AcDbFullSubentPath@@QAE@XZ
?subHandOverTo@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PAV1@@Z
?subErase@AcDbObject@@UAE?AW4ErrorStatus@Acad@@H@Z
?subClose@AcDbObject@@UAE?AW4ErrorStatus@Acad@@XZ
?subCancel@AcDbObject@@UAE?AW4ErrorStatus@Acad@@XZ
?subOpen@AcDbObject@@UAE?AW4ErrorStatus@Acad@@W4OpenMode@AcDb@@@Z
?setOwnerId@AcDbObject@@UAE?AW4ErrorStatus@Acad@@VAcDbObjectId@@@Z
?gsNode@AcDbEntity@@UBEPAVAcGsNode@@XZ
?setGsNode@AcDbEntity@@UAEXPAVAcGsNode@@@Z
?id@AcDbObject@@UBE?AVAcDbObjectId@@XZ
?isPersistent@AcDbObject@@UBEHXZ
?viewportDraw@AcDbEntity@@UAEXPAVAcGiViewportDraw@@@Z
?worldDraw@AcDbEntity@@UAEHPAVAcGiWorldDraw@@@Z
?setAttributes@AcDbEntity@@UAEKPAVAcGiDrawableTraits@@@Z
?comparedTo@AcRxObject@@UBE?AW4Ordering@AcRx@@PBV1@@Z
?isEqualTo@AcRxObject@@UBEHPBV1@@Z
?copyFrom@AcDbObject@@UAE?AW4ErrorStatus@Acad@@PBVAcRxObject@@@Z
?clone@AcDbObject@@UBEPAVAcRxObject@@XZ
??0AcDbEntity@@IAE@XZ
?deleteAcRxClass@@YAXPAVAcRxClass@@@Z
acrxSysRegistry
?acrxBuildClassHierarchy@@YAXXZ
?desc@AcRxDynamicLinker@@SAPAVAcRxClass@@XZ
??1AcDbObject@@UAE@XZ
?freeRawMem@AcHeapOperators@@CGXPAX@Z
?setMaterial@AcDbEntity@@UAE?AW4ErrorStatus@Acad@@VAcDbObjectId@@H@Z
?c5ObjIdIsEqualTo@@YA_NPBVAcDbStub@@0@Z

acge17

?transformBy@AcGePoint3d@@QAEAAV1@ABVAcGeMatrix3d@@@Z
??0AcGePoint3d@@QAE@NNN@Z
?kYAxis@AcGeVector3d@@2V1@B
??D@YA?AVAcGeVector3d@@NABV0@@Z
??0AcGePoint3d@@QAE@XZ
?rotateBy@AcGeVector3d@@QAEAAV1@NABV1@@Z
??BAcGeVector3d@@QBE?AVAcGeMatrix3d@@XZ
?setToRotation@AcGeMatrix3d@@QAEAAV1@NABVAcGeVector3d@@ABVAcGePoint3d@@@Z
??0AcGeMatrix3d@@QAE@XZ
?kXAxis@AcGeVector3d@@2V1@B
?kZAxis@AcGeVector3d@@2V1@B

oleaut32

SysFreeString

Exports

Exports

??0TdtDbEntity@@QAE@ABV0@@Z
??0TdtDbEntity@@QAE@XZ
??0TdtDbMeasurePointObj@@QAE@ABV0@@Z
??0TdtDbMeasurePointObj@@QAE@XZ
??0TdtDbObject@@QAE@XZ
??0TdtDbObject@@QAE@_N@Z
??0TdtDbPointObj@@QAE@ABV0@@Z
??0TdtDbPointObj@@QAE@XZ
??0TdtDbStationPointObj@@QAE@ABV0@@Z
??0TdtDbStationPointObj@@QAE@XZ
??0TdtPointObjSettings@@QAE@ABV0@@Z
??0TdtPointObjSettings@@QAE@XZ
??1TdtDbEntity@@UAE@XZ
??1TdtDbMeasurePointObj@@UAE@XZ
??1TdtDbObject@@UAE@XZ
??1TdtDbPointObj@@UAE@XZ
??1TdtDbStationPointObj@@UAE@XZ
??1TdtPointObjSettings@@QAE@XZ
??4TdtDbEntity@@QAEAAV0@ABV0@@Z
??4TdtDbMeasurePointObj@@QAEAAV0@ABV0@@Z
??4TdtDbPointObj@@QAEAAV0@ABV0@@Z
??4TdtDbStationPointObj@@QAEAAV0@ABV0@@Z
??4TdtMeasurePointSettings@@QAEAAU0@ABU0@@Z
??4TdtPointObjSettings@@QAEAAV0@ABV0@@Z
??4TdtStationPointSettings@@QAEAAU0@ABU0@@Z
??_7TdtDbEntity@@6B@
??_7TdtDbMeasurePointObj@@6B@
??_7TdtDbObject@@6B@
??_7TdtDbPointObj@@6B@
??_7TdtDbStationPointObj@@6B@
?AcadLinearUnitsPrecision@TdtDbEntity@@SAXPAVAcDbDatabase@@@Z
?Get@TdtDbPointObj@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?GetAcCmColor@TdtPointObjSettings@@SA?AVAcCmColor@@J@Z
?GetBuffer@TdtMeasurePointSettings@@QBEPAUresbuf@@AAPAU2@@Z
?GetBuffer@TdtStationPointSettings@@QBEPAUresbuf@@AAPAU2@@Z
?GetFcode@TdtDbObject@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetFlag@TdtDbObject@@QBE_NH@Z
?GetFlagAt@TdtDbPointObj@@QBE_NH@Z
?GetHObject@TdtDbObject@@SAPAV1@ABVAcDbObjectId@@PB_W@Z
?GetHObjectData@TdtDbObject@@SA?AVAcDbObjectId@@ABV2@PB_W@Z
?GetIsObjectData@TdtDbObject@@QBE_NXZ
?GetObjMark@TdtDbObject@@QBEHXZ
?GetObjectDataId@TdtDbObject@@QBE?AVAcDbObjectId@@XZ
?GetParentID@TdtDbObject@@SA?AVAcDbObjectId@@ABV2@@Z
?GetPoint@TdtDbPointObj@@QBE?AVAcGePoint3d@@XZ
?GetPointColor@TdtDbMeasurePointObj@@QBE?AVAcCmEntityColor@@XZ
?GetPointSize@TdtDbMeasurePointObj@@QBENXZ
?GetProperties@TdtDbEntity@@UBEHAAVHEntityProp@@@Z
?GetProperties@TdtDbObject@@UBEHAAVHEntityProp@@@Z
?GetRenderType@TdtDbMeasurePointObj@@QBEFXZ
?GetRotation@TdtDbPointObj@@QBENXZ
?GetTextColor@TdtDbMeasurePointObj@@UBE?AVAcCmEntityColor@@H@Z
?GetTextColor@TdtDbPointObj@@UBE?AVAcCmEntityColor@@H@Z
?GetTextHeight@TdtDbMeasurePointObj@@UBENH@Z
?GetTextHeight@TdtDbPointObj@@UBENH@Z
?GetTextLength@TdtPointObjSettings@@SANPB_WW4PointType@1@@Z
?GetTextStyleId@TdtDbMeasurePointObj@@UBE?AVAcDbObjectId@@XZ
?GetTextStyleId@TdtDbPointObj@@UBE?AVAcDbObjectId@@XZ
?Initialize@TdtMeasurePointSettings@@QAEXXZ
?Initialize@TdtStationPointSettings@@QAEXXZ
?ListValue@TdtDbObject@@QAEAAVHEntityProp@@XZ
?ListValue@TdtDbObject@@QBEAAVHEntityProp@@XZ
?Process@TdtDbMeasurePointObj@@ABEXPAX_N@Z
?Process@TdtDbStationPointObj@@ABEXPAX_N@Z
?Read@TdtMeasurePointSettings@@QAEXPAVCfgFile@@@Z
?Read@TdtPointObjSettings@@QAEXPB_W_N@Z
?Read@TdtPointObjSettings@@QAE_NPAVAcDbDatabase@@@Z
?Read@TdtStationPointSettings@@QAEXPAVCfgFile@@@Z
?RegenerateMeasurePoints@TDT@@YAXXZ
?SeparateDigit@TdtPointObjSettings@@SAXNAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0ABV23@@Z
?Set@TdtDbPointObj@@QAEXABVAcGePoint3d@@PB_W11@Z
?Set@TdtDbPointObj@@QAEXHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetBuffer@TdtMeasurePointSettings@@QAEXAAPAUresbuf@@@Z
?SetBuffer@TdtStationPointSettings@@QAEXAAPAUresbuf@@@Z
?SetColor@TdtDbMeasurePointObj@@QAEXABVAcCmEntityColor@@@Z
?SetFcode@TdtDbObject@@QAEXABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetFlag@TdtDbObject@@QAE_NH_N@Z
?SetFlagAt@TdtDbPointObj@@QAEXH_N@Z
?SetHObject@TdtDbObject@@SA?AVAcDbObjectId@@ABV2@PAV1@PB_W@Z
?SetIsObjectData@TdtDbObject@@QAEX_N@Z
?SetLayer@TdtDbObject@@UAEXPBD@Z
?SetObjMark@TdtDbObject@@QAEXH@Z
?SetObjectDataId@TdtDbObject@@QAEXABVAcDbObjectId@@@Z
?SetPoint@TdtDbPointObj@@QAEXABVAcGePoint3d@@@Z
?SetPointColor@TdtDbMeasurePointObj@@QAEXABVAcCmEntityColor@@@Z
?SetPointColor@TdtDbMeasurePointObj@@QAEXJ@Z
?SetPointSize@TdtDbMeasurePointObj@@QAEXN@Z
?SetProperties@TdtDbEntity@@UAE_NABVHEntityProp@@@Z
?SetProperties@TdtDbMeasurePointObj@@UAEXPANPAJF@Z
?SetProperties@TdtDbObject@@UAE_NABVHEntityProp@@@Z
?SetProperties@TdtDbPointObj@@UAEXPANPAJF@Z
?SetRenderType@TdtDbMeasurePointObj@@QAEXF@Z
?SetRotation@TdtDbPointObj@@QAEXN@Z
?SetTextColor@TdtDbMeasurePointObj@@UAEXHABVAcCmEntityColor@@@Z
?SetTextColor@TdtDbPointObj@@UAEXHABVAcCmEntityColor@@@Z
?SetTextHeight@TdtDbMeasurePointObj@@UAEXHN@Z
?SetTextHeight@TdtDbPointObj@@UAEXHN@Z
?SetTextStyle@TdtPointObjSettings@@QAEXABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PointType@1@@Z
?SetTextStyleId@TdtDbMeasurePointObj@@UAEXABVAcDbObjectId@@@Z
?SetTextStyleId@TdtDbPointObj@@UAEXABVAcDbObjectId@@@Z
?UpdateAcadLinearUnitsPrecision@TDT@@YAXPAVAcDbDatabase@@@Z
?UpdateAcadLinearUnitsPrecision@TdtPointObjSettings@@QAEXPAVAcDbDatabase@@@Z
?UpdatePoints@TDT@@YAXABV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@_N@Z
?UpdateSettingsOfPointObject@TDT@@YA_NPAVAcDbDatabase@@PB_W_N@Z
?Write@TdtMeasurePointSettings@@QBEXPAVCfgFile@@@Z
?Write@TdtPointObjSettings@@QAEXPB_W@Z
?Write@TdtPointObjSettings@@QAEXXZ
?Write@TdtStationPointSettings@@QBEXPAVCfgFile@@@Z
?acadLinearUnitsPrecision@TdtDbEntity@@2V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?cast@TdtDbEntity@@SAPAV1@PBVAcRxObject@@@Z
?cast@TdtDbMeasurePointObj@@SAPAV1@PBVAcRxObject@@@Z
?cast@TdtDbObject@@SAPAV1@PBVAcRxObject@@@Z
?cast@TdtDbPointObj@@SAPAV1@PBVAcRxObject@@@Z
?cast@TdtDbStationPointObj@@SAPAV1@PBVAcRxObject@@@Z
?desc@TdtDbEntity@@SAPAVAcRxClass@@XZ
?desc@TdtDbMeasurePointObj@@SAPAVAcRxClass@@XZ
?desc@TdtDbObject@@SAPAVAcRxClass@@XZ
?desc@TdtDbPointObj@@SAPAVAcRxClass@@XZ
?desc@TdtDbStationPointObj@@SAPAVAcRxClass@@XZ
?dwgInFields@TdtDbMeasurePointObj@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgInFields@TdtDbObject@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgInFields@TdtDbPointObj@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgInFields@TdtDbStationPointObj@@UAE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgOutFields@TdtDbMeasurePointObj@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgOutFields@TdtDbObject@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgOutFields@TdtDbPointObj@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?dwgOutFields@TdtDbStationPointObj@@UBE?AW4ErrorStatus@Acad@@PAVAcDbDwgFiler@@@Z
?explode@TdtDbMeasurePointObj@@UBE?AW4ErrorStatus@Acad@@AAV?$AcArray@PAXV?$AcArrayMemCopyReallocator@PAX@@@@@Z
?explode@TdtDbStationPointObj@@UBE?AW4ErrorStatus@Acad@@AAV?$AcArray@PAXV?$AcArrayMemCopyReallocator@PAX@@@@@Z
?getClassID@TdtDbMeasurePointObj@@UBE?AW4ErrorStatus@Acad@@PAU_GUID@@@Z
?getClassID@TdtDbPointObj@@UBE?AW4ErrorStatus@Acad@@PAU_GUID@@@Z
?getGeomExtents@TdtDbMeasurePointObj@@UBE?AW4ErrorStatus@Acad@@AAVAcDbExtents@@@Z
?getGripPoints@TdtDbPointObj@@UBE?AW4ErrorStatus@Acad@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@1@Z
?getOsnapPoints@TdtDbPointObj@@UBE?AW4ErrorStatus@Acad@@W4OsnapMode@AcDb@@HABVAcGePoint3d@@1ABVAcGeMatrix3d@@AAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@AAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@@Z
?gpDesc@TdtDbEntity@@2PAVAcRxClass@@A
?gpDesc@TdtDbMeasurePointObj@@2PAVAcRxClass@@A
?gpDesc@TdtDbObject@@2PAVAcRxClass@@A
?gpDesc@TdtDbPointObj@@2PAVAcRxClass@@A
?gpDesc@TdtDbStationPointObj@@2PAVAcRxClass@@A
?initCLSID@TdtDbMeasurePointObj@@SAXXZ
?isA@TdtDbEntity@@UBEPAVAcRxClass@@XZ
?isA@TdtDbMeasurePointObj@@UBEPAVAcRxClass@@XZ
?isA@TdtDbObject@@UBEPAVAcRxClass@@XZ
?isA@TdtDbPointObj@@UBEPAVAcRxClass@@XZ
?isA@TdtDbStationPointObj@@UBEPAVAcRxClass@@XZ
?kCurrentVersionNumber@TdtDbMeasurePointObj@@1KA
?m_GiTextStyle@TdtPointObjSettings@@2PAVAcGiTextStyle@@A
?moveGripPointsAt@TdtDbPointObj@@UAE?AW4ErrorStatus@Acad@@ABV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@ABVAcGeVector3d@@@Z
?rxInit@TdtDbEntity@@SAXP6AXPBVAcRxClass@@AAPA_WH@Z@Z
?rxInit@TdtDbEntity@@SAXXZ
?rxInit@TdtDbMeasurePointObj@@SAXP6AXPBVAcRxClass@@AAPA_WH@Z@Z
?rxInit@TdtDbMeasurePointObj@@SAXXZ
?rxInit@TdtDbObject@@SAXP6AXPBVAcRxClass@@AAPA_WH@Z@Z
?rxInit@TdtDbObject@@SAXXZ
?rxInit@TdtDbPointObj@@SAXP6AXPBVAcRxClass@@AAPA_WH@Z@Z
?rxInit@TdtDbPointObj@@SAXXZ
?rxInit@TdtDbStationPointObj@@SAXP6AXPBVAcRxClass@@AAPA_WH@Z@Z
?rxInit@TdtDbStationPointObj@@SAXXZ
?s_bHasClsid@TdtDbMeasurePointObj@@0_NA
?s_clsid@TdtDbMeasurePointObj@@0U_GUID@@A
?subErase@TdtDbMeasurePointObj@@UAE?AW4ErrorStatus@Acad@@H@Z
?transformBy@TdtDbPointObj@@UAE?AW4ErrorStatus@Acad@@ABVAcGeMatrix3d@@@Z
?worldDraw@TdtDbMeasurePointObj@@UAEHPAVAcGiWorldDraw@@@Z
?worldDraw@TdtDbStationPointObj@@UAEHPAVAcGiWorldDraw@@@Z
CreatePoint
acrxEntryPoint
acrxGetApiVersion

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DBXCUSTO
Size: 4KB - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88ac11eff34ac78408569a90e964fb3a

Headers

File Characteristics

Imports

kernel32

ole32

msvcp80

mfc80u

msvcr80

acdb17

acge17

oleaut32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 86KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 3KB

.idata Size: 24KB - Virtual size: 21KB

DBXCUSTO Size: 4KB - Virtual size: 520B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 88KB - Virtual size: 86KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 24KB - Virtual size: 21KB

DBXCUSTO
Size: 4KB - Virtual size: 520B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 6KB