08b223a40fed655fb2e18e2171f3c8ed3662f7adc6a3f448894245f51b852daf_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

08b223a40fed655fb2e18e2171f3c8ed3662f7adc6a3f448894245f51b852daf_NeikiAnalytics.exe
Size

105KB
MD5

ba21105d36b09bd8d37b11497de5be80
SHA1

b9efa363a8a7da0c5251e9ea59853dff69a7591a
SHA256

08b223a40fed655fb2e18e2171f3c8ed3662f7adc6a3f448894245f51b852daf
SHA512

6e90b8043ad9dc2cd1e6ff3aebd9f48600e2c1a431294448a2d9d910fe157e3b9633a61dab983e148ec7bf5d03a7481011b55bcf531c9d6a87f26eaab90b9d02
SSDEEP

1536:5AK53nUuYnZUyeYJ8FkCgemMuL7Ft1iFYe4/3JH7O/FnDhlUUPB:/5Yeye9FkCDmbtYOv5H7O/FnDhlUU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b223a40fed655fb2e18e2171f3c8ed3662f7adc6a3f448894245f51b852daf_NeikiAnalytics.exe

Files

08b223a40fed655fb2e18e2171f3c8ed3662f7adc6a3f448894245f51b852daf_NeikiAnalytics.exe
.dll windows:5 windows x64 arch:x64

03c60d2ce77ae9f51633dac3918a3a67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\develop\Inteface2009\lib_x64\IvConverter_v10.pdb

Imports

base_stream1710_x64_vc80

?SetPoints@TK_Polyhedron@@QEAA?AW4TK_Status@@HPEBM@Z
??1TK_Color_RGB@@UEAA@XZ
??_7TK_Color_RGB@@6B@
??1TK_Linear_Pattern@@UEAA@XZ
??_7TK_Linear_Pattern@@6B@
??1TK_Text_Font@@UEAA@XZ
?set_names@TK_Text_Font@@IEAAXPEBD@Z
??_7TK_Text_Font@@6B@
??1TK_Enumerated@@UEAA@XZ
??_7TK_Enumerated@@6B@
??1TK_PolyCylinder@@UEAA@XZ
?SetEndNormal@TK_PolyCylinder@@QEAAXHPEBM@Z
?SetPoints@TK_PolyCylinder@@QEAAXHPEBM@Z
?SetRadii@TK_PolyCylinder@@QEAAXHPEBM@Z
??0TK_PolyCylinder@@QEAA@XZ
??0BStreamFileToolkit@@QEAA@XZ
??2BControlledMemoryObject@@SAPEAX_K@Z
?read_completed@BStreamFileToolkit@@MEAAXXZ
?ActivateContext@BStreamFileToolkit@@UEAAX_J@Z
?DeactivateContext@BStreamFileToolkit@@UEAAX_J@Z
?NewFileContext@BStreamFileToolkit@@UEAAX_J@Z
?Restart@BStreamFileToolkit@@UEAAXXZ
?OpenFile@BStreamFileToolkit@@UEAA?AW4TK_Status@@PEBG_N@Z
?OpenFile@BStreamFileToolkit@@UEAA?AW4TK_Status@@PEB_W_N@Z
?OpenFile@BStreamFileToolkit@@UEAA?AW4TK_Status@@PEBD_N@Z
?CloseFile@BStreamFileToolkit@@UEAA?AW4TK_Status@@XZ
?ReadBuffer@BStreamFileToolkit@@UEAA?AW4TK_Status@@PEADHAEAH@Z
?WriteBuffer@BStreamFileToolkit@@UEAA?AW4TK_Status@@PEADH@Z
?PositionFile@BStreamFileToolkit@@UEAA?AW4TK_Status@@H@Z
?GetFileSize@BStreamFileToolkit@@UEAA?AW4TK_Status@@AEAK@Z
?LocateDictionary@BStreamFileToolkit@@UEAA?AW4TK_Status@@XZ
?LocateEntity@BStreamFileToolkit@@UEAA?AW4TK_Status@@_JH@Z
?Error@BStreamFileToolkit@@UEBA?AW4TK_Status@@PEBD@Z
?MatchPreviousExRef@BStreamFileToolkit@@UEBA_NXZ
?tag@BStreamFileToolkit@@MEAA?AW4TK_Status@@H@Z
?empty_lists@BStreamFileToolkit@@MEAAXXZ
?Read@TK_Compression@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_Compression@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Execute@TK_Compression@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Interpret@TK_Compression@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JPEBD@Z
?Interpret@TK_Compression@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JH@Z
??1BStreamFileToolkit@@UEAA@XZ
?Read@TK_Terminator@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_Terminator@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Execute@TK_Terminator@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?SetVertexNormals@TK_Polyhedron@@QEAA?AW4TK_Status@@PEBM@Z
??1TK_Polypoint@@UEAA@XZ
??0TK_User_Options@@QEAA@XZ
??1TK_Open_Segment@@UEAA@XZ
?set_segment@TK_Open_Segment@@IEAAXPEBD@Z
??_7TK_Open_Segment@@6B@
??1TK_NURBS_Curve@@UEAA@XZ
??_7TK_Close_Segment@@6B@
??1TK_Visibility@@UEAA@XZ
??_7TK_Visibility@@6B@
??1TK_Size@@UEAA@XZ
??_7TK_Size@@6B@
??1TK_XML@@UEAA@XZ
?AppendXML@TK_XML@@QEAAXHPEBD@Z
??_7TK_XML@@6B@
?SetLastKey@BStreamFileToolkit@@QEAAX_J@Z
?Read@TK_Open_Segment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_Open_Segment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Reset@TK_Open_Segment@@UEAAXXZ
?Clone@TK_Open_Segment@@UEBA?AW4TK_Status@@AEAVBStreamFileToolkit@@PEAPEAVBBaseOpcodeHandler@@@Z
?Read@TK_Color_RGB@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_Color_RGB@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Clone@TK_Color_RGB@@UEBA?AW4TK_Status@@AEAVBStreamFileToolkit@@PEAPEAVBBaseOpcodeHandler@@@Z
?Read@TK_Close_Segment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_Close_Segment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Clone@TK_Close_Segment@@UEBA?AW4TK_Status@@AEAVBStreamFileToolkit@@PEAPEAVBBaseOpcodeHandler@@@Z
??0TK_Comment@@QEAA@PEBD@Z
?Read@TK_Comment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_Comment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Execute@TK_Comment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Interpret@TK_Comment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JPEBD@Z
?Interpret@TK_Comment@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JH@Z
?Reset@TK_Comment@@UEAAXXZ
?Read@TK_File_Info@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_File_Info@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Execute@TK_File_Info@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Interpret@TK_File_Info@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JPEBD@Z
?Interpret@TK_File_Info@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JH@Z
??1TK_Comment@@UEAA@XZ
?write@Internal_Data_Accumulator@@QEAA?AW4TK_Status@@PEBDH@Z
?Write@TK_Polypoint@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Write@TK_Point@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Reset@TK_Shell@@UEAAXXZ
?PopObject@TK_Polyhedron@@QEAAPEAVBBaseOpcodeHandler@@XZ
?KeyToIndex@BStreamFileToolkit@@QEBA?AW4TK_Status@@_JAEAH@Z
?Write@TK_Shell@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?SetFaces@TK_Shell@@IEAA?AW4TK_Status@@HPEBH@Z
??0TK_NURBS_Curve@@QEAA@XZ
??1TK_User_Options@@UEAA@XZ
?set_curve@TK_NURBS_Curve@@IEAAXHHPEBM00MM@Z
??_7TK_Ellipse@@6B@
??1TK_Ellipse@@UEAA@XZ
??_7TK_Circle@@6B@
??1TK_Circle@@UEAA@XZ
??_7TK_Point@@6B@
??1TK_Point@@UEAA@XZ
??0TK_Line_Style@@QEAA@XZ
?SetDefinition@TK_Line_Style@@QEAAXPEBD@Z
??1TK_Line_Style@@UEAA@XZ
??_7TK_Matrix@@6B@
??1TK_Matrix@@UEAA@XZ
??_7TK_Polypoint@@6B@
??1TK_Close_Segment@@UEAA@XZ
?SetPoints@TK_Polypoint@@QEAAXHPEBM@Z
??0TK_Text@@QEAA@E@Z
?SetString@TK_Text@@QEAAXPEBG@Z
??1TK_Text@@UEAA@XZ
??_7TK_Line@@6B@
??1BBaseOpcodeHandler@@UEAA@XZ
??1TK_Line@@UEAA@XZ
?PrepareBuffer@BStreamFileToolkit@@QEAA?AW4TK_Status@@PEADH@Z
??3BControlledMemoryObject@@SAXPEAX@Z
??1TK_Shell@@UEAA@XZ
?write_bounding_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_uncompressed_faces_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_uncompressed_points_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_advanced_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_bounding@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_uncompressed_faces@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_uncompressed_points@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_advanced@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?compute_advanced@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_bounding_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_uncompressed_faces_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_uncompressed_points_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_advanced_ascii@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_bounding@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_uncompressed_faces@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_uncompressed_points@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_advanced@TK_Shell@@EEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?mangle_face_attributes@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@HPEAH@Z
?mangle_point_attributes@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@HPEAH@Z
?mangle_points@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@HPEAH@Z
?write_collection_ascii@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_NH@Z
?write_vertex_marker_sizes_ascii@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_collection_ascii@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_trivial_points_ascii@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_trivial_points_ascii@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
??0BBaseOpcodeHandler@@QEAA@H@Z
?write_collection@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_NH@Z
?read_collection@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?write_trivial_points@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?read_trivial_points@TK_Polyhedron@@MEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?AllowInstancing@TK_Polyhedron@@MEBA_NAEAVBStreamFileToolkit@@@Z
?LabelFakeEdges@TK_Polyhedron@@MEAA?AW4TK_Status@@XZ
?EnumerateEdges@TK_Shell@@MEAA?AW4TK_Status@@XZ
?Read@TK_Shell@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
??0TK_Shell@@QEAA@XZ
?Reset@TK_Polypoint@@UEAAXXZ
?Clone@TK_Polypoint@@UEBA?AW4TK_Status@@AEAVBStreamFileToolkit@@PEAPEAVBBaseOpcodeHandler@@@Z
?Read@TK_Polypoint@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Reset@BBaseOpcodeHandler@@UEAAXXZ
?Clone@TK_Point@@UEBA?AW4TK_Status@@AEAVBStreamFileToolkit@@PEAPEAVBBaseOpcodeHandler@@@Z
?Read@TK_Point@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
??1TK_Header@@UEAA@XZ
?Reset@TK_Header@@UEAAXXZ
?NeedsContext@BBaseOpcodeHandler@@UEBA_NAEAVBStreamFileToolkit@@@Z
?Clone@BBaseOpcodeHandler@@UEBA?AW4TK_Status@@AEAVBStreamFileToolkit@@PEAPEAV1@@Z
?Match_Instance@BBaseOpcodeHandler@@UEAA_NAEBVBStreamFileToolkit@@PEAVRecorded_Instance@@@Z
?Interpret@BBaseOpcodeHandler@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JH@Z
?Interpret@BBaseOpcodeHandler@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@_JPEBD@Z
?Execute@BBaseOpcodeHandler@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?Read@TK_Header@@UEAA?AW4TK_Status@@AEAVBStreamFileToolkit@@@Z
?set_options@TK_User_Options@@IEAAXPEBD@Z

user32

EnableWindow
MessageBoxA
SendMessageA

intevuefiledll_x64

?XmlGetElementAttribute@CIvFile@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V?$CComPtr@UIXMLDOMElement@@@3@V23@@Z
?XmlGetNextNode@CIvFile@@SA?AV?$CComPtr@UIXMLDOMElement@@@ATL@@V23@@Z
?SaveXMLDocToZipFile@CIvFile@@SAHPEBDV?$CComPtr@UIXMLDOMDocument@@@ATL@@@Z
?GetRelatePath@CIvFile@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?CreateXmlDoc@CIvFile@@SA?AV?$CComPtr@UIXMLDOMDocument@@@ATL@@XZ
?XmlAddChild@CIvFile@@SA?AV?$CComPtr@UIXMLDOMElement@@@ATL@@V?$CComPtr@UIXMLDOMDocument@@@3@V23@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@3@2@Z
?XmlAddChild@CIvFile@@SA?AV?$CComPtr@UIXMLDOMElement@@@ATL@@V?$CComPtr@UIXMLDOMDocument@@@3@V23@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@3@@Z
?XmlGetFirstChild@CIvFile@@SA?AV?$CComPtr@UIXMLDOMElement@@@ATL@@V23@@Z
?XmlSetAttribute@CIvFile@@SAXV?$CComPtr@UIXMLDOMElement@@@ATL@@V?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@3@1@Z

mfc100

ord6865
ord11470
ord10840
ord10871
ord9145
ord7063
ord3934
ord10867
ord10859
ord5031
ord3288
ord13107
ord13110
ord13108
ord13111
ord13106
ord13109
ord6868
ord11099
ord12808
ord10609
ord13700
ord1709
ord6823
ord11489
ord3477
ord3535
ord8182
ord12925
ord6806
ord12927
ord11107
ord11106
ord2116
ord4555
ord13393
ord11410
ord7213
ord7286
ord1266
ord5769
ord2018
ord10961
ord12936
ord10984
ord12955
ord369
ord5562
ord8001
ord8982
ord4920
ord10790
ord2753
ord2851
ord2852
ord3355
ord10747
ord2285
ord5046
ord12138
ord10366
ord5887
ord12926
ord6807
ord12928
ord2573
ord3842
ord13605
ord3849
ord4246
ord4213
ord4209
ord4243
ord4264
ord4222
ord4251
ord4260
ord4230
ord4234
ord4238
ord4226
ord4255
ord4218
ord1492
ord1485
ord1487
ord1481
ord1474
ord10875
ord10877
ord12284
ord2754
ord8047
ord9688
ord5973
ord10794
ord7766
ord12920
ord10577
ord3275
ord10712
ord7931
ord13599
ord13598
ord13670
ord13687
ord13683
ord13685
ord13686
ord13684
ord2353
ord7057
ord2785
ord2788
ord12181
ord5319
ord2659
ord2877
ord2878
ord10054
ord7833
ord10754
ord12845
ord9171
ord9701
ord3136
ord3254
ord6423
ord3237
ord12303
ord4608
ord4458
ord4722
ord4892
ord8135
ord4700
ord4895
ord4461
ord4597
ord4445
ord6640
ord6641
ord6631
ord4595
ord7065
ord8977
ord8000
ord5871
ord876
ord6580
ord321
ord3479
ord13144
ord924
ord995
ord456
ord2530
ord4124
ord858
ord408
ord5003
ord10964
ord4340
ord11125
ord2440
ord955
ord1246
ord1948
ord1419
ord1294
ord310
ord300
ord2022
ord5035
ord305
ord12679
ord2538
ord2024
ord2028
ord316
ord3990
ord7190
ord1291
ord1690
ord5002
ord11465
ord7038
ord1426
ord7323
ord889
ord1272
ord265
ord266
ord1274
ord11246
ord893
ord2051
ord3285
ord2014
ord2012
ord2040
ord1945
ord2002
ord396
ord1914
ord2050
ord2048
ord1906
ord1844
ord1895
ord322
ord1275
ord397

msvcr100

__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__CppXcptFilter
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
__C_specific_handler
?terminate@@YAXXZ
printf
atol
memmove_s
memcpy_s
memset
strstr
sprintf
memcpy
fwrite
fopen
fclose
strcpy_s
__CxxFrameHandler3
log

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
MultiByteToWideChar
lstrlenA
GetFileAttributesA
LocalFree
LocalAlloc
EncodePointer
DecodePointer

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA

oleaut32

SysFreeString

Exports

Exports

??0CIvConvertAsm@@QEAA@XZ
??0CIvNameManager@@QEAA@XZ
??1CIvConvertAsm@@UEAA@XZ
??1CIvNameManager@@UEAA@XZ
??_7CIvConvertAsm@@6B@
??_7CIvNameManager@@6B@
?API_CloseSegment@@YAXXZ
?API_FreeBuffer@@YAXAEAPEAD@Z
?API_FreeFaceData@@YAXXZ
?API_GetSaveSetting@@YAHPEBD@Z
?API_GetTesselationPrec@@YAHPEBD@Z
?API_InitConverter@@YAXPEAD@Z
?API_LineType@@YAXH@Z
?API_OpenSegment@@YAXPEAD@Z
?API_SetColor@@YAXHMMM@Z
?API_SetColor@@YAXMMM@Z
?API_SetLineFont@@YAXH@Z
?API_SetLineStyle@@YAXPEAD@Z
?API_SetLineWeight@@YAXM@Z
?API_SetMatrix@@YAXPEAM@Z
?API_SetMatrix@@YAXPEAN@Z
?API_SetTesselationPrec@@YAXPEBD@Z
?API_SetTextAlignment@@YAXH@Z
?API_SetTextFont@@YAXPEAD@Z
?API_SetTextSize@@YAXMH@Z
?API_SetTextTransform@@YAXH@Z
?API_SetUserOptions@@YAXPEBD@Z
?API_SetVisibility@@YAXH@Z
?API_TerminateConverter@@YAXXZ
?API_WriteArc@@YAXMMMMMMMMM@Z
?API_WriteArcToBuffer@@YAXPEAN0NAEAHAEAPEAD@Z
?API_WriteAttribute@@YAXHHAEAVCStringList@@000@Z
?API_WriteCircle@@YAXMMMMMMMMM@Z
?API_WriteConeToBuffer@@YAXPEAN0NAEAHAEAPEAD@Z
?API_WriteConstraintToBuffer@@YAXJHNJJPEADJJ0AEAHAEAPEAD@Z
?API_WriteCylinderToBuffer@@YAXPEAN0NAEAHAEAPEAD@Z
?API_WriteEllipse@@YAXMMMMMMMMM@Z
?API_WriteEllipseArc@@YAXMMMMMMMMMMM@Z
?API_WriteInfo@@YAXPEBDH@Z
?API_WriteLine@@YAXMMMMMM@Z
?API_WriteLineToBuffer@@YAXPEAN0AEAHAEAPEAD@Z
?API_WriteMarker@@YAXMMM@Z
?API_WriteNurbs@@YAXHHPEBM00MM@Z
?API_WritePlaneToBuffer@@YAXPEAN0AEAHAEAPEAD@Z
?API_WritePloyLine@@YAXHPEAM@Z
?API_WritePloyLine@@YAXHPEAN@Z
?API_WritePloygon@@YAXHPEAM@Z
?API_WritePloygon@@YAXHPEAN@Z
?API_WritePoint@@YAXMMMHPEAD@Z
?API_WritePoint@@YAXPEBMHPEAD@Z
?API_WritePointToBuffer@@YAXPEANAEAHAEAPEAD@Z
?API_WritePolyCylinder@@YAXMHPEAM00@Z
?API_WritePolyLine@@YAXHPEAMHPEADPEAN@Z
?API_WriteShell@@YAXHPEAM0HPEAH0HPEADPEAN@Z
?API_WriteShell@@YAXHPEAM0HPEAH@Z
?API_WriteSphereToBuffer@@YAXPEANNAEAHAEAPEAD@Z
?API_WriteText@@YAXMMMPEBD@Z
?API_WriteTorusToBuffer@@YAXPEAN0NNAEAHAEAPEAD@Z
?AddName@CIvNameManager@@QEAAPEADPEBDW4NameOption@1@@Z
?AppendCount@CIvNameManager@@QEAAXH@Z
?FindNamePtr@CIvNameManager@@QEAAPEADPEBD@Z
?GetInputPath@@YA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?Optimize@CIvNameManager@@QEAAXXZ
?SetFile@CIvConvertAsm@@QEAAXPEBD00@Z
?SetFile@CIvConvertAsm@@QEAAXPEBD0@Z
?UndoLast@CIvNameManager@@QEAAXXZ
?WriteChild@CIvConvertAsm@@QEAAXPEBD000JHPEAN1H0@Z
?WriteConfigChild@CIvConvertAsm@@QEAAXPEBD0000JHPEAN1H0@Z
?WriteDeformChild@CIvConvertAsm@@QEAAXPEBD000JHPEAN1H0H00@Z
?WritePropSet@CIvConvertAsm@@QEAAXPEBD0AEAVCStringList@@11@Z
?api_fs_add_facet@@YAHQEAM00000@Z
?api_fs_init@@YAHHQEAM00@Z
?api_get_facets_data@@YAXAEAHAEAPEAM10AEAPEAH@Z

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03c60d2ce77ae9f51633dac3918a3a67

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

base_stream1710_x64_vc80

user32

intevuefiledll_x64

mfc100

msvcr100

kernel32

advapi32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 2KB - Virtual size: 36KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 2KB - Virtual size: 36KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB