E:\w\328b3cc762394cc5\sw\physx\PhysXSDK\2.8.3\RELEASE\bin\win64\PhysXCooking64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6ab1bee44804b0821933c7b20bbdc92deb6a21fd587a51d43761ba1500c2149d.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6ab1bee44804b0821933c7b20bbdc92deb6a21fd587a51d43761ba1500c2149d.dll
Resource
win10v2004-20240802-en
General
-
Target
6ab1bee44804b0821933c7b20bbdc92deb6a21fd587a51d43761ba1500c2149d.exe
-
Size
664KB
-
MD5
b9a2848089e8e6e46acfd3578fc57de0
-
SHA1
7474873629399ee5fdd984c99b705e0490ab8707
-
SHA256
6ab1bee44804b0821933c7b20bbdc92deb6a21fd587a51d43761ba1500c2149d
-
SHA512
542cb743f0b95aebf64cd164454879ab14344309d3b8874a147a1c7174a92ead93e770ac9fa3edac91b2ae226f915e6c3ca4c02bfe32d3e83185459686e710bd
-
SSDEEP
12288:O91cLMmvNqP3zx6pLn+mWol7DFCp4m9pckoZtm:O91cYmvN+zkom5HCJ9pHo3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab1bee44804b0821933c7b20bbdc92deb6a21fd587a51d43761ba1500c2149d.exe
Files
-
6ab1bee44804b0821933c7b20bbdc92deb6a21fd587a51d43761ba1500c2149d.exe.dll windows:5 windows x64 arch:x64
fc95d9602c39b01774b1f9a2b19b1e87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
CloseHandle
Sleep
QueryPerformanceCounter
CreateFileW
GetProcessHeap
SetEndOfFile
GetStringTypeW
LCMapStringW
WriteConsoleW
CreateFileA
FlushFileBuffers
SetStdHandle
RtlPcToFileHeader
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
DecodePointer
EncodePointer
FlsSetValue
GetCommandLineA
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
HeapSize
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoW
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
wsock32
send
WSAGetLastError
recv
htons
gethostbyname
ioctlsocket
gethostbyaddr
socket
connect
closesocket
inet_ntoa
WSAStartup
Exports
Exports
NxCloseCooking
NxCookClothMesh
NxCookConvexMesh
NxCookSoftBodyMesh
NxCookTriangleMesh
NxCreatePMap
NxGetCookingInterface
NxGetCookingParams
NxInitCooking
NxPlatformMismatch
NxReleasePMap
NxReportCooking
NxScaleCookedConvexMesh
clBuildProgram
Sections
.text Size: 306KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ