5dcabed59f4ad4d64003deb37573ea1bffc69d55ae3b9241da8d1a2665d46dc7N

Sharing

Copy URL Twitter E-mail

General

Target

5dcabed59f4ad4d64003deb37573ea1bffc69d55ae3b9241da8d1a2665d46dc7N
Size

113KB
MD5

a7d634a1c4b796778789e4103844a2d0
SHA1

f2860d0a18128bb6f005b8bc218dba6ed10887e0
SHA256

5dcabed59f4ad4d64003deb37573ea1bffc69d55ae3b9241da8d1a2665d46dc7
SHA512

9a8432ddcc2eacfa6cec7271de9d4d245db310b9d14d82a4bb8bc6eb6d477e18f9874bae8810ace462971d50ceab5255a57e8f2114d5f75c49970f9ba2f6b808
SSDEEP

3072:10chiBKNDI+0maiOHOaOOYm1RT2gi/HPYFtb:1/umaHHOXm1RTti/HPY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dcabed59f4ad4d64003deb37573ea1bffc69d55ae3b9241da8d1a2665d46dc7N

Files

5dcabed59f4ad4d64003deb37573ea1bffc69d55ae3b9241da8d1a2665d46dc7N
.dll windows:6 windows x64 arch:x64

32b8b41c3042de163be72e95f8eadd40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

geode-common_modifier_surface

??$is_collapse_edge_valid@$01@geode@@YA_NAEBV?$TriangulatedSurface@$01@0@AEBUPolygonEdge@0@E@Z
?is_triangle_active@?$TriangulatedSurfaceModifier@$02@geode@@QEBA_NI@Z
?is_triangle_active@?$TriangulatedSurfaceModifier@$01@geode@@QEBA_NI@Z
?initialize@CommonModifierSurfaceLibrary@geode@@SAXXZ
??$is_collapse_edge_valid@$02@geode@@YA_NAEBV?$TriangulatedSurface@$02@0@AEBUPolygonEdge@0@E@Z
??$is_split_edge_valid@$01@geode@@YA_NAEBV?$TriangulatedSurface@$01@0@AEBUPolygonEdge@0@AEBV?$Point@$01@0@@Z
??$is_split_edge_valid@$02@geode@@YA_NAEBV?$TriangulatedSurface@$02@0@AEBUPolygonEdge@0@AEBV?$Point@$02@0@@Z

geode-common_modifier_common

?update_vertex_mappings@geode@@YAXAEAV?$vector@U?$MultiMapping@I@geode@@V?$allocator@U?$MultiMapping@I@geode@@@std@@@std@@AEBU?$MultiMapping@I@1@@Z

opengeode_mesh

??0PolygonEdge@geode@@QEAA@AEBUPolygonVertex@1@@Z
?polygon_edge_from_vertices@?$SurfaceMesh@$02@geode@@QEBA?AV?$optional@UPolygonEdge@geode@@@std@@II@Z
?polygons_around_vertex@?$SurfaceMesh@$02@geode@@QEBAAEBV?$InlinedVector@UPolygonVertex@geode@@$09V?$allocator@UPolygonVertex@geode@@@std@@@absl@@I@Z
?point@?$CoordinateReferenceSystemManagers@$02@geode@@QEBAAEBV?$Point@$02@2@I@Z
??0PolygonVertex@geode@@QEAA@AEBUPolygonEdge@1@@Z
?polygon_vertex@?$SurfaceMesh@$01@geode@@QEBAIAEBUPolygonVertex@2@@Z
?polygon_vertices@?$SurfaceMesh@$01@geode@@QEBA?AV?$InlinedVector@I$02V?$allocator@I@std@@@absl@@I@Z
?polygon_edge_vertex@?$SurfaceMesh@$01@geode@@QEBAIAEBUPolygonEdge@2@E@Z
?polygon_edge_vertices@?$SurfaceMesh@$01@geode@@QEBA?AV?$array@I$01@std@@AEBUPolygonEdge@2@@Z
?next_polygon_vertex@?$SurfaceMesh@$01@geode@@QEBA?AUPolygonVertex@2@AEBU32@@Z
?previous_polygon_vertex@?$SurfaceMesh@$01@geode@@QEBA?AUPolygonVertex@2@AEBU32@@Z
?next_polygon_edge@?$SurfaceMesh@$01@geode@@QEBA?AUPolygonEdge@2@AEBU32@@Z
?edge_length@?$SurfaceMesh@$02@geode@@QEBANAEBV?$array@I$01@std@@@Z
?previous_polygon_edge@?$SurfaceMesh@$01@geode@@QEBA?AUPolygonEdge@2@AEBU32@@Z
?polygon_adjacent_edge@?$SurfaceMesh@$01@geode@@QEBA?AV?$optional@UPolygonEdge@geode@@@std@@AEBUPolygonEdge@2@@Z
?edge_length@?$SurfaceMesh@$01@geode@@QEBANAEBV?$array@I$01@std@@@Z
?polygons_around_vertex@?$SurfaceMesh@$01@geode@@QEBAAEBV?$InlinedVector@UPolygonVertex@geode@@$09V?$allocator@UPolygonVertex@geode@@@std@@@absl@@I@Z
?polygon_edge_from_vertices@?$SurfaceMesh@$01@geode@@QEBA?AV?$optional@UPolygonEdge@geode@@@std@@II@Z
?point@?$CoordinateReferenceSystemManagers@$01@geode@@QEBAAEBV?$Point@$01@2@I@Z
?polygon_vertex@?$SurfaceMesh@$02@geode@@QEBAIAEBUPolygonVertex@2@@Z
?polygon_vertices@?$SurfaceMesh@$02@geode@@QEBA?AV?$InlinedVector@I$02V?$allocator@I@std@@@absl@@I@Z
?polygon_edge_vertex@?$SurfaceMesh@$02@geode@@QEBAIAEBUPolygonEdge@2@E@Z
?polygon_edge_vertices@?$SurfaceMesh@$02@geode@@QEBA?AV?$array@I$01@std@@AEBUPolygonEdge@2@@Z
?previous_polygon_vertex@?$SurfaceMesh@$02@geode@@QEBA?AUPolygonVertex@2@AEBU32@@Z
?next_polygon_edge@?$SurfaceMesh@$02@geode@@QEBA?AUPolygonEdge@2@AEBU32@@Z
?previous_polygon_edge@?$SurfaceMesh@$02@geode@@QEBA?AUPolygonEdge@2@AEBU32@@Z
?polygon_adjacent_edge@?$SurfaceMesh@$02@geode@@QEBA?AV?$optional@UPolygonEdge@geode@@@std@@AEBUPolygonEdge@2@@Z
??0PolygonEdge@geode@@QEAA@IE@Z

opengeode_geometry

??0?$Segment@$02@geode@@QEAA@AEBV?$Point@$02@1@0@Z
?segment_plane_intersection@geode@@YA?AU?$IntersectionResult@V?$Point@$02@geode@@@1@AEBV?$Segment@$02@1@AEBVPlane@1@@Z
??0?$Segment@$01@geode@@QEAA@AEBV?$Point@$01@1@0@Z
?point_side_to_segment@geode@@YA?AW4SIDE@1@AEBV?$Point@$01@1@AEBV?$Segment@$01@1@@Z
?segment_segment_intersection@geode@@YA?AU?$IntersectionResult@V?$Point@$01@geode@@@1@AEBV?$Segment@$01@1@0@Z
?point_side_to_plane@geode@@YA?AW4SIDE@1@AEBV?$Point@$02@1@AEBVPlane@1@@Z
?normal@?$GenericPlane@V?$reference_wrapper@$$CBV?$Point@$02@geode@@@std@@@geode@@QEBAAEBV?$Vector@$02@2@XZ
??$point_segment_distance@$01@geode@@YANAEBV?$Point@$01@0@AEBV?$Segment@$01@0@@Z
??$point_segment_distance@$02@geode@@YANAEBV?$Point@$02@0@AEBV?$Segment@$02@0@@Z
?segment_plane_intersection_detection@geode@@YA?AW4POSITION@1@AEBV?$Segment@$02@1@AEBVPlane@1@@Z
?direction@?$GenericSegment@V?$reference_wrapper@$$CBV?$Point@$02@geode@@@std@@$02@geode@@QEBA?AV?$Vector@$02@2@XZ
?segment_segment_intersection_detection@geode@@YA?AU?$pair@W4POSITION@geode@@W412@@std@@AEBV?$Segment@$01@1@0@Z

opengeode_basic

??1Library@geode@@UEAA@XZ
?set_instance@Singleton@geode@@CAXAEBVtype_info@@PEAV12@@Z
?lock@Singleton@geode@@CAAEAVmutex@std@@XZ
?call_initialize@Library@geode@@IEAAXPEBD@Z
??0Library@geode@@IEAA@XZ
?instance@Singleton@geode@@CAPEAV12@AEBVtype_info@@@Z

abseil_dll

?GetStackTrace@absl@@YAHPEAPEAXHH@Z
?ThrowStdOutOfRange@base_internal@absl@@YAXPEBD@Z
?kEmptyGroup@container_internal@absl@@3QBW4ctrl_t@12@B
?PrepareInsertNonSoo@container_internal@absl@@YA_KAEAVCommonFields@12@_KUFindInfo@12@AEBUPolicyFunctions@12@@Z
?GetHashRefForEmptyHasher@container_internal@absl@@YAPEBXAEBVCommonFields@12@@Z
?EraseMetaOnly@container_internal@absl@@YAXAEAVCommonFields@12@_K1@Z
?PrepareInsertAfterSoo@container_internal@absl@@YA_K_K0AEAVCommonFields@12@@Z
??$find_first_non_full@X@container_internal@absl@@YA?AUFindInfo@01@AEBVCommonFields@01@_K@Z
?kSooControl@container_internal@absl@@3QBW4ctrl_t@12@B
?InitControlBytesAfterSoo@HashSetResizeHelper@container_internal@absl@@AEAAXPEAW4ctrl_t@23@W4423@_K@Z
?GrowIntoSingleGroupShuffleControlBytes@HashSetResizeHelper@container_internal@absl@@AEBAXPEAW4ctrl_t@23@_K@Z
?TransferSlotAfterSoo@HashSetResizeHelper@container_internal@absl@@AEAAXAEAVCommonFields@23@_K@Z
?kSeed@MixingHashState@hash_internal@absl@@0QEBXEB
?Mix@MixingHashState@hash_internal@absl@@CA_K_K0@Z
?GrowSizeIntoSingleGroupTransferable@HashSetResizeHelper@container_internal@absl@@AEAAXAEAVCommonFields@23@_K@Z
?combine_contiguous@MixingHashState@hash_internal@absl@@SA?AV123@V123@PEBE_K@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp
__RTDynamicCast
memmove
memset
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
memcpy
__current_exception
__current_exception_context
__C_specific_handler
_CxxThrowException
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
terminate
_cexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
IsProcessorFeaturePresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess

Exports

Exports

??$cut_along_path@$01@geode@@YA?AU?$SurfaceCutPathInfo@$01@0@AEBV?$TriangulatedSurface@$01@0@AEAV?$TriangulatedSurfaceModifier@$01@0@IIV?$Span@$$CBU?$GeometricSurfacePath@$01@geode@@@absl@@@Z
??$cut_along_path@$02@geode@@YA?AU?$SurfaceCutPathInfo@$02@0@AEBV?$TriangulatedSurface@$02@0@AEAV?$TriangulatedSurfaceModifier@$02@0@IIV?$Span@$$CBU?$GeometricSurfacePath@$02@geode@@@absl@@@Z
??0?$SurfacePathFinder@$01@geode@@IEAA@AEBV?$TriangulatedSurface@$01@1@@Z
??0?$SurfacePathFinder@$02@geode@@IEAA@AEBV?$TriangulatedSurface@$02@1@@Z
??0?$SurfaceSegmentFinder@$01@geode@@QEAA@AEBV?$TriangulatedSurface@$01@1@II@Z
??0?$SurfaceSegmentFinder@$02@geode@@QEAA@AEBV?$TriangulatedSurface@$02@1@II@Z
??0CommonCutterSurfaceLibrary@geode@@QEAA@XZ
??0SurfaceSegmentFinder2D@geode@@QEAA@AEBV?$TriangulatedSurface@$01@1@II@Z
??0SurfaceSegmentFinder3D@geode@@QEAA@AEBV?$TriangulatedSurface@$02@1@IIAEBVPlane@1@@Z
??1?$SurfacePathFinder@$01@geode@@QEAA@XZ
??1?$SurfacePathFinder@$02@geode@@QEAA@XZ
??1?$SurfaceSegmentFinder@$01@geode@@UEAA@XZ
??1?$SurfaceSegmentFinder@$02@geode@@UEAA@XZ
??1CommonCutterSurfaceLibrary@geode@@UEAA@XZ
??1SurfaceSegmentFinder2D@geode@@UEAA@XZ
??1SurfaceSegmentFinder3D@geode@@UEAA@XZ
??_7?$SurfaceSegmentFinder@$01@geode@@6B@
??_7?$SurfaceSegmentFinder@$02@geode@@6B@
??_7CommonCutterSurfaceLibrary@geode@@6B@
??_7SurfaceSegmentFinder2D@geode@@6B@
??_7SurfaceSegmentFinder3D@geode@@6B@
?adjacent_opposite_vertex@?$SurfacePathFinder@$01@geode@@IEBA?AUPolygonVertex@2@AEBUPolygonEdge@2@@Z
?adjacent_opposite_vertex@?$SurfacePathFinder@$02@geode@@IEBA?AUPolygonVertex@2@AEBUPolygonEdge@2@@Z
?begin@?$SurfaceSegmentFinder@$01@geode@@IEBAIXZ
?begin@?$SurfaceSegmentFinder@$02@geode@@IEBAIXZ
?cut_along_path@geode@@YA?AU?$SurfaceCutPathInfo@$01@1@AEBV?$TriangulatedSurface@$01@1@AEAV?$TriangulatedSurfaceModifier@$01@1@II@Z
?determine_cuts@geode@@YA?AV?$vector@U?$GeometricSurfacePath@$01@geode@@V?$allocator@U?$GeometricSurfacePath@$01@geode@@@std@@@std@@AEBV?$TriangulatedSurface@$01@1@IIV?$Span@$$CBUSurfacePath@geode@@@absl@@@Z
?determine_cuts@geode@@YA?AV?$vector@U?$GeometricSurfacePath@$02@geode@@V?$allocator@U?$GeometricSurfacePath@$02@geode@@@std@@@std@@AEBV?$TriangulatedSurface@$02@1@IIAEBVPlane@1@V?$Span@$$CBUSurfacePath@geode@@@absl@@@Z
?do_initialize@CommonCutterSurfaceLibrary@geode@@EEAAXXZ
?edge_segment@?$SurfacePathFinder@$01@geode@@IEBA?AV?$Segment@$01@2@AEBUPolygonEdge@2@@Z
?edge_segment@?$SurfacePathFinder@$02@geode@@IEBA?AV?$Segment@$02@2@AEBUPolygonEdge@2@@Z
?end@?$SurfaceSegmentFinder@$01@geode@@IEBAIXZ
?end@?$SurfaceSegmentFinder@$02@geode@@IEBAIXZ
?find_path@?$SurfaceSegmentFinder@$01@geode@@QEBA?AV?$vector@USurfacePath@geode@@V?$allocator@USurfacePath@geode@@@std@@@std@@XZ
?find_path@?$SurfaceSegmentFinder@$02@geode@@QEBA?AV?$vector@USurfacePath@geode@@V?$allocator@USurfacePath@geode@@@std@@@std@@XZ
?initialize@CommonCutterSurfaceLibrary@geode@@SAXXZ
?next_edge_intersection@SurfaceSegmentFinder2D@geode@@MEBA?AUSurfacePath@2@AEBUPolygonEdge@2@@Z
?next_edge_intersection@SurfaceSegmentFinder3D@geode@@MEBA?AUSurfacePath@2@AEBUPolygonEdge@2@@Z
?next_intersection@?$SurfaceSegmentFinder@$01@geode@@IEBA?AUSurfacePath@2@AEBU32@0@Z
?next_intersection@?$SurfaceSegmentFinder@$02@geode@@IEBA?AUSurfacePath@2@AEBU32@0@Z
?next_vertex_intersection@SurfaceSegmentFinder2D@geode@@MEBA?AUSurfacePath@2@AEBU32@I@Z
?next_vertex_intersection@SurfaceSegmentFinder3D@geode@@MEBA?AUSurfacePath@2@AEBU32@I@Z
?segment@?$SurfaceSegmentFinder@$01@geode@@IEBAAEBV?$Segment@$01@2@XZ
?segment@?$SurfaceSegmentFinder@$02@geode@@IEBAAEBV?$Segment@$02@2@XZ
?stop_propagation@?$SurfaceSegmentFinder@$01@geode@@IEBA_NAEBUSurfacePath@2@@Z
?stop_propagation@?$SurfaceSegmentFinder@$02@geode@@IEBA_NAEBUSurfacePath@2@@Z
?surface@?$SurfacePathFinder@$01@geode@@IEBAAEBV?$TriangulatedSurface@$01@2@XZ
?surface@?$SurfacePathFinder@$02@geode@@IEBAAEBV?$TriangulatedSurface@$02@2@XZ

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32b8b41c3042de163be72e95f8eadd40

Headers

DLL Characteristics

File Characteristics

Imports

geode-common_modifier_surface

geode-common_modifier_common

opengeode_mesh

opengeode_geometry

opengeode_basic

abseil_dll

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 288B

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 288B