1dd7fe796df94fa945c487083ea5d366f1c35ddf000d6c0a29d909ae359824ee

Sharing

Copy URL Twitter E-mail

General

Target

1dd7fe796df94fa945c487083ea5d366f1c35ddf000d6c0a29d909ae359824ee
Size

91KB
MD5

1fdb4b407ebeecbd8f5487b1a9bf2791
SHA1

291509320bab80f3fc8729a5ccca3d3230576d2b
SHA256

1dd7fe796df94fa945c487083ea5d366f1c35ddf000d6c0a29d909ae359824ee
SHA512

b3571f0f82de884dd99973840feab51bbf0fc29aaa038e27bc4ca6808700b6a5d33d85973e04f739a9eef6ad302dd538bcbcd8225440d6e1ca5610596b071127
SSDEEP

1536:iiawlQ9fK9DSF7It0OCV6eTXqrYvS5k3O+HberaD3fO:1lQ9C4F7ItzSZv2k3O+v3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dd7fe796df94fa945c487083ea5d366f1c35ddf000d6c0a29d909ae359824ee

Files

1dd7fe796df94fa945c487083ea5d366f1c35ddf000d6c0a29d909ae359824ee
.dll windows:6 windows x64 arch:x64

eb9d921a4ec6dce321274c411a1b67c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mastercam

?GetPlanes@Planes@Globals@Cnc@@YAAEAVMastercamPlanes@@XZ
?GetActiveUnitVector@MastercamPlanes@@QEBA?AVP3D@@W4PlaneType@@H@Z
??1P3D@@UEAA@XZ
??4P3D@@QEAAAEAV0@AEBV0@@Z
?WorldToPlane@MastercamPlanes@@QEBA?AVP3D@@W4PlaneType@@AEBV2@@Z
?v_angle_3D@P3D@@QEBANAEBV1@@Z
?FindViewK@MastercamPlanes@@QEAAPEBVPlaneBase@@AEBVP3D@@_N111N@Z
?FindPlane@MastercamPlanes@@QEAAPEBVPlane@@AEBVMatrix33@@@Z
?GetMatrix33@PlaneBase@@QEBA?AVMatrix33@@XZ
??1Matrix33@@UEAA@XZ
??0Plane@@QEAA@AEBVP3D@@W4PlaneType@@AEAH@Z
??1Plane@@UEAA@XZ
??1PlaneID@@UEAA@XZ
??1PlanePoint@@UEAA@XZ
?GetActiveName@MastercamPlanes@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@W4PlaneType@@@Z
?SetName@Plane@@QEAA_NAEBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetType@Plane@@QEAA?AW4PlaneType@@W42@@Z
?SetComment@Plane@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEBV23@@Z
?SetOriginPoint@Plane@@QEAA?AVPlanePoint@@AEBV2@@Z
?GetActivePlane@MastercamPlanes@@QEBA?AVPlane@@W4PlaneType@@_N@Z
?Add@MastercamPlanes@@QEAAPEBVPlane@@AEAV2@_N@Z
?SetActivePlane@MastercamPlanes@@QEAAJW4PlaneType@@J@Z
?GetID@PlaneBase@@QEBA?AVPlaneID@@XZ
?GetUserType@@YA?AW4LicenseUserType@@XZ
?GetLegacySimType@@YAHXZ
?GetLicenseNumber@@YAKXZ
?GetLicenseInfo@@YAXAEAUMCLicenseInfo@@_N1W4LicenseType@@1@Z
??0P3D@@QEAA@AEBVp_3d@@@Z

mccore

?DDX_ProcessEditReal@@YAXPEAVCDataExchange@@HAEAVMCReal@@@Z
??1MCReal@@UEAA@XZ
?DDX_ProcessEditString@@YAXPEAVCDataExchange@@HAEAVMCString@@@Z
?setValue@MCReal@@QEAA_NN@Z
??0MCReal@@QEAA@NNNF@Z

uictrls

?Create@UIDialog@@UEAAHIPEAVCWnd@@@Z
?DoModal@UIDialog@@UEAA_JXZ
?Create@UIDialog@@UEAAHPEB_WPEAVCWnd@@@Z
?OnSetFont@UIDialog@@MEAAXPEAVCFont@@@Z
?PreInitDialog@UIDialog@@MEAAXXZ
?EnableDlgWindow@UIDialog@@UEAAXHH@Z
?GetRuntimeClass@UIDialog@@UEBAPEAUCRuntimeClass@@XZ

mccorebase

?tol@@3NA

mcguibase

?OnCmdMsg@MCDialog@@MEAAHIHPEAXPEAUAFX_CMDHANDLERINFO@@@Z
??1MCString@@UEAA@XZ
?OnCancel@MCDialog@@UEAAXXZ
?LaunchHelp@MCDialog@@UEAAXI@Z
?PreTranslateMessage@MCDialog@@MEAAHPEAUtagMSG@@@Z
?GetThisMessageMap@MCDialog@@KAPEBUAFX_MSGMAP@@XZ
?DoDataExchange@MCDialog@@MEAAXPEAVCDataExchange@@@Z
??1MCDialog@@UEAA@XZ
??0MCDialog@@QEAA@IPEAVCWnd@@F_NH1@Z
?DestroyWindow@MCDialog@@UEAAHXZ
?OnInitDialog@MCDialog@@MEAAHXZ
?GetWndPosRegName@MCDialog@@UEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@00@Z
?DoesEditControlHaveFocus@MCDialog@@MEAA_NXZ
??0MCString@@QEAA@PEA_WH@Z
?Init@MCString@@QEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?OnOK@MCDialog@@UEAAXXZ

mfc140u

ord489
ord1121
ord3952
ord6090
ord14038
ord4656
ord290
ord2308
ord291
ord12030
ord287
ord2374
ord14225
ord2346
ord2350
ord2336
ord2193
ord2260
ord2234
ord2212
ord2269
ord7893
ord5245
ord7551
ord3308
ord3307
ord6000
ord13397
ord2697
ord8830
ord1489
ord5672
ord2801
ord2795
ord4472
ord2340
ord4638
ord1047
ord345
ord11644
ord1120
ord488
ord285
ord5709
ord2921
ord1667
ord296
ord2903
ord280
ord1501
ord1641
ord5240
ord4726
ord14128
ord2904
ord1057
ord990
ord6258
ord8900
ord9946
ord7922
ord5227
ord7450
ord7461
ord7460
ord5916
ord5062
ord5229
ord5083
ord5582
ord5339
ord9041
ord5552
ord5363
ord5080
ord1034
ord3172
ord3278
ord3279
ord3812
ord11806
ord2629
ord5723
ord13354
ord11406
ord6631
ord14217
ord7651
ord14211
ord2967
ord4352
ord9384
ord4360
ord4828
ord4767
ord4752
ord4814
ord4859
ord4782
ord4837
ord4853
ord4794
ord4800
ord4806
ord4788
ord4843
ord4776
ord1755
ord1734
ord310
ord2415
ord2414
ord3599
ord1748
ord1722
ord1700
ord11940
ord11944
ord13513
ord3173
ord8947
ord10691
ord6729
ord11902
ord8656
ord14209
ord11625
ord3718
ord11771
ord8819
ord11415
ord11414
ord5451
ord9979
ord9975
ord9977
ord9978
ord9976
ord14360
ord2698
ord7913
ord3209
ord3212
ord11850
ord13401
ord6002
ord3058
ord4081
ord8439
ord2906
ord3746
ord1033
ord5674
ord286
ord1491

kernel32

InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
CopyFileW
InitializeCriticalSectionAndSpinCount
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
OutputDebugStringW
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

user32

GetFocus
MessageBoxW
SendMessageW
EnableWindow

advapi32

CryptReleaseContext
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam
CryptDestroyHash

shell32

SHGetFolderPathW

shlwapi

PathFileExistsW

msvcp140

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEB_W_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

bcgcbpro3110u142

?OnSetPlacement@CBCGPDialog@@UEAAHAEAUtagWINDOWPLACEMENT@@@Z
?OnDrawBackstageWatermark@CBCGPDialog@@UEAAXPEAVCDC@@VCRect@@@Z
?OnRTLChanged@CBCGPDialog@@UEAAXH@Z
?OnDrawRibbonBackgroundImage@CBCGPDialog@@UEAAXPEAVCDC@@VCRect@@@Z
?IsWsCaptionStyle@CBCGPDialog@@UEBAHXZ
?SetActiveMenu@CBCGPDialog@@MEAAXPEAVCBCGPPopupMenu@@@Z
?OnAfterExpand@CBCGPDialog@@UEAAXXZ
?IsLightBox@CBCGPDialog@@MEBAHXZ
?OnBeforeExpand@CBCGPDialog@@UEAAXXZ
?AdjustControlsLayout@CBCGPDialog@@UEAAXXZ
?OnCommand@CBCGPDialog@@MEAAH_K_J@Z
?GetRibbonStartPageLeftPaneWidth@CBCGPDialog@@UEAAHXZ
?ResizeDynamicLayout@CBCGPDialog@@UEAAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
memmove
memcmp
_purecall
memset
__std_exception_destroy
__std_exception_copy
__std_terminate
__std_type_info_destroy_list
memcpy
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_cexit
_invalid_parameter_noinfo_noreturn
_crt_atexit
_execute_onexit_table
_register_onexit_function
_seh_filter_dll
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free
malloc

api-ms-win-crt-time-l1-1-0

_mktime64
_localtime64_s
_difftime64
_time64

api-ms-win-crt-math-l1-1-0

sqrt
sin
cos

api-ms-win-crt-stdio-l1-1-0

_wfopen
fclose
_fseeki64
_ftelli64
fread

api-ms-win-crt-string-l1-1-0

strcmp

Exports

Exports

m_main
m_version

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb9d921a4ec6dce321274c411a1b67c8

Headers

DLL Characteristics

File Characteristics

Imports

mastercam

mccore

uictrls

mccorebase

mcguibase

mfc140u

kernel32

user32

advapi32

shell32

shlwapi

msvcp140

bcgcbpro3110u142

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 648B

.reloc Size: 1024B - Virtual size: 912B

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 648B

.reloc
Size: 1024B - Virtual size: 912B