E:\w\328b3cc762394cc5\sw\physx\PhysXSDK\2.8.3\RELEASE\bin\win64\PhysXCooking64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
vierm_soft_x64.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
vierm_soft_x64.dll
Resource
win10v2004-20240802-en
General
-
Target
vierm_soft_x64.dll
-
Size
666KB
-
MD5
bc8e744b7004cf5f0d36aba128abb175
-
SHA1
62e23500cc5368e37be47371342784f72e481647
-
SHA256
617e31e9f71b365fe69719d3fc980d763e827a4f93d0e776d1587d0bfdb47674
-
SHA512
95565aba5dffe3440d35bc8aed6d83c5ee836736cbe18258422235c35a5ef050790492177e434f690e35e625e75a0a886f24d10eb0910f7d86685ecca8143cb6
-
SSDEEP
12288:8j1cRMmvhqP3zdeuPmme1jyrbG4qqs4bXqJxA1:8j1cmmvh+z4mm/p08qfXx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource vierm_soft_x64.dll
Files
-
vierm_soft_x64.dll.dll windows:5 windows x64 arch:x64
fc95d9602c39b01774b1f9a2b19b1e87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
CloseHandle
Sleep
QueryPerformanceCounter
CreateFileW
GetProcessHeap
SetEndOfFile
GetStringTypeW
LCMapStringW
WriteConsoleW
CreateFileA
FlushFileBuffers
SetStdHandle
RtlPcToFileHeader
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
DecodePointer
EncodePointer
FlsSetValue
GetCommandLineA
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
HeapSize
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoW
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
wsock32
send
WSAGetLastError
recv
htons
gethostbyname
ioctlsocket
gethostbyaddr
socket
connect
closesocket
inet_ntoa
WSAStartup
Exports
Exports
NxCloseCooking
NxCookClothMesh
NxCookConvexMesh
NxCookSoftBodyMesh
NxCookTriangleMesh
NxCreatePMap
GetDeepDVCState
NxGetCookingParams
NxInitCooking
NxPlatformMismatch
NxReleasePMap
NxReportCooking
NxScaleCookedConvexMesh
NxSetCookingParams
Sections
.text Size: 306KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ