09da2025cb831f45c79080fdb5e840102864692e514966e4cdd9e7ae5d91c99dN

Sharing

Copy URL Twitter E-mail

General

Target

09da2025cb831f45c79080fdb5e840102864692e514966e4cdd9e7ae5d91c99dN
Size

62KB
MD5

fe8f5c4f143e8a2bea3441d038690db0
SHA1

ef2304cc3de26a13573512f2a9ce2972b3a8687a
SHA256

09da2025cb831f45c79080fdb5e840102864692e514966e4cdd9e7ae5d91c99d
SHA512

471e2e795403a196478b963d09beafee3cbf6242cfc0b63827798dfdc7ac253b4ef7fecb6ab7c21728a30f3d827fcfe3905b93b6f927130e4f5a45adb48c1123
SSDEEP

1536:exAGa1r9I7ZHhhaOhG00Ra3lgi/42i+JQ:eCzMZB7G5RWi+JQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09da2025cb831f45c79080fdb5e840102864692e514966e4cdd9e7ae5d91c99dN

Files

09da2025cb831f45c79080fdb5e840102864692e514966e4cdd9e7ae5d91c99dN
.dll windows:6 windows x64 arch:x64

d09c139c2ec1884bbb07e6bb7b5f94e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

opengeode_mesh

??$create_aabb_tree@$01@geode@@YA?AV?$AABBTree@$01@0@AEBV?$SurfaceMesh@$01@0@@Z
??$create_aabb_tree@$02@geode@@YA?AV?$AABBTree@$02@0@AEBV?$SolidMesh@$02@0@@Z
?clone@?$TetrahedralSolid@$02@geode@@QEBA?AV?$unique_ptr@V?$TetrahedralSolid@$02@geode@@U?$default_delete@V?$TetrahedralSolid@$02@geode@@@std@@@std@@XZ
?clone@?$TriangulatedSurface@$01@geode@@QEBA?AV?$unique_ptr@V?$TriangulatedSurface@$01@geode@@U?$default_delete@V?$TriangulatedSurface@$01@geode@@@std@@@std@@XZ
??R?$DistanceToTriangle@$01@geode@@QEBANAEBV?$Point@$01@1@I@Z
?initialize@OpenGeodeMeshLibrary@geode@@SAXXZ
??R?$DistanceToTetrahedron@$02@geode@@QEBANAEBV?$Point@$02@1@I@Z

opengeode_geometry

?signed_distance@?$BoundingBox@$02@geode@@QEBANAEBV?$Point@$02@2@@Z
?nb_bboxes@?$AABBTree@$02@geode@@QEBAIXZ
??1?$AABBTree@$02@geode@@QEAA@XZ
?nb_bboxes@?$AABBTree@$01@geode@@QEBAIXZ
?signed_distance@?$BoundingBox@$01@geode@@QEBANAEBV?$Point@$01@2@@Z
??1?$AABBTree@$01@geode@@QEAA@XZ

opengeode_basic

?find_attribute_base@AttributeManager@geode@@AEBA?AV?$shared_ptr@VAttributeBase@geode@@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@4@@Z
?register_attribute@AttributeManager@geode@@AEAAXV?$shared_ptr@VAttributeBase@geode@@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@4@@Z
??1Library@geode@@UEAA@XZ
??0Library@geode@@IEAA@XZ
?delete_attribute@AttributeManager@geode@@QEAAXV?$basic_string_view@DU?$char_traits@D@std@@@std@@@Z
?instance@Singleton@geode@@CAPEAV12@AEBVtype_info@@@Z
?set_instance@Singleton@geode@@CAXAEBVtype_info@@PEAV12@@Z
?lock@Singleton@geode@@CAAEAVmutex@std@@XZ
??8uuid@geode@@QEBA_NAEBU01@@Z
?call_initialize@Library@geode@@IEAAXPEBD@Z

abseil_dll

?combine_contiguous@MixingHashState@hash_internal@absl@@SA?AV123@V123@PEBE_K@Z
?GetStackTrace@absl@@YAHPEAPEAXHH@Z
?PrepareInsertNonSoo@container_internal@absl@@YA_KAEAVCommonFields@12@_KUFindInfo@12@AEBUPolicyFunctions@12@@Z
?GetHashRefForEmptyHasher@container_internal@absl@@YAPEBXAEBVCommonFields@12@@Z
?PrepareInsertAfterSoo@container_internal@absl@@YA_K_K0AEAVCommonFields@12@@Z
??$find_first_non_full@X@container_internal@absl@@YA?AUFindInfo@01@AEBVCommonFields@01@_K@Z
?kSooControl@container_internal@absl@@3QBW4ctrl_t@12@B
?InitControlBytesAfterSoo@HashSetResizeHelper@container_internal@absl@@AEAAXPEAW4ctrl_t@23@W4423@_K@Z
?TransferSlotAfterSoo@HashSetResizeHelper@container_internal@absl@@AEAAXAEAVCommonFields@23@_K@Z
?GrowSizeIntoSingleGroupTransferable@HashSetResizeHelper@container_internal@absl@@AEAAXAEAVCommonFields@23@_K@Z
?kSeed@MixingHashState@hash_internal@absl@@0QEBXEB
?Mix@MixingHashState@hash_internal@absl@@CA_K_K0@Z

msvcp140

?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock
_Mtx_unlock

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove
__RTDynamicCast
__std_exception_destroy
__std_exception_copy
__std_type_info_name
__std_terminate
__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler
_CxxThrowException
memset
memcpy

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_cexit
_initterm_e
_initterm
terminate
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_seh_filter_dll

kernel32

IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter

Exports

Exports

??0?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@IEAA@$$QEAV012@@Z
??0?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@IEAA@AEBV?$TetrahedralSolid@$02@2@@Z
??0?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@IEAA@XZ
??0?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@IEAA@$$QEAV012@@Z
??0?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@IEAA@AEBV?$TriangulatedSurface@$01@2@@Z
??0?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@IEAA@XZ
??0?$ElementSearchBuilder@V?$TetrahedralSolid@$02@geode@@@internal@geode@@QEAA@AEAV?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@12@@Z
??0?$ElementSearchBuilder@V?$TriangulatedSurface@$01@geode@@@internal@geode@@QEAA@AEAV?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@12@@Z
??0?$MacroInfo@$01@internal@geode@@IEAA@$$QEAV012@@Z
??0?$MacroInfo@$01@internal@geode@@IEAA@XZ
??0?$MacroInfo@$02@internal@geode@@IEAA@$$QEAV012@@Z
??0?$MacroInfo@$02@internal@geode@@IEAA@XZ
??0?$MacroInfoBuilder@$01@internal@geode@@IEAA@AEAV?$MacroInfo@$01@12@@Z
??0?$MacroInfoBuilder@$02@internal@geode@@IEAA@AEAV?$MacroInfo@$02@12@@Z
??0BackgroundCommonLibrary@geode@@QEAA@XZ
??1?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@QEAA@XZ
??1?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@QEAA@XZ
??1?$MacroInfo@$01@internal@geode@@QEAA@XZ
??1?$MacroInfo@$02@internal@geode@@QEAA@XZ
??1?$MacroInfoBuilder@$01@internal@geode@@QEAA@XZ
??1?$MacroInfoBuilder@$02@internal@geode@@QEAA@XZ
??1BackgroundCommonLibrary@geode@@UEAA@XZ
??4?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@IEAAAEAV012@$$QEAV012@@Z
??4?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@IEAAAEAV012@$$QEAV012@@Z
??_7BackgroundCommonLibrary@geode@@6B@
?add_component_edge_to_background_mesh_edge@?$MacroInfo@$01@internal@geode@@IEAAXAEBUuuid@3@II@Z
?add_component_edge_to_background_mesh_edge@?$MacroInfo@$01@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$01@internal@geode@@@3@@Z
?add_component_edge_to_background_mesh_edge@?$MacroInfo@$02@internal@geode@@IEAAXAEBUuuid@3@II@Z
?add_component_edge_to_background_mesh_edge@?$MacroInfo@$02@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$02@internal@geode@@@3@@Z
?add_component_edge_to_background_mesh_vertices@?$MacroInfo@$01@internal@geode@@IEAAXAEBUuuid@3@IV?$Span@$$CBI@absl@@@Z
?add_component_edge_to_background_mesh_vertices@?$MacroInfo@$01@internal@geode@@QEAAXAEBUuuid@3@IV?$Span@$$CBI@absl@@V?$PassKey@V?$MacroInfoBuilder@$01@internal@geode@@@3@@Z
?add_component_edge_to_background_mesh_vertices@?$MacroInfo@$02@internal@geode@@IEAAXAEBUuuid@3@IV?$Span@$$CBI@absl@@@Z
?add_component_edge_to_background_mesh_vertices@?$MacroInfo@$02@internal@geode@@QEAAXAEBUuuid@3@IV?$Span@$$CBI@absl@@V?$PassKey@V?$MacroInfoBuilder@$02@internal@geode@@@3@@Z
?add_component_vertex_to_background_mesh_vertex@?$MacroInfo@$01@internal@geode@@IEAAXAEBUuuid@3@II@Z
?add_component_vertex_to_background_mesh_vertex@?$MacroInfo@$01@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$01@internal@geode@@@3@@Z
?add_component_vertex_to_background_mesh_vertex@?$MacroInfo@$02@internal@geode@@IEAAXAEBUuuid@3@II@Z
?add_component_vertex_to_background_mesh_vertex@?$MacroInfo@$02@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$02@internal@geode@@@3@@Z
?add_macro_vertex_info@?$MacroInfoBuilder@$01@internal@geode@@QEAAXAEBUuuid@3@II@Z
?add_macro_vertex_info@?$MacroInfoBuilder@$02@internal@geode@@QEAAXAEBUuuid@3@II@Z
?clean_background_mesh_attributes@?$MacroInfo@$01@internal@geode@@KAXAEAVAttributeManager@3@0@Z
?clean_background_mesh_attributes@?$MacroInfo@$02@internal@geode@@KAXAEAVAttributeManager@3@0@Z
?component_edges@?$MacroInfo@$01@internal@geode@@QEBAAEBV?$vector@UMeshEdge@geode@@V?$allocator@UMeshEdge@geode@@@std@@@std@@I@Z
?component_edges@?$MacroInfo@$02@internal@geode@@QEBAAEBV?$vector@UMeshEdge@geode@@V?$allocator@UMeshEdge@geode@@@std@@@std@@I@Z
?component_vertices@?$MacroInfo@$01@internal@geode@@QEBAAEBV?$vector@UMeshVertex@geode@@V?$allocator@UMeshVertex@geode@@@std@@@std@@I@Z
?component_vertices@?$MacroInfo@$02@internal@geode@@QEBAAEBV?$vector@UMeshVertex@geode@@V?$allocator@UMeshVertex@geode@@@std@@@std@@I@Z
?do_initialize@BackgroundCommonLibrary@geode@@EEAAXXZ
?incident_component_edges@?$MacroInfo@$01@internal@geode@@QEBAAEBV?$vector@UMeshEdge@geode@@V?$allocator@UMeshEdge@geode@@@std@@@std@@I@Z
?incident_component_edges@?$MacroInfo@$02@internal@geode@@QEBAAEBV?$vector@UMeshEdge@geode@@V?$allocator@UMeshEdge@geode@@@std@@@std@@I@Z
?initial_border_element@?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@QEBAIXZ
?initial_border_element@?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@QEBAIXZ
?initial_containing_element@?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@QEBA?AV?$optional@I@std@@AEBV?$Point@$02@3@@Z
?initial_containing_element@?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@QEBA?AV?$optional@I@std@@AEBV?$Point@$01@3@@Z
?initialize@BackgroundCommonLibrary@geode@@SAXXZ
?initialize_macro_info_data_base@?$MacroInfo@$01@internal@geode@@IEAAXAEAVAttributeManager@3@0@Z
?initialize_macro_info_data_base@?$MacroInfo@$02@internal@geode@@IEAAXAEAVAttributeManager@3@0@Z
?is_macro_info_mandatory@?$MacroInfo@$01@internal@geode@@QEBA_NAEBUuuid@3@@Z
?is_macro_info_mandatory@?$MacroInfo@$02@internal@geode@@QEBA_NAEBUuuid@3@@Z
?is_vertex_part_of_component_vertices@?$MacroInfo@$01@internal@geode@@QEBA_NIAEBUuuid@3@@Z
?is_vertex_part_of_component_vertices@?$MacroInfo@$02@internal@geode@@QEBA_NIAEBUuuid@3@@Z
?reinitialize_elements_tree@?$ElementSearch@V?$TetrahedralSolid@$02@geode@@@internal@geode@@QEAAXAEBV?$TetrahedralSolid@$02@3@V?$PassKey@V?$ElementSearchBuilder@V?$TetrahedralSolid@$02@geode@@@internal@geode@@@3@@Z
?reinitialize_elements_tree@?$ElementSearch@V?$TriangulatedSurface@$01@geode@@@internal@geode@@QEAAXAEBV?$TriangulatedSurface@$01@3@V?$PassKey@V?$ElementSearchBuilder@V?$TriangulatedSurface@$01@geode@@@internal@geode@@@3@@Z
?reinitialize_elements_tree@?$ElementSearchBuilder@V?$TetrahedralSolid@$02@geode@@@internal@geode@@QEAAXAEBV?$TetrahedralSolid@$02@3@@Z
?reinitialize_elements_tree@?$ElementSearchBuilder@V?$TriangulatedSurface@$01@geode@@@internal@geode@@QEAAXAEBV?$TriangulatedSurface@$01@3@@Z
?remove_component_edge_from_background_mesh_edge@?$MacroInfo@$01@internal@geode@@IEAAXAEBUuuid@3@II@Z
?remove_component_edge_from_background_mesh_edge@?$MacroInfo@$01@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$01@internal@geode@@@3@@Z
?remove_component_edge_from_background_mesh_edge@?$MacroInfo@$02@internal@geode@@IEAAXAEBUuuid@3@II@Z
?remove_component_edge_from_background_mesh_edge@?$MacroInfo@$02@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$02@internal@geode@@@3@@Z
?remove_component_edge_from_background_mesh_vertex@?$MacroInfo@$01@internal@geode@@IEAAXAEBUuuid@3@II@Z
?remove_component_edge_from_background_mesh_vertex@?$MacroInfo@$01@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$01@internal@geode@@@3@@Z
?remove_component_edge_from_background_mesh_vertex@?$MacroInfo@$02@internal@geode@@IEAAXAEBUuuid@3@II@Z
?remove_component_edge_from_background_mesh_vertex@?$MacroInfo@$02@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$02@internal@geode@@@3@@Z
?remove_component_vertex_from_background_mesh_vertex@?$MacroInfo@$01@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$01@internal@geode@@@3@@Z
?remove_component_vertex_from_background_mesh_vertex@?$MacroInfo@$02@internal@geode@@QEAAXAEBUuuid@3@IIV?$PassKey@V?$MacroInfoBuilder@$02@internal@geode@@@3@@Z
?remove_macro_vertex_info@?$MacroInfoBuilder@$01@internal@geode@@QEAAXAEBUuuid@3@II@Z
?remove_macro_vertex_info@?$MacroInfoBuilder@$02@internal@geode@@QEAAXAEBUuuid@3@II@Z
?set_macro_info_mandatory@?$MacroInfo@$01@internal@geode@@QEAAXAEBUuuid@3@V?$PassKey@V?$MacroInfoBuilder@$01@internal@geode@@@3@@Z
?set_macro_info_mandatory@?$MacroInfo@$02@internal@geode@@QEAAXAEBUuuid@3@V?$PassKey@V?$MacroInfoBuilder@$02@internal@geode@@@3@@Z
?set_macro_info_mandatory@?$MacroInfoBuilder@$01@internal@geode@@QEAAXAEBUuuid@3@@Z
?set_macro_info_mandatory@?$MacroInfoBuilder@$02@internal@geode@@QEAAXAEBUuuid@3@@Z
?update_vertex@?$MacroInfoBuilder@$01@internal@geode@@QEAAXAEBU?$MultiMapping@I@3@@Z
?update_vertex@?$MacroInfoBuilder@$02@internal@geode@@QEAAXAEBU?$MultiMapping@I@3@@Z
?update_vertices@?$MacroInfoBuilder@$01@internal@geode@@QEAAXV?$Span@$$CBU?$MultiMapping@I@geode@@@absl@@@Z
?update_vertices@?$MacroInfoBuilder@$02@internal@geode@@QEAAXV?$Span@$$CBU?$MultiMapping@I@geode@@@absl@@@Z

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d09c139c2ec1884bbb07e6bb7b5f94e9

Headers

DLL Characteristics

File Characteristics

Imports

opengeode_mesh

opengeode_geometry

opengeode_basic

abseil_dll

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 232B

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 232B