e48596b35b730c5e3ceef2f9c02fc6995dc37973b6b510f6abe138b733244a82N

Sharing

Copy URL Twitter E-mail

General

Target

e48596b35b730c5e3ceef2f9c02fc6995dc37973b6b510f6abe138b733244a82N
Size

56KB
MD5

2abe53a05ffe7fe4f0e0c0d45ff8e8b0
SHA1

182da9e0f3abd90fee49a1dfdcc8ba47c946c227
SHA256

e48596b35b730c5e3ceef2f9c02fc6995dc37973b6b510f6abe138b733244a82
SHA512

a6df75b9422834def7c53a8cc142cf82daa2d0ca8986e9028ea0ef66e2135239267ba77b4654f69b43b77deecaa3c200da9ec48367ce576d14706253f26cc95e
SSDEEP

1536:Oye0kfhwoIdR69DpIFiG0zze54nMDlTYDG/UvdQi2JFI:Hehfhm69daiGCa48YD7Qi2JFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e48596b35b730c5e3ceef2f9c02fc6995dc37973b6b510f6abe138b733244a82N

Files

e48596b35b730c5e3ceef2f9c02fc6995dc37973b6b510f6abe138b733244a82N
.dll windows:6 windows x64 arch:x64

f91c85019a848213a3281836120ebe9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

geode-simplex_line_common

??$repair_lines@V?$RemeshingData@VSection@geode@@@geode@@@internal@geode@@YAXAEAV?$RemeshingData@VSection@geode@@@1@@Z
??$remesh_lines_impl@V?$RemeshingData@VSection@geode@@@geode@@@internal@geode@@YAXAEAV?$RemeshingData@VSection@geode@@@1@V?$Span@$$CBUuuid@geode@@@absl@@@Z
??$remesh_lines_impl@V?$RemeshingData@VSection@geode@@@geode@@@internal@geode@@YAXAEAV?$RemeshingData@VSection@geode@@@1@@Z

geode-simplex_core

?initialize@SimplexCoreLibrary@geode@@SAXXZ
?has_degenerated_elements@internal@geode@@YA_NAEBVSection@2@AEBUSectionElementsAfterCollapseEdge@2@@Z

geode-common_modifier_model

?elements_after_collapse_edge@geode@@YA?AUSectionElementsAfterCollapseEdge@1@AEBVSection@1@AEBV?$Line@$01@1@IAEBV?$Point@$01@1@@Z
?is_move_point_valid@geode@@YA_NAEBVSection@1@IAEBV?$Point@$01@1@@Z
?collapse_edge@SectionGeometricModifier@geode@@QEAA?AUSectionCollapsePolygonEdgeInfo@12@AEBV?$Line@$01@2@IAEBV?$Point@$01@2@@Z
?is_collapse_edge_valid@geode@@YA_NAEBVSection@1@AEBV?$Line@$01@1@IAEBV?$Point@$01@1@@Z
?move_point@SectionGeometricModifier@geode@@QEAAXIAEBV?$Point@$01@2@@Z

opengeode_model

?begin@LineRange@?$Lines@$01@geode@@QEBAAEBV123@XZ
??1LineRange@?$Lines@$01@geode@@QEAA@XZ
?is_closed@Section@geode@@QEBA_NAEBV?$Line@$01@2@@Z
?mesh@?$Line@$01@geode@@QEBAAEBV?$EdgedCurve@$01@2@XZ
?surface@?$Surfaces@$01@geode@@QEBAAEBV?$Surface@$01@2@AEBUuuid@2@@Z
?component_mesh_vertices@VertexIdentifier@geode@@QEBAAEBV?$vector@UComponentMeshVertex@geode@@V?$allocator@UComponentMeshVertex@geode@@@std@@@std@@I@Z
?unique_vertex@VertexIdentifier@geode@@QEBAIAEBUComponentMeshVertex@2@@Z
?has_component_mesh_vertices@VertexIdentifier@geode@@QEBA_NIAEBV?$NamedType@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UComponentTag@geode@@@2@@Z
??0ComponentMeshVertex@geode@@QEAA@VComponentID@1@I@Z
??1ComponentMeshVertex@geode@@QEAA@XZ
?line@?$Lines@$01@geode@@QEBAAEBV?$Line@$01@2@AEBUuuid@2@@Z
??DLineRange@?$Lines@$01@geode@@QEBAAEBV?$Line@$01@2@XZ
?end@LineRange@?$Lines@$01@geode@@QEBAAEBV123@XZ
??0LineRange@?$Lines@$01@geode@@QEAA@AEBV012@@Z
??ELineRangeBase@?$Lines@$01@geode@@QEAAXXZ
??9LineRangeBase@?$Lines@$01@geode@@QEBA_NAEBV012@@Z
?lines@?$Lines@$01@geode@@QEBA?AVLineRange@12@XZ
?nb_lines@?$Lines@$01@geode@@QEBAIXZ
?get_mesh@?$Surface@$01@geode@@AEBAAEBV?$SurfaceMesh@$01@2@XZ

opengeode_mesh

?is_vertex_isolated@Graph@geode@@QEBA_NI@Z
?nb_vertices@VertexSet@geode@@QEBAIXZ
?edges_around_vertex@Graph@geode@@QEBAAEBV?$InlinedVector@UEdgeVertex@geode@@$01V?$allocator@UEdgeVertex@geode@@@std@@@absl@@I@Z
?nb_edges@Graph@geode@@QEBAIXZ
?edge_vertex@Graph@geode@@QEBAIAEBUEdgeVertex@2@@Z
?point@?$CoordinateReferenceSystemManagers@$01@geode@@QEBAAEBV?$Point@$01@2@I@Z
?polygons_around_vertex@?$SurfaceMesh@$01@geode@@QEBAAEBV?$InlinedVector@UPolygonVertex@geode@@$09V?$allocator@UPolygonVertex@geode@@@std@@@absl@@I@Z
?edge_length@?$EdgedCurve@$01@geode@@QEBANI@Z
?vertex_attribute_manager@VertexSet@geode@@QEBAAEAVAttributeManager@2@XZ

opengeode_geometry

??$point_point_distance@$01@geode@@YANAEBV?$Point@$01@0@0@Z

opengeode_basic

?delete_attribute@AttributeManager@geode@@QEAAXV?$basic_string_view@DU?$char_traits@D@std@@@std@@@Z
?find_attribute_base@AttributeManager@geode@@AEBA?AV?$shared_ptr@VAttributeBase@geode@@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@4@@Z
?register_attribute@AttributeManager@geode@@AEAAXV?$shared_ptr@VAttributeBase@geode@@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@4@@Z
??0ProgressLogger@geode@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
??8uuid@geode@@QEBA_NAEBU01@@Z
?id@Identifier@geode@@QEBAAEBUuuid@2@XZ
?lock@Singleton@geode@@CAAEAVmutex@std@@XZ
?set_instance@Singleton@geode@@CAXAEBVtype_info@@PEAV12@@Z
?instance@Singleton@geode@@CAPEAV12@AEBVtype_info@@@Z
?call_initialize@Library@geode@@IEAAXPEBD@Z
??0Library@geode@@IEAA@XZ
??1Library@geode@@UEAA@XZ
?increment@ProgressLogger@geode@@QEAAIXZ
??1ProgressLogger@geode@@QEAA@XZ

abseil_dll

?Mix@MixingHashState@hash_internal@absl@@CA_K_K0@Z
?combine_contiguous@MixingHashState@hash_internal@absl@@SA?AV123@V123@PEBE_K@Z
?ThrowStdOutOfRange@base_internal@absl@@YAXPEBD@Z
?GetStackTrace@absl@@YAHPEAPEAXHH@Z
?kSeed@MixingHashState@hash_internal@absl@@0QEBXEB

msvcp140

?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler
_CxxThrowException
memset
memmove
__std_terminate
memcpy
memcmp
__RTDynamicCast
__std_type_info_name
__std_exception_copy
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm_e
_initterm
terminate
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_cexit

kernel32

InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
RtlCaptureContext

api-ms-win-crt-math-l1-1-0

sqrt

Exports

Exports

??0SimplexLine2dLibrary@geode@@QEAA@XZ
??1SimplexLine2dLibrary@geode@@UEAA@XZ
??_7SimplexLine2dLibrary@geode@@6B@
?do_initialize@SimplexLine2dLibrary@geode@@EEAAXXZ
?initialize@SimplexLine2dLibrary@geode@@SAXXZ
?relax_lines@geode@@YAXAEBVSection@1@AEAVSectionGeometricModifier@1@AEBV?$Metric@$01@1@@Z
?relax_lines@geode@@YAXAEBVSection@1@AEAVSectionGeometricModifier@1@AEBV?$Metric@$01@1@V?$Span@$$CBUuuid@geode@@@absl@@@Z
?remesh_lines@geode@@YAXAEAV?$RemeshingData@VSection@geode@@@1@@Z
?remesh_lines@geode@@YAXAEAV?$RemeshingData@VSection@geode@@@1@V?$Span@$$CBUuuid@geode@@@absl@@@Z
?repair_lines@geode@@YAXAEAV?$RemeshingData@VSection@geode@@@1@@Z

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f91c85019a848213a3281836120ebe9e

Headers

DLL Characteristics

File Characteristics

Imports

geode-simplex_line_common

geode-simplex_core

geode-common_modifier_model

opengeode_model

opengeode_mesh

opengeode_geometry

opengeode_basic

abseil_dll

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 224B

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 224B