9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79

Sharing

Copy URL Twitter E-mail

General

Target
9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79
Size 10.5MB
Sample260804-c41ens1akb
SHA256 9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79
MD5 36105b8102d71b05854f92485a6f20fc
SHA1 0db94aaaa0b8bb06c5d493f3bb17c62eb9153d57
SHA512 1f4e25bcff1ddf078e2f8521d03ca9b770604cf8970bd4f87d4afdc4a55d5c18251056d0fe6929599912ff1bff46c44877bed13f0889b2376ce1d3e8f00b0a80
SSDEEP 196608:YFR6VHMtUfIFBNEVH6RqIa+9TLmDBPdAy01UJQrTeksePTILhetOt:YFEVHMtNLNM6IIaWItx4UozjPcwt
TLSH
T1CFB623BEE154276CD01794384133AC48A1F1AA0E8BEB879DF2FEA9C07F47C915D49B46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79

File Explorer

9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79

.dll 10.5MB

9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79

IMPHASH 054f744eaf8c12146657f88e0b32d301
SHA256 9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79
MD5 36105b8102d71b05854f92485a6f20fc
SHA1 0db94aaaa0b8bb06c5d493f3bb17c62eb9153d57
SHA512 1f4e25bcff1ddf078e2f8521d03ca9b770604cf8970bd4f87d4afdc4a55d5c18251056d0fe6929599912ff1bff46c44877bed13f0889b2376ce1d3e8f00b0a80
SSDEEP 196608:YFR6VHMtUfIFBNEVH6RqIa+9TLmDBPdAy01UJQrTeksePTILhetOt:YFEVHMtNLNM6IIaWItx4UozjPcwt
TLSH
T1CFB623BEE154276CD01794384133AC48A1F1AA0E8BEB879DF2FEA9C07F47C915D49B46
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14401158

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

sdobjmodel

deserializeObject2

liberrorcomp

?P2A@SDMeasSoft@@YAHQEANVPoint3d@1@11AEAV21@@Z

uilibmvmgrv2

getModelViewMgr

libsdmdraw3dv2

getOccGeomProc

uilibsettingsv2

openSettingsWidget

libsdmcstbasev2

?bspline_disInOCC@SDMeasSoft@@YAHAEBV?$Array@UBCURVE@SDMeasSoft@@@1@AEAV?$Array@VPoint3d@SDMeasSoft@@@1@AEAV?$Array@N@1@AEANAEAV?$Array@VVector3d@SDMeasSoft@@@1@NHPEBVVariantMap@1@@Z

libsdmdraw2d

createDraw2D

uilibactionattr

?metaObject@LPERCompositePathWidget@@UEBAPEBUQMetaObject@@XZ

halconcpp

??0HImage@HalconCpp@@QEAA@XZ

uilibutilities

?metaObject@TemplImageWidget@@UEBAPEBUQMetaObject@@XZ

opencv_world3412

?deallocate@String@cv@@AEAAXXZ

qt5charts

?show@QAbstractSeries@QtCharts@@QEAAXXZ

qt5widgets

?qt_metacall@QSlider@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z

qt5gui

?staticMetaObject@QRegExpValidator@@2UQMetaObject@@B

qt5core

?className@QMetaObject@@QEBAPEBDXZ

kernel32

GetCurrentProcessId GetSystemTimeAsFileTime LocalAlloc GetModuleFileNameW LocalFree GetProcessAffinityMask SetProcessAffinityMask SetThreadAffinityMask Sleep ExitProcess FreeLibrary LoadLibraryA GetModuleHandleA GetProcAddress

user32

GetDC GetUserObjectInformationW GetProcessWindowStation GetUserObjectInformationW

gdi32

DeleteDC

msvcp140

?id@?$ctype@D@std@@2V0locale@2@A

vcruntime140

__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initterm

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers

api-ms-win-crt-filesystem-l1-1-0

_mkdir

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

pow

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-heap-l1-1-0

free

wtsapi32

WTSSendMessageW

Name

.text

Size

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

538KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fUP0

Size

Virtual Size

7.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.fUP1

Size

10.5MB

Virtual Size

10.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

469B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9be9b73d0bc0abf2c299bf6289eea5b1756ed941bd7b2e04ca5da2c45c5a1b79

sdobjmodel

liberrorcomp

uilibmvmgrv2

libsdmdraw3dv2

uilibsettingsv2

libsdmcstbasev2

libsdmdraw2d

uilibactionattr

halconcpp

uilibutilities

opencv_world3412

qt5charts

qt5widgets

qt5gui

qt5core

kernel32

user32

gdi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

wtsapi32

generic