com_procedural_cityengine_flexnet[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
com_procedural_cityengine_flexnet.dll
Size 5.6MB
Sample261011-phmb5shf64
SHA256 fd881c3e13cfd8a12c6e2a4e27bcd50987e2c24c4e33ca8fe5a99cbc7c6afdc7
MD5 8e34e3716f4f0bce9928cb2c428149e6
SHA1 d7b5a35c069d3e11aadd75b9c1e7d93af0e50fd2
SHA512 f908111430054efd37cda236a32494fea750e5c33f3255e69d76ef4e62cdd02de74d9464d1bf27a91e100597e58fe1cea790e5e018ea6c42083ebe15eb9f0f4e
SSDEEP 98304:X12Dek2VOj3l3Fr+6rtLZ7zydX9Rc+NoQpptkr:EgVOrlJ+wFKHRc+Nrvm
TLSH
T16A4633E7E0A11D07CABD47B772B792331BD277F1CD61BEAC601A6B9C4E0190AC3564A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
com_procedural_cityengine_flexnet.dll

File Explorer

com_procedural_cityengine_flexnet.dll

.dll 5.6MB

com_procedural_cityengine_flexnet.dll

SHA256 fd881c3e13cfd8a12c6e2a4e27bcd50987e2c24c4e33ca8fe5a99cbc7c6afdc7
MD5 8e34e3716f4f0bce9928cb2c428149e6
SHA1 d7b5a35c069d3e11aadd75b9c1e7d93af0e50fd2
SHA512 f908111430054efd37cda236a32494fea750e5c33f3255e69d76ef4e62cdd02de74d9464d1bf27a91e100597e58fe1cea790e5e018ea6c42083ebe15eb9f0f4e
SSDEEP 98304:X12Dek2VOj3l3Fr+6rtLZ7zydX9Rc+NoQpptkr:EgVOrlJ+wFKHRc+Nrvm
TLSH
T16A4633E7E0A11D07CABD47B772B792331BD277F1CD61BEAC601A6B9C4E0190AC3564A1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8413272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

Size

87KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

293KB

Virtual Size

738KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

49KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

6KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

16KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.edata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.winlice

Size

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

generic

count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=4, id=257, version=33030,

count=8, id=253, version=33030,

count=55, id=261, version=33030,

count=8, id=260, version=33030,

count=4, id=259, version=33030,

count=1, id=260, version=33138,

count=24, id=257, version=33138,

count=1, id=260, productName=VS2019 v16.10.4 build 30040, version=30040,

count=1, id=259, version=30141,

count=275, id=260, version=30141,

count=138, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=3, id=257, productName=VS2019 v16.7.1 build 29111, version=29111,

count=356, id=1, productName=Unmarked objects,

count=2, id=260, version=31105,

count=2, id=265, version=33143,

count=1, id=256, version=33143,

count=1, id=255, version=33143,

count=1, id=258, version=33143,