tix84[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tix84.dll
Size

362KB
MD5

c78b88cbe746a85575b4a40119e38db8
SHA1

47c7ded913ba0cd12cbf9fe40bd0a55c91fd55b4
SHA256

d41c638ec51487341b9be21f4d9372424c073106f226330e90c05536de416dbe
SHA512

62a88bb03921ab055ba823ef6b8a6ce5b3a046fdbc81044d878e0560e065a5a4250951655d8ed06765ced96ab9a636c0bfe00f4ae93c9c9f29fc21d82b6926b2
SSDEEP

6144:WhRzYDLnyguqoLxtXEsofbHJWaDPgoPETPpnEgFQFF1170FpEVKIg8g:WHzzqoL33ofbc4PgoPETPWgFQFF30Fpb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tix84.dll

Files

tix84.dll
.dll windows:6 windows x64 arch:x64

46c2fa5b9b78ae40e100caabb968f1c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

ReleaseDC
DrawFocusRect
GetDesktopWindow
GetWindowDC

gdi32

SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
CreatePen
DeleteObject
LineTo
DeleteDC
SetROP2
MoveToEx

vcruntime140

memset
strstr
strrchr
__std_type_info_destroy_list
__C_specific_handler

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
fread
__stdio_common_vsprintf
fopen
ftell
fseek
fclose

api-ms-win-crt-string-l1-1-0

strncpy
_stricmp
isspace
strncmp

api-ms-win-crt-convert-l1-1-0

strtol
strtod

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
exit
_initterm
_initterm_e
_seh_filter_dll

kernel32

RtlVirtualUnwind
RtlLookupFunctionEntry
UnhandledExceptionFilter
RtlCaptureContext
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Exports

Exports

TixComputeTextGeometry
TixDItemGetAnchor
TixDItemStyleChanged
TixDItemStyleConfigureGCs
TixDItemStyleFree
TixDisplayText
TixFm_AddToMaster
TixFm_Configure
TixFm_DeleteMaster
TixFm_FindClientPtrByName
TixFm_ForgetOneClient
TixFm_FreeMasterInfo
TixFm_GetFormInfo
TixFm_StructureProc
TixFm_Unlink
TixFm_UnlinkFromMaster
TixGetColorDItemGC
TixGetDefaultDItemStyle
TixGetHashTable
TixGrDataFirstCell
TixGrDataFirstRow
TixGrDataNextCell
TixGrDataNextRow
TixGridDataConfigRowColSize
TixGridDataCreateEntry
TixGridDataDeleteEntry
TixGridDataDeleteRange
TixGridDataDeleteSearchedEntry
TixGridDataFindEntry
TixGridDataGetGridSize
TixGridDataGetIndex
TixGridDataGetRowColSize
TixGridDataMoveRange
TixGridDataSetFree
TixGridDataSetInit
TixGridDataUpdateSort
Tix_AddDItemType
Tix_ArgcError
Tix_CallConfigMethod
Tix_CallMethod
Tix_ChangeOneOption
Tix_ChangeOptions
Tix_ConfigureInfo2
Tix_ConfigureValue2
Tix_CreateCommands
Tix_CreateSubWindow
Tix_DItemCalculateSize
Tix_DItemComponent
Tix_DItemConfigure
Tix_DItemCreate
Tix_DItemDisplay
Tix_DItemDrawBackground
Tix_DItemFillNormalBG
Tix_DItemFree
Tix_DefinePixmap
Tix_DrawAnchorLines
Tix_EvalArgv
Tix_ExistMethod
Tix_Exit
Tix_FindConfigSpecByName
Tix_FindMethod
Tix_FindPublicMethod
Tix_FreeArgumentList
Tix_GetAnchorGC
Tix_GetChars
Tix_GetConfigSpecFullName
Tix_GetContext
Tix_GetDItemType
Tix_GetMethodFullName
Tix_GetRenderBuffer
Tix_GetScrollFractions
Tix_GetVar
Tix_GlobalVarEval
Tix_GrAddChangedRect
Tix_GrCancelDoWhenIdle
Tix_GrConfigSize
Tix_GrDoWhenIdle
Tix_GrFormat
Tix_GrFreeElem
Tix_GrFreeUnusedColors
Tix_GrScrollPage
Tix_GrSelection
Tix_GrSetSize
Tix_HLAllocColumn
Tix_HLCancelResizeWhenIdle
Tix_HLColumn
Tix_HLComputeGeometry
Tix_HLComputeHeaderGeometry
Tix_HLCreateHeaders
Tix_HLDrawHeader
Tix_HLElementLeftOffset
Tix_HLElementTopOffset
Tix_HLFindElement
Tix_HLFreeHeaders
Tix_HLHeader
Tix_HLIndicator
Tix_HLItem
Tix_HLItemInfo
Tix_HLMarkElementDirty
Tix_HLResizeNow
Tix_HLResizeWhenIdle
Tix_HandleSubCmds
Tix_Init
Tix_InitScrollInfo
Tix_LinkListAppend
Tix_LinkListDelete
Tix_LinkListDeleteRange
Tix_LinkListFind
Tix_LinkListFindAndDelete
Tix_LinkListInit
Tix_LinkListInsert
Tix_LinkListIteratorInit
Tix_LinkListNext
Tix_LinkListStart
Tix_MultiConfigureInfo
Tix_QueryAllOptions
Tix_QueryOneOption
Tix_SetDefaultStyleTemplate
Tix_SetRcFileName
Tix_SetScrollBarView
Tix_SetWindowItemSerial
Tix_SimpleListAppend
Tix_SimpleListDelete
Tix_SimpleListDeleteRange
Tix_SimpleListFind
Tix_SimpleListFindAndDelete
Tix_SimpleListInit
Tix_SimpleListInsert
Tix_SimpleListIteratorInit
Tix_SimpleListNext
Tix_SimpleListStart
Tix_SplitConfig
Tix_SuperClass
Tix_UnknownPublicMethodError
Tix_UnmapInvisibleWindowItems
Tix_UpdateScrollBar
Tix_ValueMissingError
Tix_WidgetConfigure2
Tix_WindowItemListRemove
Tix_ZAlloc
TixpInitPixmapInstance
TixpXpmAllocTmpBuffer
TixpXpmDisplay
TixpXpmFreeInstanceData
TixpXpmFreeTmpBuffer
TixpXpmRealizePixmap
TixpXpmSetPixel
tixCellUid
tixColumnUid
tixDisabledUid
tixNormalUid
tixRowUid

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46c2fa5b9b78ae40e100caabb968f1c9

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 274KB - Virtual size: 274KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 60KB - Virtual size: 62KB

.pdata Size: 7KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 274KB - Virtual size: 274KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 60KB - Virtual size: 62KB

.pdata
Size: 7KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB