88ffaea9fa245ceeeac862ecadb1318244d28cfad1f3b54def8bbe04fcd2b342

Sharing

Copy URL

Twitter E-mail

General

Target

88ffaea9fa245ceeeac862ecadb1318244d28cfad1f3b54def8bbe04fcd2b342
Size

2.5MB
MD5

9582ea59d56122d0c27512d25928a4b5
SHA1

92c6165e41f5c202809a9f3cd649fa197247841c
SHA256

88ffaea9fa245ceeeac862ecadb1318244d28cfad1f3b54def8bbe04fcd2b342
SHA512

847a1f0db77621421911d07067b6ea0a9abd5fcd00434aff1e1e222a256c72cce5073572fea2b63f65c70c297b31adef49d0e8c76a97c29e6d296872beda45df
SSDEEP

49152:MWZ8Mpf2dYTFskFGJMdQqP+uoc+kmNH3juVmnKaZ9D+cWpcnYJ:qmfntDoj3jbnnD+cWp5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88ffaea9fa245ceeeac862ecadb1318244d28cfad1f3b54def8bbe04fcd2b342

Files

88ffaea9fa245ceeeac862ecadb1318244d28cfad1f3b54def8bbe04fcd2b342
.dll windows:6 windows x64 arch:x64

d7a071cf805faa52e2a383c66eea3ec9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

W:\Projects\CircuiteXpert\Projects\CSharp.DevEx.22.1.3_vs2019\x64\CISmateRelease\CirXpHub.pdb

Imports

tcl86

Tcl_GetStringResult
Tcl_NewIntObj
Tcl_SetObjResult
TclFreeObj
Tcl_EvalObjEx
Tcl_NewStringObj
Tcl_ListObjAppendElement
Tcl_NewObj
Tcl_GetObjResult
Tcl_NewListObj
Tcl_GetStringFromObj
Tcl_GetIntFromObj
Tcl_ListObjIndex
Tcl_ListObjLength
Tcl_CreateCommand
Tcl_GetString
Tcl_NewDoubleObj
Tcl_SetVar2Ex
Tcl_CreateNamespace
Tcl_FindNamespace
Tcl_PkgProvideEx
Tcl_Eval

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
lstrcpyW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LCMapStringW
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
VirtualProtect
FileTimeToSystemTime
GlobalGetAtomNameW
GetFileSizeEx
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
GetCommandLineA
GetCommandLineW
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
QueryPerformanceFrequency
SetStdHandle
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
ExitProcess
GetStdHandle
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetTempFileNameW
EnterCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GetProcAddress
GetModuleHandleW
GetSystemDirectoryW
EncodePointer
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalSize
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryW
LoadLibraryExW
GetModuleHandleExW
FreeLibrary
GetVersionExW
GetCurrentThread
SetLastError
OutputDebugStringA
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
WideCharToMultiByte
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetLastError
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
MultiByteToWideChar
Sleep
CreateProcessW
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW

user32

SetRect
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
BringWindowToTop
GetSystemMenu
DrawFrameControl
DrawEdge
SetParent
SetWindowRgn
SetClassLongPtrW
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetMenuDefaultItem
CreatePopupMenu
LoadImageW
TrackMouseEvent
IntersectRect
CharUpperW
DestroyIcon
MapDialogRect
GetAsyncKeyState
OffsetRect
SetRectEmpty
SendDlgItemMessageA
InflateRect
GetMenuItemInfoW
DestroyMenu
LoadCursorW
GetSysColorBrush
GetSystemMetrics
FillRect
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
LockWindowUpdate
DrawTextExW
DrawTextW
InvalidateRect
KillTimer
SetTimer
RealChildWindowFromPoint
ClientToScreen
DeleteMenu
SystemParametersInfoW
CopyImage
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SetCursor
ShowOwnedPopups
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GrayStringW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetFocus
GetDlgCtrlID
DrawMenuBar
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
IsWindow
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
PostQuitMessage
PostMessageW
EnableWindow
ShowWindow
IsZoomed
GetWindowThreadProcessId
IsWindowVisible
UnregisterClassW
GetParent
SetCursorPos
GetClientRect
keybd_event
SetFocus
SetPhysicalCursorPos
GetWindowRect
SetActiveWindow
SetForegroundWindow
SwitchToThisWindow
SendMessageW
MessageBoxW
EnumWindows
FindWindowW

gdi32

TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
MoveToEx
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetTextAlign
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetTextColor
GetObjectW
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
DeleteDC
CreateBitmap
SetTextColor
SetBkColor

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage
DragFinish
DragQueryFileW

shlwapi

PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
PathFindFileNameW

uxtheme

GetThemePartSize
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
OleDuplicateData
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
ReleaseStgMedium

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysFreeString
GetErrorInfo

gdiplus

GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDeleteGraphics
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateFromHDC
GdipDrawImageI
GdipGetImageGraphicsContext

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

AddExtBomProperties
Cirxphub_Init
CloseGlobalMappingFile
CopyInstancePackages
EvalTclCode
EvalTclCodeWithParam
FreeMemPtr
GetDataFromTcl
GetMemPtrFromTcl
GetMemPtrFromTclA
GetSpecPropMemPtrFromTcl
GetSymbolData
GetSymbolDataSF
MarkStuffSelectedMultiPackages
PlaceCXPart
ReplaceCXPart
ReplaceCXmodeParts
Toggle2ndSrcPropMultiPackages
UpdateAuditIdsInSamePagePropsMultiPackages
UpdateAuditIdsPropsMultiPackages
UpdateEffPropStringValue
UpdateIdsInSameSchPageSinglePropMultiPackages
UpdatePartProps
UpdatePartPropsDirectly

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 535KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7a071cf805faa52e2a383c66eea3ec9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

tcl86

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 535KB - Virtual size: 535KB

.data Size: 28KB - Virtual size: 57KB

.pdata Size: 83KB - Virtual size: 83KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 58KB - Virtual size: 58KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 535KB - Virtual size: 535KB

.data
Size: 28KB - Virtual size: 57KB

.pdata
Size: 83KB - Virtual size: 83KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 58KB - Virtual size: 58KB