CircuitMaker 2000 Pro SP1[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

CircuitMaker 2000 Pro SP1.7z
Size

17.2MB
MD5

5a39e90f29e7ecb9419898ac71c77bfb
SHA1

b8bf9e893e656a7b10786f2d19050dc3b8a8b047
SHA256

d548691e165f94663bd8373a2f9d62af644c054071045e23b0191f1d53bfe410
SHA512

8c3e5efce873c6435b67274a50765c465487c4f41cb4a2bcd56a3e2a70326a3b3ebe917ad2aeb7bd323a63a3e5f1558298afe294a8074d9349096f24fb690f9d
SSDEEP

393216:BaANsp3XPHjOxrNszzkxa8d7++Da9YsDx3dcKhJF2lKe8PIi2K+:YVneOYC9YsDxXJKOPIi2p

Score

5^/10

pdf

Malware Config

Signatures

Malformed data in PDF
A PDF can contain malformed data to evade detection
pdf

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CircuitMaker 2000 Pro SP1/Files/SETUP/Setup.exe
unpack001/CircuitMaker 2000 Pro SP1/Files/SETUPCM2000.EXE

Files

CircuitMaker 2000 Pro SP1.7z
.7z
CircuitMaker 2000 Pro SP1/CircuitMaker 2000 Pro SP1.txt
CircuitMaker 2000 Pro SP1/Files/AUTORUN.INF
CircuitMaker 2000 Pro SP1/Files/CIRCUITMAKER 2000 USER MANUAL.pdf
.pdf
CircuitMaker 2000 Pro SP1/Files/README.TXT
CircuitMaker 2000 Pro SP1/Files/SCHEMATIC AND SIMULATION LIBRARIES.PDF
.pdf
CircuitMaker 2000 Pro SP1/Files/SETUP/Setup.exe
.exe windows:4 windows x86 arch:x86

610cc130aaaa220345df89231335738d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerInstallFileA

kernel32

GetModuleHandleA
GetStartupInfoA
ExitProcess
AddAtomA
lstrcpyA
GetCommandLineA
OpenEventA
FindResourceA
FindResourceExA
SetErrorMode
LocalFree
SetEvent
LoadResource
CreateFileA
LockResource
RemoveDirectoryA
GetTempPathA
WaitForSingleObject
GetShortPathNameA
CreateDirectoryA
lstrcpynA
lstrcatA
GetLastError
GetFileAttributesA
SetFileAttributesA
GlobalLock
GlobalAlloc
GetAtomNameA
DeleteFileA
GetPrivateProfileStringA
GetUserDefaultLangID
GlobalUnlock
GlobalFree
GetModuleFileNameA
RtlUnwind
Sleep
CloseHandle
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileIntA
GetTempFileNameA
FormatMessageA
CreateProcessA
CopyFileA

user32

EndPaint
BeginPaint
CreateDialogParamA
MessageBoxA
EndDialog
GetDlgItem
SendMessageA
GetWindowLongA
LoadImageA
DestroyWindow
CreateDialogIndirectParamA
SetDlgItemTextA
GetDesktopWindow
GetClientRect
MoveWindow
CharNextA
CharUpperA
ReleaseDC
SetWindowLongA
GetDC
DialogBoxIndirectParamA
wsprintfA
CharLowerA
GetWindowRect

gdi32

BitBlt
UnrealizeObject
DeleteDC
GetObjectA
GetDeviceCaps
CreateHalftonePalette
CreatePalette
GetSystemPaletteEntries
CreateCompatibleDC
SelectPalette
GetDIBColorTable
RealizePalette
SelectObject

advapi32

RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoFreeAllLibraries
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayGetElement
SysStringLen
SafeArrayGetLBound
SafeArrayGetUBound

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CircuitMaker 2000 Pro SP1/Files/SETUP/Setup.ini
CircuitMaker 2000 Pro SP1/Files/SETUP/data1.cab
CircuitMaker 2000 Pro SP1/Files/SETUP/data1.hdr
CircuitMaker 2000 Pro SP1/Files/SETUP/data2.cab
CircuitMaker 2000 Pro SP1/Files/SETUP/ikernel.ex_
CircuitMaker 2000 Pro SP1/Files/SETUP/layout.bin
CircuitMaker 2000 Pro SP1/Files/SETUP/setup.inx
CircuitMaker 2000 Pro SP1/Files/SETUPCM2000.EXE
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CircuitMaker 2000 Pro SP1/Files/TRAXMAKER LIBRARIES.PDF
.pdf
CircuitMaker 2000 Pro SP1/Files/TRAXMAKER USER MANUAL.PDF
.pdf
CircuitMaker 2000 Pro SP1/winworldpc.com.txt

Sharing

General

Malware Config

Signatures

Files

610cc130aaaa220345df89231335738d

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 12KB - Virtual size: 11KB

Headers

File Characteristics

Sections

CODE Size: 279KB - Virtual size: 278KB

DATA Size: 3KB - Virtual size: 3KB

BSS Size: - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 7KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 19KB - Virtual size: 19KB

.rsrc Size: 547KB - Virtual size: 547KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 12KB - Virtual size: 11KB

CODE
Size: 279KB - Virtual size: 278KB

DATA
Size: 3KB - Virtual size: 3KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 547KB - Virtual size: 547KB