V:\element\Installer\Release\ElementInstaller.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Element 3D v2.2 ByDarkDesigner/ElementInstaller_2.2Win.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Element 3D v2.2 ByDarkDesigner/ElementInstaller_2.2Win.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Element 3D v2.2 ByDarkDesigner/crack/Element.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Element 3D v2.2 ByDarkDesigner/crack/Element.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Element 3D v2.2 ByDarkDesigner/crack/ElementLicense.license
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
Element 3D v2.2 ByDarkDesigner/crack/ElementLicense.license
Resource
win10v2004-20240508-en
General
-
Target
Element 3D v2.2.2 ByDarkDesigner.zip
-
Size
289.4MB
-
MD5
290145302a28ba5dd01604b9033bd449
-
SHA1
4155fdd4e051005ea906d5000563b0f4ae80ac1f
-
SHA256
6dd09e1a8b4e189ca719415e4e9f4aab6f40bf8db872627b3f6396c9476233b3
-
SHA512
e855099dc2b719f7c86e336d75483f886f669f00206bad3eac6ed856b586834333537b36b11e4725cac7a2035917e0f5623c898b86ae729eccf355f58ad71c82
-
SSDEEP
6291456:xzLnsMcMIos3Wdcr9q7vyVlnNOb8kMxIDxYkWCugIpsKQ9pN7/yKfAb2:xzPcMtC9UytOb8kcCxYkWCIVi
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Element 3D v2.2 ByDarkDesigner/ElementInstaller_2.2Win.exe unpack001/Element 3D v2.2 ByDarkDesigner/crack/Element.aex
Files
-
Element 3D v2.2.2 ByDarkDesigner.zip.zip
-
Element 3D v2.2 ByDarkDesigner/ElementInstaller_2.2Win.exe.exe windows:6 windows x86 arch:x86
67b13ef93863531955ee6b8295794150
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
CreateMutexW
ReleaseMutex
GetSystemTimeAsFileTime
GetFileAttributesExW
Sleep
FlushFileBuffers
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
GetStdHandle
GetOEMCP
GetACP
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetProcAddress
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
HeapAlloc
RtlUnwind
RaiseException
GetCommandLineW
ResumeThread
ExitThread
CreateThread
IsProcessorFeaturePresent
IsDebuggerPresent
HeapFree
GetLastError
GetStringTypeW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetEnvironmentVariableW
WideCharToMultiByte
MultiByteToWideChar
DeleteFileW
LocalFree
MoveFileW
LockResource
CreateDirectoryW
SizeofResource
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
LoadResource
FindResourceW
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcess
IsWow64Process
GetModuleHandleW
IsValidCodePage
GetModuleFileNameW
DecodePointer
EncodePointer
user32
MessageBoxW
GetCapture
BeginPaint
GetClientRect
EndPaint
ReleaseDC
CreatePopupMenu
DestroyMenu
ClientToScreen
TrackPopupMenuEx
InsertMenuItemW
RedrawWindow
UpdateWindow
IsWindowVisible
ShowWindow
SetWindowLongW
DestroyWindow
EnableWindow
IsWindowEnabled
SetCapture
ReleaseCapture
GetCursorPos
ScreenToClient
SetFocus
GetFocus
SendMessageW
DefWindowProcW
LoadCursorW
RegisterClassExW
CreateWindowExW
MoveWindow
GetWindowRect
ScrollWindow
ValidateRect
CallWindowProcW
SetCursor
GetDC
SetTimer
KillTimer
GetUpdateRect
InvalidateRect
TrackMouseEvent
AdjustWindowRectEx
WaitMessage
PeekMessageW
IsDialogMessageW
LoadImageW
GetWindowLongW
TranslateMessage
DispatchMessageW
GetSystemMetrics
GetMonitorInfoW
MonitorFromWindow
gdi32
SetBkMode
SetTextColor
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
advapi32
RegCreateKeyExW
FreeSid
SetSecurityInfo
SetEntriesInAclW
AllocateAndInitializeSid
GetSecurityInfo
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegSetValueExW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW
DragFinish
SHGetFolderPathW
ShellExecuteExW
ole32
CreateStreamOnHGlobal
gdiplus
GdiplusStartup
GdipFree
GdipDeletePen
GdipDrawString
GdipDrawImageRectRectI
GdipDrawLineI
GdipDrawRectangleI
GdipSetClipRectI
GdipMeasureString
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipCreatePen1
GdipDeleteFont
GdiplusShutdown
GdipCreateFromHWND
GdipSetWorldTransform
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipDeleteGraphics
GdipFillRectangleI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCloneImage
GdipAlloc
GdipDisposeImage
dbghelp
MiniDumpWriteDump
shlwapi
SHRegGetValueW
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294.5MB - Virtual size: 294.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Element 3D v2.2 ByDarkDesigner/crack/Element.aex.dll windows:6 windows x64 arch:x64
85e3fbb1461fdeb407cfba8192cca940
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
V:\element\Win\x64\Release\Element.pdb
Imports
opengl32
glGetTexLevelParameteriv
glGetIntegerv
glTexSubImage2D
glGetError
glDrawArrays
glDrawElements
glPolygonOffset
glClearDepth
glPixelStorei
glClear
glClearColor
glReadBuffer
glViewport
glTexParameteri
glDepthMask
glPointSize
glPolygonMode
glTexParameterf
wglGetCurrentContext
wglCreateContext
wglGetProcAddress
wglDeleteContext
glGetString
glGetFloatv
glBlendFunc
glReadPixels
glFinish
glColorMask
glDisable
glFrontFace
glCullFace
wglGetCurrentDC
wglMakeCurrent
glGenTextures
glBindTexture
glTexImage2D
glDeleteTextures
glEnable
glu32
gluNewTess
gluTessCallback
gluDeleteTess
gluTessEndPolygon
gluTessEndContour
gluTessVertex
gluTessBeginContour
gluTessBeginPolygon
gluTessProperty
ws2_32
gethostname
ioctlsocket
sendto
recvfrom
select
getaddrinfo
WSASetLastError
ntohs
getsockopt
getsockname
getpeername
WSAGetLastError
__WSAFDIsSet
freeaddrinfo
closesocket
WSACleanup
WSAStartup
socket
htons
inet_addr
connect
bind
listen
setsockopt
send
recv
accept
dwrite
DWriteCreateFactory
d2d1
ord1
kernel32
GetStartupInfoW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
GetLocaleInfoW
IsValidLocale
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetWindowsDirectoryW
FreeLibrary
HeapAlloc
HeapFree
VirtualFree
GetProcessHeap
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
GetModuleHandleExW
GetModuleFileNameW
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetEnvironmentVariableW
QueryPerformanceFrequency
QueryPerformanceCounter
CreateFileW
GetFileSize
CreateFileMappingW
UnmapViewOfFile
GetSystemInfo
MapViewOfFile
CloseHandle
GetCurrentProcess
CreateDirectoryW
GetTempPathW
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetShortPathNameW
GetLongPathNameW
GlobalMemoryStatusEx
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
CreateMutexW
WaitForSingleObject
ReleaseMutex
CreateSemaphoreW
ReleaseSemaphore
GetSystemTimeAsFileTime
GetUserDefaultLCID
Sleep
FindFirstFileW
FindClose
FindNextFileW
GetLastError
lstrlenA
LocalFree
ExitProcess
GetThreadTimes
GetCurrentThread
SetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SleepEx
GetTickCount
FormatMessageA
WaitForMultipleObjects
GetFileType
GetStdHandle
ReadFile
PeekNamedPipe
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
IsDebuggerPresent
DebugBreak
SetEvent
SwitchToThread
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetConsoleScreenBufferSize
FreeConsole
SetConsoleTitleA
AllocConsole
WriteConsoleA
ResetEvent
CreateEventA
CreateThread
FindFirstFileA
FindNextFileA
GetModuleFileNameA
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
WaitForSingleObjectEx
CreateTimerQueue
GetModuleHandleA
FreeLibraryAndExitThread
OutputDebugStringW
AreFileApisANSI
GetTimeZoneInformation
GetFileInformationByHandle
SetFilePointerEx
LoadLibraryExW
RaiseException
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
GetCommandLineA
ResumeThread
ExitThread
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetFullPathNameW
IsProcessorFeaturePresent
HeapReAlloc
GetCPInfo
DecodePointer
EncodePointer
GetStringTypeW
GetExitCodeThread
DuplicateHandle
EnumSystemLocalesW
HeapSize
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
IsValidCodePage
CreateSemaphoreA
GetACP
GetOEMCP
InitializeSListHead
UnregisterWaitEx
GetVersionExW
ReadConsoleW
GetDriveTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
SetEndOfFile
GetFileAttributesExW
user32
ReleaseCapture
GetCursorPos
ScreenToClient
SetFocus
ScrollWindow
ValidateRect
CallWindowProcW
SetCursor
GetWindowTextLengthW
GetWindowTextW
GetWindowRect
KillTimer
GetKeyState
GetUpdateRect
InvalidateRect
TrackMouseEvent
AdjustWindowRectEx
WaitMessage
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
GetSystemMetrics
IsZoomed
GetForegroundWindow
SetLayeredWindowAttributes
GetWindowLongW
SetTimer
CreateWindowExW
GetDC
ReleaseDC
MessageBoxA
DestroyWindow
MessageBoxW
GetFocus
MonitorFromWindow
GetMonitorInfoW
PostMessageW
SendMessageW
SendNotifyMessageW
GetCapture
GetWindowLongPtrW
DefWindowProcW
LoadCursorW
SetWindowLongW
RegisterClassExW
SetWindowLongPtrW
GetClientRect
MoveWindow
BeginPaint
EndPaint
GetWindowDC
CreatePopupMenu
DestroyMenu
ClientToScreen
TrackPopupMenuEx
InsertMenuItemW
SetMenuItemInfoW
RedrawWindow
UpdateWindow
IsWindowVisible
ShowWindow
EnableWindow
IsWindowEnabled
SetCapture
gdi32
CreateFontIndirectW
SetBkMode
SetTextColor
DeleteDC
DeleteObject
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SwapBuffers
SetPixelFormat
ChoosePixelFormat
BitBlt
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
CryptAcquireContextA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
shell32
DragAcceptFiles
SHFileOperationW
SHGetFolderPathW
DragFinish
DragQueryFileW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ole32
CoCreateGuid
CreateStreamOnHGlobal
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoUninitialize
CoInitializeEx
oleaut32
SysFreeString
VariantClear
SysAllocStringByteLen
SysStringLen
SysAllocString
shlwapi
PathIsRelativeW
SHRegGetValueW
opencl
clCreateCommandQueue
clCreateContext
clGetDeviceIDs
clGetExtensionFunctionAddress
clGetPlatformIDs
clCreateKernel
clGetProgramBuildInfo
clBuildProgram
clCreateProgramWithSource
clReleaseProgram
clReleaseKernel
clEnqueueReadBuffer
clFlush
clEnqueueUnmapMemObject
clEnqueueMapBuffer
clReleaseContext
clReleaseCommandQueue
clReleaseMemObject
clGetDeviceInfo
clCreateBuffer
clSetKernelArg
clEnqueueWriteBuffer
clFinish
clCreateFromGLTexture2D
clCreateFromGLRenderbuffer
clEnqueueAcquireGLObjects
clEnqueueNDRangeKernel
clEnqueueReleaseGLObjects
gdiplus
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipCreatePen1
GdipDeleteFont
GdipDeletePen
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipMeasureString
GdipSetClipRectI
GdipDrawRectangleI
GdipSetLineWrapMode
GdipDrawLineI
GdipSetSmoothingMode
GdipDrawEllipseI
GdipDrawImageRectRectI
GdipDrawString
GdipCreateBitmapFromHBITMAP
GdipGetLogFontW
GdipSetStringFormatLineAlign
GdipSetTextRenderingHint
GdipCreateFromHWND
GdipSetWorldTransform
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageI
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipDeleteGraphics
GdipFillRectangleI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
GdipCreateLineBrushFromRectI
dbghelp
MiniDumpWriteDump
winmm
timeGetTime
wldap32
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord143
ord46
ord211
ord60
ord50
ord41
ord22
Exports
Exports
PluginMain
Sections
.text Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 326KB - Virtual size: 642KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Element 3D v2.2 ByDarkDesigner/crack/ElementLicense.license