gross.zip
- SHA256 a8982034b8745ca1dc3b8816b16961bf4e996c911c6411bca8530d8aea7e0610
Password
ItsHarry88!
Overview
overview
10Static
static
10Gross Beat...up.exe
windows7-x64
10Gross Beat...up.exe
windows10-2004-x64
10$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDIR/Bass.dll
windows7-x64
3$PLUGINSDIR/Bass.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows7-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/bass.dll
windows7-x64
3$PLUGINSDIR/bass.dll
windows10-2004-x64
3$PLUGINSDI...ll.exe
windows7-x64
7$PLUGINSDI...ll.exe
windows10-2004-x64
7Gross Beat.chm
windows7-x64
1Gross Beat.chm
windows10-2004-x64
1IL Gross Beat.dll
windows7-x64
3IL Gross Beat.dll
windows10-2004-x64
3uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
Gross Beat 1.0.7/setup.exe
Resource
win7-20240704-en
windows7-x64
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gross Beat 1.0.7/setup.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Bass.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Bass.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
$PLUGINSDIR/bass.dll
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
$PLUGINSDIR/bass.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
$PLUGINSDIR/shareddlls_install.exe
Resource
win7-20240708-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral18
Sample
$PLUGINSDIR/shareddlls_install.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
Gross Beat.chm
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
Gross Beat.chm
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
IL Gross Beat.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
IL Gross Beat.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
uninstall.exe
Resource
win7-20240704-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral24
Sample
uninstall.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target gross.zip
- Size 11.7MB
- Sample240902-y6djkswekr
- SHA256 a8982034b8745ca1dc3b8816b16961bf4e996c911c6411bca8530d8aea7e0610
- MD5 fcee864d82b56b74b5451326ac494218
- SHA1 109ea32c26c4bbc372bbd021995639b7a402b452
- SHA512 af42fda10217aa3e2db8fe824349af505b8e0421c187e34b2fb6c339cea7d09327f27f02af542eeb6e0040d90c406a5ad478f822ac72268930931f3f29720e8e
- SSDEEP 196608:6nF4jQEyooz249TLfYPLI+QteHD7D3yaRHbAFdWpP9aU1YAPpJ6:6SJ5V4FYPEeHjjHbAFQpnC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Detects Strela Stealer payload 1 IoCs
resource yara_rule static1/unpack002/$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll family_strela - Strela family
- Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack001/Gross Beat 1.0.7/setup.exe unpack002/$PLUGINSDIR/AdvSplash.dll unpack002/$PLUGINSDIR/Bass.dll unpack002/$PLUGINSDIR/GetVersion.dll unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/bass.dll unpack002/$PLUGINSDIR/shareddlls_install.exe unpack002/IL Gross Beat.dll unpack002/uninstall.exe - NSIS installer 6 IoCs
resource yara_rule static1/unpack001/Gross Beat 1.0.7/setup.exe nsis_installer_1 static1/unpack001/Gross Beat 1.0.7/setup.exe nsis_installer_2 static1/unpack002/$PLUGINSDIR/shareddlls_install.exe nsis_installer_1 static1/unpack002/$PLUGINSDIR/shareddlls_install.exe nsis_installer_2 static1/unpack002/uninstall.exe nsis_installer_1 static1/unpack002/uninstall.exe nsis_installer_2
File Explorer
-
gross.zip.zip 11.7MB
-
Gross Beat 1.0.7/setup.exe.exe 11.7MB
-
$PLUGINSDIR/AdvSplash.dll.dll 6KB
-
$PLUGINSDIR/Bass.dll.dll 101KB
-
$PLUGINSDIR/GetVersion.dll.dll 8KB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll.dll 5.8MB
-
$PLUGINSDIR/System.dll.dll 11KB
-
$PLUGINSDIR/bass.dll.dll 101KB
-
$PLUGINSDIR/dat_bgm.ogg4.0MB
-
$PLUGINSDIR/dat_skin.skf264KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp281KB
-
$PLUGINSDIR/shareddlls_install.exe.exe 2.8MB
-
$PLUGINSDIR/splash.bmp462KB
-
Artwork/About.png.png 136KB
-
Artwork/Back.bmp1.3MB
-
Artwork/Demo.bmp87KB
-
Artwork/TB Btn.bmp1KB
-
Artwork/TB PrevNextBtn.bmp1KB
-
Artwork/TB Small.bmp8KB
-
Artwork/TB WP.bmp12KB
-
Artwork/skin.ini896B
-
Data/Maps/Default.fnv80B
-
Data/Maps/Env filter - asymmetry.fnv104B
-
Data/Maps/Env filter - default.fnv104B
-
Data/Maps/Env filter - flat.fnv80B
-
Data/Maps/Env filter - small knee.fnv128B
-
Gross Beat.chm.chm 1.3MB
-
Gross Beat.chw10KB
-
IL Gross Beat.dll.dll 2.1MB
-
Presets/Default.fst6KB
-
Presets/Flanging.fst7KB
-
Presets/Momentary.fst34KB
-
Presets/Patterns.fst36KB
-
Presets/Pitch shifter.fst33KB
-
Presets/Stutter.fst11KB
-
Presets/Turntablist.fst28KB
-
uninstall.exe.exe 59KB
Gross Beat 1.0.7/setup.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 b13ade9fa58f96d8f03e4e241455c1af226d6b654e2ad48a8ae7d3a61f7ad64d
- MD5 1287223e90507c1ac0bc0b60f1b039e9
- SHA1 7853f575349907eabb0dcd190fe746eb1c1c8d01
- SHA512 b90117cee136da27aefe612c73284a9977fe836ac364afc68d7bb78ca6828efd21b60b2c9ba866a6bcf0479db1c64eef6fe06b4ca0ccb0f2d8a3e3b333361d2e
- SSDEEP 196608:uRRS34smUEH4IXhxpMzHQCMFGfDQ5jSajl3clBg3j/cWnoCfrR1:uq/fRI9MzaGf0nl3cli3J/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Password
ItsHarry88!
Minor OS version
0
Major OS version
4
Entry point
12491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/AdvSplash.dll
- IMPHASH 741b6bafe355b63a372d737b30543a95
- SHA256 eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb
- MD5 13cc92f90a299f5b2b2f795d0d2e47dc
- SHA1 aa69ead8520876d232c6ed96021a4825e79f542f
- SHA512 ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3
- SSDEEP 96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ItsHarry88!
Minor OS version
0
Major OS version
4
Entry point
4448
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpynA
GetVersion
lstrcpyA
lstrcatA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
user32
LoadCursorA
RegisterClassA
SetWindowPos
SetWindowLongA
SystemParametersInfoA
EndPaint
GetClientRect
BeginPaint
DefWindowProcA
DestroyWindow
LoadImageA
CreateWindowExA
IsWindow
GetMessageA
DispatchMessageA
UnregisterClassA
wsprintfA
PostMessageA
SetWindowRgn
EnumDisplaySettingsA
gdi32
CombineRgn
CreateRectRgn
GetDIBits
SelectObject
CreateCompatibleDC
GetObjectA
DeleteDC
BitBlt
DeleteObject
winmm
timeSetEvent
PlaySoundA
timeKillEvent
show
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
188B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=40, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/Bass.dll
- SHA256 14a38f56be50a3829eb1eda2a908da2de5913f81d5cb01d8b668593d0fc36594
- MD5 a8af308ff01b4477657955fbf0cc8408
- SHA1 0794c059f0326e4a71be8a3ee4ac17a657d90d88
- SHA512 9e221967db95d4b86bf311891193dfd1515806aa0d43198d3bc26a17d77f06f212ab9dba1ca8575f50d224380e8b109529faccf2f56daac834da83a83677a0fd
- SSDEEP 3072:kR+vccy3LIweO1vFCLPkG9dfSD0BXZXmpw69Qe:S+vccy3hF1vFCT99dTBX5mupe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ItsHarry88!
Minor OS version
0
Major OS version
4
Entry point
311363
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASS_Apply3D
BASS_CDDoor
BASS_CDFree
BASS_CDGetID
BASS_CDGetTrackLength
BASS_CDGetTracks
BASS_CDInDrive
BASS_CDInit
BASS_CDPlay
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetEAXMix
BASS_ChannelGetFlags
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelResume
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetDSoundObject
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetGlobalVolumes
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetChannelVol
BASS_MusicGetLength
BASS_MusicGetName
BASS_MusicLoad
BASS_MusicPlay
BASS_MusicPlayEx
BASS_MusicPreBuf
BASS_MusicSetAmplify
BASS_MusicSetChannelVol
BASS_MusicSetPanSep
BASS_MusicSetPositionScaler
BASS_Pause
BASS_RecordFree
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SamplePlay
BASS_SamplePlay3D
BASS_SamplePlay3DEx
BASS_SamplePlayEx
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DAlgorithm
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetBufferLength
BASS_SetCLSID
BASS_SetEAXParameters
BASS_SetGlobalVolumes
BASS_SetLogCurves
BASS_SetNetConfig
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetLength
BASS_StreamGetTags
BASS_StreamPlay
BASS_StreamPreBuf
BASS_Update
_
Name
Size
96KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
$PLUGINSDIR/GetVersion.dll
- IMPHASH fb1aa2bbc159c94cb45792330366bd5f
- SHA256 16dd6da98b7e53d374830cd4c644c01b112955f8487a285f34dc0353e9cfac15
- MD5 e013b625f5ae1e2f0b442cf39c0069df
- SHA1 9ec785b63279144c091366badda65278c4cdee20
- SHA512 306f7e674d119d129db48012c43f825bffabd078fac8518aea9d514b0787752a2e876bda2ad15df7332bfc8cfba38a0d1be17ee7c58a27e09678fce9aec58418
- SSDEEP 192:9r/9XGqK7s/AlHdJZBi46AQ5VuNxHA8/1:HXGqM93Bi46AQ5Vujg8/1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ItsHarry88!
Minor OS version
1
Major OS version
5
Entry point
7247
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcmpiA
GetModuleHandleA
lstrcpynA
GlobalAlloc
GetProcAddress
GetSystemInfo
GetVersionExA
user32
GetSystemMetrics
wsprintfA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
WindowsName
WindowsPlatformArchitecture
WindowsPlatformId
WindowsServerName
WindowsServicePack
WindowsServicePackBuild
WindowsServicePackMajor
WindowsServicePackMinor
WindowsType
WindowsVersion
Name
.text
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
470B
Virtual Size
558B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/InstallOptions.dll
- IMPHASH b1cd0d78f652ce5fc63f0879371af012
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ItsHarry88!
Minor OS version
0
Major OS version
4
Entry point
10696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
- IMPHASH 8a595235c826f2ae0f0362f688723bd0
- SHA256 8b25cf3f7aa82fadccb2ce615ce0e40c5a8a3ea7bc51180a92173ee113a0ccfe
- MD5 028251654a4d65509aa8ccb5f2ee284a
- SHA1 4a4ad468a86df6b903002be4f8919017fea0c152
- SHA512 f252670bca0da9e8e2c519a6ef4ad6dd0c4e548aeb7566693a7d203e73e63345fc58683072020ef771d836429bed1d7b4fdf105aa3e62a969e9c8d39556e1d2d
- SSDEEP 98304:kj0Kg9frmFcqlMZ4vpHfOVlQnzW4Aogn/oXFdAaTZ8GcB7d0s:kjFA7t2RHfYlQZJgTamGcBis
- MD5 SHA1 SHA512 SSDEEP
-
Detects Strela Stealer payload
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ItsHarry88!
Minor OS version
0
Major OS version
4
Entry point
25310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalFree
lstrcpyA
MultiByteToWideChar
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
RtlUnwind
RaiseException
ExitProcess
GetFileAttributesA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
SetUnhandledExceptionFilter
WriteFile
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
CloseHandle
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
SetStdHandle
ReadFile
GetLocaleInfoW
CreateFileA
SetEndOfFile
user32
MessageBoxA
destroy
skin
Name
.text
Size
60KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
14KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5.7MB
Virtual Size
5.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/System.dll
- IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ItsHarry88!
Minor OS version
0
Major OS version
4
Entry point
10544
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
520B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=42, version=8803,
count=4, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/bass.dll
- SHA256 14a38f56be50a3829eb1eda2a908da2de5913f81d5cb01d8b668593d0fc36594
- MD5 a8af308ff01b4477657955fbf0cc8408
- SHA1 0794c059f0326e4a71be8a3ee4ac17a657d90d88
- SHA512 9e221967db95d4b86bf311891193dfd1515806aa0d43198d3bc26a17d77f06f212ab9dba1ca8575f50d224380e8b109529faccf2f56daac834da83a83677a0fd
- SSDEEP 3072:kR+vccy3LIweO1vFCLPkG9dfSD0BXZXmpw69Qe:S+vccy3hF1vFCT99dTBX5mupe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ItsHarry88!
Minor OS version
0
Major OS version
4
Entry point
311363
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASS_Apply3D
BASS_CDDoor
BASS_CDFree
BASS_CDGetID
BASS_CDGetTrackLength
BASS_CDGetTracks
BASS_CDInDrive
BASS_CDInit
BASS_CDPlay
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetEAXMix
BASS_ChannelGetFlags
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelResume
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetDSoundObject
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetGlobalVolumes
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetChannelVol
BASS_MusicGetLength
BASS_MusicGetName
BASS_MusicLoad
BASS_MusicPlay
BASS_MusicPlayEx
BASS_MusicPreBuf
BASS_MusicSetAmplify
BASS_MusicSetChannelVol
BASS_MusicSetPanSep
BASS_MusicSetPositionScaler
BASS_Pause
BASS_RecordFree
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SamplePlay
BASS_SamplePlay3D
BASS_SamplePlay3DEx
BASS_SamplePlayEx
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DAlgorithm
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetBufferLength
BASS_SetCLSID
BASS_SetEAXParameters
BASS_SetGlobalVolumes
BASS_SetLogCurves
BASS_SetNetConfig
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetLength
BASS_StreamGetTags
BASS_StreamPlay
BASS_StreamPreBuf
BASS_Update
_
Name
Size
96KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
$PLUGINSDIR/dat_bgm.ogg
- SHA256 48f89748bc79f62b81b32e0d2be29f25220d1767a8e50f5eeb8e4395e80528eb
- MD5 2dddd5b3f5e69f9880be5c5043a001ee
- SHA1 5d0b6beb61ff9a8d4ecf49274559cca1c6c6c496
- SHA512 baa2d14208a6b627590c36457e5acec513803a4cb6029adee0fd396bf7cfcf3aa625a7afaa4cfe488436ead265172c434287a2f3e6075d06af41e4c282b1f3a0
- SSDEEP 98304:b6t8wSsgmUOhc/j6odYBz9qjkWgv5yBYwjZ:b6Rgmjc/jhdY1cjMxyPZ
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/dat_skin.skf
- SHA256 bb1a83926f45a927237c8225aba4099c4219b06cbfd274f043330764a5c94887
- MD5 350143806cc10021082012a519506fc7
- SHA1 447d7c55ca0369143ccbe5b425e397e0f4564642
- SHA512 e1875ce34b120e4f0c36283d87c8d8678c1a2beef9fff5dfe2d79d447786098c623508003b4553e87fe5d178562e6beff71737fa426b28a1b66c07dd4635debe
- SSDEEP 6144:bvR4v5gGQh/ccccccccccccccccccccccEcccccccccccccccccccccc7:HW
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- MD5 SHA1 SHA512
$PLUGINSDIR/modern-wizard.bmp
- SHA256 e6e229b300156b9e13ec858cb1e48a4180ed6441a254eba3a38cd4c3a805ce46
- MD5 f67262e04565c8667f70fa008b228e61
- SHA1 c3c4eabb4dfe629002ce6f82ae502262cd248b36
- SHA512 58026870a32e32d77966910dde8cba7a02909fea28432d8eab5ce1731d88399685388d69815bbb1c850df1f3877612acb384e18c6ecb2d915e9fe7fe3f39f2cb
- SSDEEP 6144:WXvnpXriCSJhMvfPtYfQf0cOkM34LrJ3i38v:W/4j6tN9OkMo3isv
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/shareddlls_install.exe
- IMPHASH 099c0646ea7282d232219f8807883be0
- SHA256 599c63aa0d0496363c7c99217e6c3d941125907cc4ea4c7d5d73c9b54e3deaee
- MD5 4fe8ff7f02020ea655944db5541722f3
- SHA1 b5ff619c215529a4531337eef36167051cded658
- SHA512 f4802d00d46c59882a1e1d3b8c0a43fd2ba4b22819d5417ad81cf4522e796176a920f81a6753e8297d49b3b0e60f3e1c27e4fbff2a6cc100d01cd0a39a75b4e3
- SSDEEP 49152:lNXkhjpZr+L6hsoD/cSjvJafJc3eXIeGixJbsf4GQHwFjPfLtv+W3oZYKwL:lZ2XCGyk/cSrJafogfGiK6QFjXLfuYK6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/splash.bmp
- SHA256 d9d9748931fab021c18618ed4f196be47731cfa397ee3f3bc850945a18ff45a5
- MD5 64a2961133a081df36c9a30b190ba101
- SHA1 5c0801ff1773e8efc306efb22f58bb4efbca50fa
- SHA512 2684d4004b95d5d92e897c652b7dd1ab664915c9dd7a6a92fa6355dce434047e01f8cda21d48621bcde9937d377e77d5c3c61288fdfdf1b9ed0778e21e13581c
- SSDEEP 6144:u2+HTeDSCVJCvsJD9JfmV6jV836S4ElkHjFG57cFCH636fCl8hIrivJcqaivqM9M:ZKCkKvSI+B19vqM9UZ3N
- MD5 SHA1 SHA512 SSDEEP
Artwork/About.png
- SHA256 1ace4be1d35cdc29b5d218e2066f2fdb117053ba377811eb80d1882f7f909614
- MD5 a39236510697f0c7429b47f17de02bef
- SHA1 5b17ce86cdf0a0ddeeed98afb3e6c2b785a66f0e
- SHA512 631378aea071088a5629e229a54bf029407f17fb48b1957c889878ea42ae31a6bdac943f531417827255ac6927d7d289985948e0d8120d28a8527335ff1d3ad2
- SSDEEP 3072:Hdw0og2LE3jrUiBDtoziJYbKf6+zdFpi0KoqCZ7ykjsd4A55cx478:KwwsDtQV+RFpi5oqCZm2sdPz78
- MD5 SHA1 SHA512 SSDEEP
Artwork/Back.bmp
- SHA256 c51faaa8b57aea90e1b9f708cb2bf5a8193b4032d79e1333eb73742c1cd1d96e
- MD5 fdfab8a51b0fba1b2ec1e30150aaefe6
- SHA1 7fda5c4c5e628580638276b18b31ae52c8f08b5a
- SHA512 2960c34d292bbef7043df1cb0b97242e6fe57389e3548549db7ec5d5b7e17416803cbb88d94c737397d90f9bf12747386f120c911f986d650d747f37d8492f10
- SSDEEP 24576:S4T1spNNsIJZG7qs3sjssY7WjWDx3hkOMMmpVq:p
- MD5 SHA1 SHA512 SSDEEP
Artwork/Demo.bmp
- SHA256 7695cc7234b622ec49f4464290ebbeb3c0eabb59274c6a927fc8ce62f20bcff7
- MD5 a056e311302bc5ceddeff49a4f203cd3
- SHA1 d085d829910e898013b87b7f648eda3af1a90586
- SHA512 ba4549ea67947852a721710a77b281b2f25c9729f5f5c6b4d59a49d22be2de2c9015c6240e869c64a2c8beb59b95762af0779257042aadf93871dcdefcf67862
- SSDEEP 384:IuO/FIDBZZz6600xPchwqIbUAQlVrB8wMUIfFZ4ocuq:DO/Fy0qPBolVrBi7q1
- MD5 SHA1 SHA512 SSDEEP
Artwork/TB Btn.bmp
- SHA256 96cd17a9e67a968df06dc2db304c4dcf7ea4f71900ae9c543d99851a0cc933a9
- MD5 1c7f4f61af758e65a2ca0ff2ab1545b6
- SHA1 3eba4a33166031a1ca86d7c4c67bc347987c2d9f
- SHA512 cadca85280438bd716ca73f66893daf895698ff4a63b385a975eaaddc9efef633571436294dd4e5633e0436bf3db78b0749ccb9a190611ecf10e29af54c78c4d
- MD5 SHA1 SHA512
Artwork/TB PrevNextBtn.bmp
- SHA256 a597e22d07bf45cdb5b7c1581ef6659bba0aa4eb1701eb04004fdfea5ee4c215
- MD5 90a05fae66bd87a1356819a168684ea2
- SHA1 3a3aa55b591262f88ba75c05c52eed78b1ae30f7
- SHA512 ea1a547fdd8fbd30ae3b356220ac53358c2d68dfae48af403fff2359d8c1a3f6a9c6de159a82d03619c12ea192607eeaa4ee5a612ea04949d47444a53bd443ab
- MD5 SHA1 SHA512
Artwork/TB Small.bmp
- SHA256 4838b77ecc9ce9fb31028efa06bde554a7b0aadd452231ae113c031937cf8dc1
- MD5 7612a0eec1bbaab001eb34e00dd5e8ec
- SHA1 a2e3c0424a5e19ac312a3acdf28a0c6b7ed3cd8c
- SHA512 60ff19990e2e1d8125549a52b266c624b8d93ae380776a8e8b2371825f66da3f6251702935b21893163d40c6d38f84fca6242f0c253eb3708ae365d384125301
- SSDEEP 96:i8cMp/TAn0127TSaEl/5mH+MozoPAWXAS0NWIcMMgzUZiHe+kPkS2cfyRFIbAlKj:
- MD5 SHA1 SHA512 SSDEEP
Artwork/TB WP.bmp
- SHA256 c1ea9f06adf1167c35283a0b3d1e34d4902d2790d6e6d5da9027993529477703
- MD5 f430bf0a08a6996fb2722366fd5ebc47
- SHA1 68e88f7532c30722d20f7fe7f5f14a7d10a2789b
- SHA512 042b37901ec771ec1c4fa117540c86d667e113d94de0f75b316633a22bfd8b2b4e59ec35f3d6be5a414ebe103f3e544fd716ec06c40add53242ac4b557cce40b
- SSDEEP 384:YD04XE/qSsFzxD7/Y8Z5WLnocxYyWxEzhjAJi0pz:zxNmi0
- MD5 SHA1 SHA512 SSDEEP
Artwork/skin.ini
- SHA256 384c28f083e0a7016fcb26a09f15628961c41792f24165443adfd0aa7a2bdbdc
- MD5 50a8428a56d2ee9a9b7137ff7fd8c27f
- SHA1 456fe3d7817a6af401eacc3eba3b0611d9411267
- SHA512 a1c1e49250bd2777162ec32d8cbffb872a9fdc28231af76545e069f845bfa9e6b1467cec22ddb61470330e1eb72f266017ea612f0b2bd9197d8884a4c5b4abf3
- MD5 SHA1 SHA512
Data/Maps/Default.fnv
- SHA256 a8d80a3138bdc7519cb3a10c510d6162b932eaaaf87b16e908de5e560f742ef5
- MD5 507138db000737eb4c9461d5f54984c3
- SHA1 3d31f3262e135953e57260d037dbccd36f41b480
- SHA512 4c8fdf75f7a7f398441e3feebde6b4d716ac29ff81ac1fcb2a2b9d80c812407d35c0d4b0a0c2747689ffe4256d0cbbef9b281d6453310cbe0f17b0269b9cd28d
- MD5 SHA1 SHA512
Data/Maps/Env filter - asymmetry.fnv
- SHA256 0f5018572e28dc4c957487709262a13220965c43613906a8267c6c914ea91c29
- MD5 08cdafbcabef86ded1079a2d9414c182
- SHA1 796036e145f4574444c06441e2cc058c0fe1db59
- SHA512 dec6ed090c3cbaaaecd5731988d9e5ad03ddfde31fcfd970517510e71b008605a159e31d4c8c7c95fadb15833a11759c570f89bdbde83b445c8b53d7a4b164c1
- MD5 SHA1 SHA512
Data/Maps/Env filter - default.fnv
- SHA256 e1bfe87814e9aca427d33d8cd9355dd3703298077e73db610d380d37f6b0d98f
- MD5 9084258accebf0a1bacfdb0d73ad1bb8
- SHA1 ec3dc7f1306934653b228b6f0481af3234a2d621
- SHA512 15902ef402ef94862e44405dc1a44aeb341be957f66550f9dda1bdfafca84b9466f838953a1f187321500da034eca7ca12883475c9251b93848385bc2e2d9150
- MD5 SHA1 SHA512
Data/Maps/Env filter - flat.fnv
- SHA256 690959bfcbe079ce51bb37e24127de0bd3590f732bac464c86cfe6ce5d67ca38
- MD5 3c2d51f477e56b8fc854bdcb66177ab5
- SHA1 7a034863b76c7f3ac11eb54b45cac2572776a6aa
- SHA512 036cd560b47785cd8bcb630e0214dd58e9b9eeba7d75718194f6b883a38d50c3574fd53a45587681b78850c1ad838de90e36097231304fa9b89b77a0444192f4
- MD5 SHA1 SHA512
Data/Maps/Env filter - small knee.fnv
- SHA256 6f303fb90f008d80d1359199fbd208433513b6b2614e99c938e96d99038404fb
- MD5 20a360e8dfae637bc7ab5018a23c9ca7
- SHA1 96912fad8ef611b631b05e8d136f402f5d4647dc
- SHA512 507797c6b4269719faaf160db788e34e9d88d8f2895c22ef5d70879763d1b16a996108f1f403fddd900111f9eecf670cdd0f5ffec8d1ee27b8d15ff08be819b7
- MD5 SHA1 SHA512
Gross Beat.chm
- SHA256 d6c6560a7379ea4b7e413923f12714cd3777938abdb4c5c67ebe5bc2f5ed2ce0
- MD5 887bee4dc6c8f2640e3e21a9e7242529
- SHA1 5e7632e6da6a61b9660cd9b6eecfd799d415a28f
- SHA512 f2042bcb4b1a895783647899b8e7c283784f336435f0fa6ac355e735552408c2c9d9ab23ed0b3fe8c45bceb2195795ebd0b4140386f08db3848ecae501481e89
- SSDEEP 24576:a/OQ2T/gvJSEEyTELXVHNv8eLrKm/yBc/tkiw8/n81vOlce7lvI:a/fu/gsEE0+lp8e/Vae/tg8kItlvI
- MD5 SHA1 SHA512 SSDEEP
Gross Beat.chw
- SHA256 f415f6f1465056aeb3d6184624b6fe5dd559c8a89f5c4354ba363d069863d619
- MD5 56c3f13c54123878999f4442dd197dc8
- SHA1 d1e9d7eb084489af751a478425217e7cb6d94e3f
- SHA512 dd169f68a3369fb7753d30e8db9c5ed3a684d6fbd73fe79730d661cf82cfab3131da47479b349a2201ab0661e44262474b007fceacb5bcef9d62bacf786f3257
- SSDEEP 48:h4cE5sf4AQjA/f7q+ZljFZslCwTy/Vhi+piOj3yvPUUg71V2FlEClErlEl3:Xw84WZ1NwTcVhiD2Nu
- MD5 SHA1 SHA512 SSDEEP
IL Gross Beat.dll
- IMPHASH 29f9b0bb42684460fbf24e776473eb09
- SHA256 c203ef0873e711b27ea94b2628218a6a39a9e99695ae9b77a893f28c907eb575
- MD5 9aa6e6391e2e96e9218da0663eaa208f
- SHA1 19d48b1709e6be0179a0b5f448e304a43372517d
- SHA512 de2c2d1ec27a6ee1d0056613570565c0a298de47c5b0be2a7553c6ade2d3c29de474011889c02925e14cf1096df92a1913ec274c1f5c6ec8bbf7eb2835f9e7bf
- SSDEEP 49152:CiqG1E0AQxFoSJDdknXOsL+YjCQAT9SX0R:CimQ7JJhknXO5B
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1465508
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
user32
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
wvsprintfA
WindowFromPoint
WindowFromDC
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LockWindowUpdate
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameA
GetClipboardData
GetClipCursor
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
AttachThreadInput
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyA
lstrcmpiA
WriteProcessMemory
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
SizeofResource
SetThreadLocale
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
QueryPerformanceCounter
OutputDebugStringA
MultiByteToWideChar
MulDiv
MoveFileA
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathA
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringA
CloseHandle
Sleep
GetProcAddress
FreeLibrary
LoadLibraryA
DeleteTimerQueueTimer
CreateTimerQueueTimer
msimg32
AlphaBlend
gdi32
UnrealizeObject
TextOutA
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetPaletteEntries
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
ResizePalette
RemoveFontResourceA
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
ExtTextOutA
ExcludeClipRect
EnumFontFamiliesExA
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePatternBrush
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
AddFontResourceA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
IsEqualGUID
CLSIDFromString
CoCreateGuid
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
ReleaseStgMedium
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitialize
IsEqualGUID
comctl32
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
shell32
ShellExecuteA
SHGetFileInfoA
SHFileOperationA
DragQueryPoint
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
ord18
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
winmm
timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
msacm32
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert
acmStreamMessage
acmStreamSize
acmStreamClose
acmStreamOpen
acmFormatSuggest
acmFormatChooseA
acmDriverDetailsA
acmDriverClose
acmDriverOpen
acmDriverEnum
acmMetrics
hhctrl.ocx
HtmlHelpA
VstPluginMain
main
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
733KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
534KB
Virtual Size
534KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Presets/Default.fst
- SHA256 eee2325fb9a65bd394f10e40c26b3532468ad009688e3618a92ff47717312ad2
- MD5 913733b03b69e05dbac33144d07712f2
- SHA1 a0954c865520838f2fac1f583c351ab940086c14
- SHA512 0f946ec6f576ab5bb00613621e470e51e6f1ebf823f741c376262ffca74b1b45f6aa24e8ee7fddfadaa972492ba25f65441cc2fcc4b3dbab0006cc4822b84d9a
- SSDEEP 6:ci+dheaCnjy0mIn4V1NePPkpg4kpg4kpg4kpg4kpg4kpg4kpg4kpg4kpg4kpg4kK:j+dh4jy444F
- MD5 SHA1 SHA512 SSDEEP
Presets/Flanging.fst
- SHA256 bef03abb469704bca62ace71740ff94ea4f5afd5c1fbec7aba8fe0b6a35b6b0a
- MD5 5a542c1762549d6c42e8b9df448d32c0
- SHA1 b29d266715ae9b0a75ae7c8fab2393211b8697a5
- SHA512 e485a24d0cc729eb7e0ccc4a866a811d376fc9b662909990d22397fcef733e6fb26577715bcbe9e10df66dc4e9281e042e40f4ac8ce42b973edaa34fbf75b2d0
- SSDEEP 6:cyYdNdheaCn5JmIn4fc/PzXAugtgYp2hLAdbhLAsgGRUEVjTK8Gv8BB/ElnWB1lM:nYdNdh4R4fc3uhg/wV08Q67mmmV
- MD5 SHA1 SHA512 SSDEEP
Presets/Momentary.fst
- SHA256 dbcea05e57ade512556f2cad8d0600c71cecb89f3ade07b5517a23cc11032b92
- MD5 feaedf9818ed1e0e7ac4ca3d65a11dc0
- SHA1 5ba721fd7cac95d299ccdf6d9485890536f91f7b
- SHA512 e364f45bb5dd0da681303c0c8c899111518ab23fbdf8dbbf8bc66d57b5eb3013425b8535a57f20ac18c8f7e72065db26cf0687a67e5a6e61539c586da88e8da9
- SSDEEP 384:qjePXenysQKPXPsvaHWtOQQQQ1+0KAeuArdWCQapvm5VI9eq5bqLS:qj2sQKPXPsvaHWtOQQQQ1MXT9
- MD5 SHA1 SHA512 SSDEEP
Presets/Patterns.fst
- SHA256 029b7b25289d3bf28ecda6bb76e72e382ad2e30ab51e2bc11e77b2ec48f33e5a
- MD5 56da1fb683b84a8b44e91c1b10d3c33b
- SHA1 dc3923cc1911429bcd8dc173b5209361db30fe10
- SHA512 250466e17d77660f48beb56e270622d5f09c2badc4cddbc87400e1d4d8a7148cba068cccbbb947f293b9085fca78fb9fa7741fdd5f8126e85b0006d1153644f9
- SSDEEP 384:j/jLJFk0unlsQgPXPsva0IthQQQQ1u0KAeuArdWCQapvm5VI9eq5bqLa:j/jLJFWsQgPXPsva0IthQQQQ18XTB
- MD5 SHA1 SHA512 SSDEEP
Presets/Pitch shifter.fst
- SHA256 a574292041fe01cba0f747c78393e0828476087ab1fb301c0df78fd852150208
- MD5 250a8a2461e4bf92564e2be635e99c05
- SHA1 6780f262d7ac45da493f8b6a9e92fc3bd94e7162
- SHA512 6995d8ef69f7aaf4f4cf4eb57684b13465f416fc6ad4a97923898da89c9c0713f09d59531e1c11afe3af57e89b72ec0828fee10b6f03748299246e13e0f8448d
- SSDEEP 384:NzzzzzzzzzzzzzzzIIIIIIIIIIIIIIII8Ekkk+EEEEEEEEW:NzzzzzzzzzzzzzzzcEkkk+EEEEEEEEW
- MD5 SHA1 SHA512 SSDEEP
Presets/Stutter.fst
- SHA256 05c51ec46bc000da979a61ccd093e3d820629fe0711402f54973e3ac4b833fac
- MD5 0a4f63fee274faae32de3f4914609432
- SHA1 49f4891704bd9c8e146c7c2e0a6ec61c49c5741c
- SHA512 f5658e604d098bbd092182d14122ceca8dd3062c1ce9a9fb55305491251dd0492221d0e7b637af836dbf888465404ca98e11c1cea6d97fe8a572abe365409d1a
- SSDEEP 24:UCS4A4EkWIVvOwmlekGlGlD32X2KJ000ROkBVZmNQLxGKu+Rlaf:nTA4vVvrmQ1M13pvO6VkNQdG/+RI
- MD5 SHA1 SHA512 SSDEEP
Presets/Turntablist.fst
- SHA256 7a5903d238347aed4988c3b6df64c10b66b1512edfee9c1c9204a337f4a3e158
- MD5 60598b340bb3ccf45b4c4bacbc1cb616
- SHA1 0dcc07fe2cd4e06d51238b66a8e215fda39fb25c
- SHA512 5fef89e75ad98ba6f5c820a34ea52e11c6f4463b9f611f222b7e45186f41c79a8697b2321b4aad8493f4988b4cd5ed2d1dd567b15cbd0f185077b36f315389b7
- SSDEEP 96:xMov6WT6gxGQfBvdhNADTjBlL/pXYJ6ONxwixy2Mjzj40c/pXjJ6ONawixy7dj6w:d/Y/4/bh6n6HFQQQQnPXPsvgr
- MD5 SHA1 SHA512 SSDEEP
uninstall.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 82d45f62debed77da4c768a6f827461be18852ea376928733be79539b9d3ebb4
- MD5 e4f3ddc1ac94e6703ec7a96c52dc6d53
- SHA1 316416c096a9d4a3b9c38e5fb3a5939f0f726df4
- SHA512 f707328f73f0925395ff3fc5610bc88ea124488680dffa4d8f83e2e43b9c78cd66ded113720d0dbe1e007d8bc88c0168224ad3da8a5599c4d645acb002a6e063
- SSDEEP 1536:1LXB65939tY6HBg4sXJpE90eaApbpzUR0B9u:1Lk395hYXJpfWplYuB8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,