Tone2 - Electra3 v3.2.1.rar
- SHA256 51ab27ce9533d8c69d8e0a887c6dc284c7c1f9a47f44fa09102ab938eddbac76
Overview
overview
8Static
static
3Tone2 - El....1.rar
windows10-2004-x64
7Tone2 - El....1.rar
windows11-ltsc_2024-x64
7R2R/R2R.nfo
windows10-2004-x64
1R2R/R2R.nfo
windows11-ltsc_2024-x64
1R2R/R2R.txt
windows10-2004-x64
1R2R/R2R.txt
windows11-ltsc_2024-x64
8R2R/Tone2_KeyGen.exe
windows10-2004-x64
7R2R/Tone2_KeyGen.exe
windows11-ltsc_2024-x64
7$TEMP/BASSMOD.dll
windows10-2004-x64
3$TEMP/BASSMOD.dll
windows11-ltsc_2024-x64
3$TEMP/R2RGLD2KG.dll
windows10-2004-x64
3$TEMP/R2RGLD2KG.dll
windows11-ltsc_2024-x64
3$TEMP/bgm.xm
windows10-2004-x64
1$TEMP/bgm.xm
windows11-ltsc_2024-x64
1$TEMP/keygen.exe
windows10-2004-x64
3$TEMP/keygen.exe
windows11-ltsc_2024-x64
3Setup Elec....1.exe
windows10-2004-x64
3Setup Elec....1.exe
windows11-ltsc_2024-x64
8Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Tone2 - Electra3 v3.2.1.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tone2 - Electra3 v3.2.1.rar
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
R2R/R2R.nfo
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
R2R/R2R.nfo
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
R2R/R2R.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
R2R/R2R.txt
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
Behavioral task
behavioral7
Sample
R2R/Tone2_KeyGen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
R2R/Tone2_KeyGen.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral9
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
$TEMP/BASSMOD.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
$TEMP/R2RGLD2KG.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
$TEMP/R2RGLD2KG.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
$TEMP/bgm.xm
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral14
Sample
$TEMP/bgm.xm
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral15
Sample
$TEMP/keygen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
$TEMP/keygen.exe
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
Setup Electra v3.2.1.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
Setup Electra v3.2.1.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
General
- Target Tone2 - Electra3 v3.2.1.rar
- Size 261.9MB
- Sample260702-mhgesaf12x
- SHA256 51ab27ce9533d8c69d8e0a887c6dc284c7c1f9a47f44fa09102ab938eddbac76
- MD5 3736c3b91cef1b800011bf3cd3d9dd7f
- SHA1 5e3756f4b2f7c3f1203e8a64b30d76e8d791070d
- SHA512 c00a69189065d6f8f54c7085fe161199972d9ebd6af79c49013a2fc65b7c4b56f619945aed76bf69f222bf632dcc0ae918a0b73be913e23c8f1499cc077cbde6
- SSDEEP 6291456:VBWrGCJKU/ZfKzLKnvYbEKNo9laY+m3MBN0sC9we:JCIU/Zf0LKwnyfaY+mKN0J
- TLSH T109D833567B63EEE2E627BE3240398B796113012B18015690435FEF30724BDB6B937BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/R2R/Tone2_KeyGen.exe unpack002/$TEMP/BASSMOD.dll unpack002/$TEMP/R2RGLD2KG.dll unpack002/$TEMP/keygen.exe unpack001/Setup Electra v3.2.1.exe
File Explorer
-
Tone2 - Electra3 v3.2.1.rar.rar 261.9MB
-
R2R/R2R.nfo6KB
-
R2R/R2R.txt570B
-
R2R/Tone2_KeyGen.exe.exe 541KB
-
$TEMP/BASSMOD.dll.dll 33KB
-
$TEMP/R2RGLD2KG.dll.dll 5KB
-
$TEMP/bgm.xm388KB
-
$TEMP/keygen.exe.exe 492KB
-
Setup Electra v3.2.1.exe.exe 261.3MB
R2R/R2R.nfo
- SHA256 1e6dd26d7851500c53295f5616c5c664cc02956ff8cdcb585798f725e6f2732e
- MD5 c2d3ff80990a0f2b4a36b1fc8ecb963d
- SHA1 843fdf557e5dcc0c41298b0b05af9c667801811b
- SHA512 6966ea079bc3d33e1edca246fe8f5d31870f2f29be765dde2fbb1ff298c5ab7c05303fbd8d0548160c7f7c7ceb155f5626465b320bdd09de173bc42c943c3c43
- SSDEEP 96:rHMH6DNLnJsAKwzfkTdoUilCWMU0rVFEdj:r59nJsAidojY8yO
- TLSH T152C183208121ABA0B51382B71D1822C0F29AD64E3C3929D871DFDABAFF67D34516835D
- MD5 SHA1 SHA512 SSDEEP TLSH
R2R/R2R.txt
- SHA256 bccd2006752a1365c26befe869ef90d8c580497754c78e91e8cc5d1b87e49e41
- MD5 e411a01e13fc04f0b612f83a1d745487
- SHA1 21e699950dba38df643c61feb38b3f0b81af6e98
- SHA512 c67e0ad797a31eda86d52ed789dca07b2d56d587f28e1620ca1a626e50046106eb0106e7a6d5061b1e4ee45bc493af998fcd8a4d9ae50f4345d08ee593cb4fc1
- TLSH T156F0E1BB4692D27306CA421DADA9E23EE35BC03196F882213E8DB005772749647DE3C6
- MD5 SHA1 SHA512 TLSH
R2R/Tone2_KeyGen.exe
- IMPHASH 61259b55b8912888e90f516ca08dc514
- SHA256 b0ebec322ce578522d3187e902c962968e9af4805f0d3eefae549f99a9c7d391
- MD5 23b8db6e59d1b5742d662c2e9aadf960
- SHA1 c23959e602c0c5091a869d58f0e559e57482e233
- SHA512 a9ef60ed4393b410b665454371918aeb5f66d82a9444a301668e03c9d093ae29876d89e0818473c2e157ec6d61f8183c7b72f57f853e5de1896735ad15fc746e
- SSDEEP 12288:XYkc9t2Sll/T/ohkU3xg63nsGDxIVhxdKxoSZvj:XYkcL5T/50nSxor
- TLSH T104C41201F65484A7DCA257B049FF9A2125BAEE29843A1F4BB398B72C3933357500F797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13888
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
shell32
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
user32
GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
gdi32
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
kernel32
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$TEMP/BASSMOD.dll
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
73795
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASSMOD_ErrorGetCode
BASSMOD_Free
BASSMOD_GetCPU
BASSMOD_GetDeviceDescription
BASSMOD_GetVersion
BASSMOD_GetVolume
BASSMOD_Init
BASSMOD_MusicDecode
BASSMOD_MusicFree
BASSMOD_MusicGetLength
BASSMOD_MusicGetName
BASSMOD_MusicGetPosition
BASSMOD_MusicGetVolume
BASSMOD_MusicIsActive
BASSMOD_MusicLoad
BASSMOD_MusicPause
BASSMOD_MusicPlay
BASSMOD_MusicPlayEx
BASSMOD_MusicRemoveSync
BASSMOD_MusicSetAmplify
BASSMOD_MusicSetPanSep
BASSMOD_MusicSetPosition
BASSMOD_MusicSetPositionScaler
BASSMOD_MusicSetSync
BASSMOD_MusicSetVolume
BASSMOD_MusicStop
BASSMOD_SetVolume
Name
Size
31KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
$TEMP/R2RGLD2KG.dll
- IMPHASH 03d59cb642c56473fac4813c783e2edb
- SHA256 fa1b6a3dfb396a6f2925f2f8d5d89885c5cbb7e9108d04158262d9af25dcd71b
- MD5 501ae6ccc10518430bd0d6e1ccea179f
- SHA1 ed72512d15bdf16b0fce37235843cf6eae576743
- SHA512 735e972b9aa6e28f669192eaf8c4281ee76453fd17accd9be48c145e4bdb63231adfc6a8c489c7dd4e1e925d034177e986a6a25630987ad95714e74d6c2776e7
- SSDEEP 48:iVhqxMNE2CPj4GDuXnVbwFTENgFOmrDX0Y0tIypFWPvyXsfn8UnkphVhwPcrX1CT:W/e2Cr4jbSG+0Ht1pFWXf8eAla
- TLSH T124C1C6ABB2424492DB1935F11D4BEF8E893E5125EF6546F32B00259F2AF49E1F42D30C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
srand
sprintf
time
memcpy
memset
rand
GenerateLicense
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=1, productName=Unmarked objects,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=32217,
count=1, id=256, version=32217,
count=1, id=258, version=32217,
$TEMP/bgm.xm
- SHA256 98c69e7f59231970dcb7858791ab5e229bb310ac7e196ddfc3203b46f2d043b6
- MD5 2dc3ec3f50214a13388932155baf3724
- SHA1 deb34a6de5c98f4d954a9eb3857694401a5e06a3
- SHA512 b3e9114e005506381d8ce58dadb4f59e9cde2999b170ec021c195d3594a2d8bc535fce6ae7463d70f72f1208ac302a89dcd30436fced727dc14e949831aa546d
- SSDEEP 6144:byrB6Iajv3kXQk4JFcoE/KdbsNknsH1qT467/3h1pj:buDG3kyx+KdbsNCj
- TLSH T15A84A823FA059582D8597E314C3D8BA84310BD5CAFB1571B2A9DBE2DEEFA3D31D11290
- MD5 SHA1 SHA512 SSDEEP TLSH
$TEMP/keygen.exe
- IMPHASH 61baf0ac33a569be37eaea52c317de1e
- SHA256 a2204caa5d2f178a68ab0a803af9df1145c19ee66dccc72282e048482dbff7fa
- MD5 15f2d430bc32b3e4d95f2d915f9f7d83
- SHA1 f60f5a8f968f1b36d689aabeaff62d43f205d614
- SHA512 42dfebe4ea7016e862681db2f4231846dabe5c891eaa604ef1e32606c6014a9b7f14b5adb816b6283c85e0a26d3ec06be74c9110a27e5ff8b6f1a9826c57dfc4
- SSDEEP 6144:pcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOoEFz3pf47oZHGFnRQNCg5Z3E1TUA:pc/kEPDonR6Y436vRLFnCktEdUQd
- TLSH T1ADB4A282D26248FEF6F9C33A40DE2338C476BF6CC71484AF82E62D5557B23D505AA2D5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
155256
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
_TrackMouseEvent
ord17
msimg32
GradientFill
kernel32
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
VirtualProtect
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetOEMCP
GetACP
HeapSize
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ReadFile
CloseHandle
LCMapStringW
LCMapStringA
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersionExA
GetStartupInfoA
GetModuleHandleA
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
HeapReAlloc
RtlUnwind
RaiseException
HeapFree
HeapAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadReadPtr
IsBadCodePtr
QueryPerformanceCounter
GetLocalTime
FindFirstFileA
FindNextFileA
GetLastError
FindClose
DeleteFileA
GetShortPathNameA
GlobalLock
GlobalUnlock
MulDiv
GlobalAlloc
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetSystemInfo
GlobalMemoryStatus
GetVersion
GetComputerNameA
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineA
Sleep
GetTickCount
GetModuleFileNameA
GetLocaleInfoW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
SetEndOfFile
GetEnvironmentStrings
user32
UnregisterClassA
AdjustWindowRectEx
LoadIconA
LoadCursorA
RegisterClassA
PostQuitMessage
DefWindowProcA
InvalidateRect
BeginPaint
EndPaint
FillRect
TabbedTextOutA
GetSysColor
MoveWindow
ReleaseDC
GetClassLongA
SetClassLongA
SetWindowLongA
IsWindowEnabled
EnableWindow
SetFocus
GetFocus
GetWindowLongA
GetClientRect
InflateRect
DrawFocusRect
DrawTextA
PostMessageA
SetWindowTextA
GetDlgItemTextA
GetDlgCtrlID
IsDlgButtonChecked
CallWindowProcA
FindWindowA
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MapVirtualKeyA
GetWindowRect
SetActiveWindow
SetWindowPos
GetAsyncKeyState
GetCursorPos
ShowCursor
SetCursorPos
MessageBoxA
EnumDisplaySettingsA
ChangeDisplaySettingsA
CreateWindowExA
ShowWindow
SendMessageA
DestroyWindow
GetDC
GetSystemMetrics
GetActiveWindow
gdi32
CreateDIBSection
CreateCompatibleDC
Rectangle
DeleteDC
SetBkColor
SetStretchBltMode
StretchBlt
Ellipse
MoveToEx
LineTo
SetPixel
GetPixel
GetTextExtentPoint32A
SetDIBColorTable
CreatePalette
CreatePen
GetTextMetricsA
SelectPalette
RealizePalette
BitBlt
SelectObject
SetBkMode
SetTextColor
GetStockObject
CreateFontIndirectA
DeleteObject
CreateSolidBrush
GetDeviceCaps
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
advapi32
GetUserNameA
shell32
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA
ole32
CoCreateInstance
IIDFromString
CLSIDFromProgID
CoUninitialize
CreateStreamOnHGlobal
OleUninitialize
CoInitializeEx
OleInitialize
oleaut32
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayCopy
OleLoadPicture
SafeArrayGetElement
VariantClear
VariantInit
SafeArrayAccessData
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayCreate
SysFreeString
SysAllocStringByteLen
VariantChangeType
VariantCopyInd
VariantCopy
SysAllocString
SafeArrayPutElement
winmm
sndPlaySoundA
mciSendStringA
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
timeGetTime
Name
.text
Size
197KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
34KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=105, version=2067,
count=35, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=4, id=95, version=2179,
count=2, id=93, version=2067,
count=16, id=93, version=2179,
count=5, id=25, version=9210,
count=224, id=1, productName=Unmarked objects,
count=147, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=42, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Setup Electra v3.2.1.exe
- IMPHASH e5d2ec931648bb8ad5e500042e54a614
- SHA256 617e52e3ac95ec1be257f9bc800617b92d83ae776d3318ba64ac13d7ea17c006
- MD5 6f5b25fbafd2899495ce081ce4b1725e
- SHA1 655065f761e7083119ed87de6e8ecdca6c01367d
- SHA512 b5c956530d46766478beed846c99328a09feede85e7cc5ae99c261736e4c1e55a11617290e3197d942441bff83007d3ea680f7eeb8e1a3b28bac9d84716cd1b1
- SSDEEP 6291456:6BWrGCJKU/ZfKzLKnvYbEKNo9laY+m3MBN0sC9wm:eCIU/Zf0LKwnyfaY+mKN03
- TLSH T1D9D8339A7B63EEF2E627BE3280388B795513013B18015650435BDF30724BDB6B937AD9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
169164
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
SysStringLen
ole32
CoCreateInstance
CoInitialize
CoUninitialize
OleInitialize
user32
IsDlgButtonChecked
EndDialog
SetDlgItemTextW
GetFocus
SetFocus
GetKeyState
InvalidateRect
SetWindowTextW
EnableWindow
PostMessageW
MessageBoxW
DialogBoxParamW
CheckDlgButton
GetWindowLongW
GetParent
ShowWindow
MoveWindow
ScreenToClient
GetDlgItem
GetWindowRect
MapDialogRect
MonitorFromWindow
GetMonitorInfoA
SystemParametersInfoW
GetWindowTextLengthW
GetWindowTextW
SendMessageW
LoadStringW
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharUpperW
SetTimer
LoadIconW
SetCursor
LoadCursorW
KillTimer
SetWindowLongW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHGetMalloc
msvcrt
wcsstr
wcscmp
strlen
_beginthreadex
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
free
malloc
memcpy
memmove
memset
_purecall
memcmp
_CxxThrowException
__CxxFrameHandler
kernel32
GetStartupInfoA
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
lstrlenW
lstrcatW
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
SetPriorityClass
WaitForMultipleObjects
DeleteCriticalSection
Sleep
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GlobalFree
GlobalAlloc
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
GetLogicalDriveStringsW
GetFileInformationByHandle
GetFileAttributesW
GetModuleHandleA
FindNextFileW
FindFirstFileW
FindClose
GetTickCount
GetCurrentDirectoryW
SetLastError
DeleteFileW
CreateDirectoryW
GetModuleHandleW
MoveFileW
RemoveDirectoryW
SetFileAttributesW
CreateFileW
SetFileTime
CloseHandle
GetSystemDirectoryW
FormatMessageW
LocalFree
GetModuleFileNameW
LoadLibraryExW
GlobalUnlock
MultiByteToWideChar
GetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
GetCommandLineW
GetVersionExW
GlobalLock
Name
.text
Size
174KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sxdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8047,
count=8, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=95, version=2190,
count=175, id=1, productName=Unmarked objects,
count=13, id=93, version=2179,
count=91, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=16, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,