black box hg 2 [win].rar
- SHA256 5d333a7035968356c61b0f403f1fd994c496aaca31701b3973864b27d40ecc69
Password
shzoom
Overview
overview
7Static
static
3Black Box ...en.exe
windows10-2004-x64
7Black Box ...en.exe
windows11-ltsc_2024-x64
7$TEMP/BASSMOD.dll
windows10-2004-x64
3$TEMP/BASSMOD.dll
windows11-ltsc_2024-x64
3$TEMP/R2RPAKG2.dll
windows10-2004-x64
3$TEMP/R2RPAKG2.dll
windows11-ltsc_2024-x64
3$TEMP/keygen.exe
windows10-2004-x64
3$TEMP/keygen.exe
windows11-ltsc_2024-x64
3Black Box ....3.exe
windows10-2004-x64
7Black Box ....3.exe
windows11-ltsc_2024-x64
7Behavioral task
behavioral1
Sample
Black Box Analog Design HG 2 [WIN]/Keygen (R2R)/PluginAlliance_KeyGen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Black Box Analog Design HG 2 [WIN]/Keygen (R2R)/PluginAlliance_KeyGen.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
$TEMP/BASSMOD.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
$TEMP/R2RPAKG2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$TEMP/R2RPAKG2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$TEMP/keygen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
$TEMP/keygen.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
Black Box Analog Design HG 2 [WIN]/Setup HG-2 v1.3.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
General
- Target black box hg 2 [win].rar
- Size 35.6MB
- Sample260814-cdkarssfne
- SHA256 5d333a7035968356c61b0f403f1fd994c496aaca31701b3973864b27d40ecc69
- MD5 861ce2eac7b35d2e463f0bc82c2f73a6
- SHA1 11f46fe11275c8251eea34c728ee20c8d6d0b531
- SHA512 b46f37cf77d631c2b06ec84650eb2b9a4f7e5705d84723a43a8e506e6e5633cd1d77f7d0dd5cbd478ffb93c78b89cb0802c040d51199fb11f34f19def6d4fb0d
- SSDEEP 786432:+Jm+ZY4bNiF+QOUjxDB8MtwNLLNf8M2bEbIe1IOHZFtQ6jcN:H+ZLbNREzwdKM2bEse1zbrS
- TLSH T140873332D8519AFABE3427125962101BED2AF1432036FA9FD8B3769766D13CD8C0379D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/Black Box Analog Design HG 2 [WIN]/Keygen (R2R)/PluginAlliance_KeyGen.exe unpack002/$TEMP/BASSMOD.dll unpack002/$TEMP/R2RPAKG2.dll unpack002/$TEMP/keygen.exe unpack001/Black Box Analog Design HG 2 [WIN]/Setup HG-2 v1.3.exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/Black Box Analog Design HG 2 [WIN]/Setup HG-2 v1.3.exe innosetup - NSIS installer 2 IoCs
resource yara_rule static1/unpack001/Black Box Analog Design HG 2 [WIN]/Keygen (R2R)/PluginAlliance_KeyGen.exe nsis_installer_1 static1/unpack001/Black Box Analog Design HG 2 [WIN]/Keygen (R2R)/PluginAlliance_KeyGen.exe nsis_installer_2
File Explorer
-
black box hg 2 [win].rar.rar 35.6MB
-
Black Box Analog Design HG 2 [WIN]/Keygen (R2R)/PluginAlliance_KeyGen.exe.exe 1.1MB
-
$TEMP/BASSMOD.dll.dll 33KB
-
$TEMP/R2RPAKG2.dll.dll 698KB
-
$TEMP/bgm.it608KB
-
$TEMP/keygen.exe.exe 585KB
-
Black Box Analog Design HG 2 [WIN]/Setup HG-2 v1.3.exe.exe 34.7MB
Black Box Analog Design HG 2 [WIN]/Keygen (R2R)/PluginAlliance_KeyGen.exe
- IMPHASH 57e98d9a5a72c8d7ad8fb7a6a58b3daf
- SHA256 d58a18dbacce9835558f833a909969bbb92518e952d4746b0c829af2feef93a9
- MD5 555b6cd3da2835eb01b916a07da5f90f
- SHA1 a5f789a7a2ecafb40f91af961c676316d77a5900
- SHA512 7712ff33f6ad822ff46068b94fe5a7c9e13816e96a9d453244af6ce6de73a846d680de887295f3ca5291eda3a1fe4b0ba87e9143b12430eeeae8a18a21f35c47
- SSDEEP 24576:scLyAfMu5l0QUT37BguPp5/u95F0RG1LIWCfLqrSUID:sA15lDKNuNvLIWP4D
- TLSH T1FE35239EBD8895F3D4B30A7114EF4811377B3D029CA6416662A6BB39BA73363505F383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Password
shzoom
Minor OS version
0
Major OS version
4
Entry point
13096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetEnvironmentVariableA
CreateFileA
GetFileSize
GetModuleFileNameA
ReadFile
GetCurrentProcess
CopyFileA
Sleep
GetTickCount
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
ExitProcess
SetCurrentDirectoryA
GlobalLock
CreateThread
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
WriteFile
lstrcpyA
MoveFileExA
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CompareFileTime
SetFileAttributesA
GetFileAttributesA
GetShortPathNameA
MoveFileA
GetFullPathNameA
SetFileTime
SearchPathA
CloseHandle
lstrcmpiA
GlobalUnlock
GetDiskFreeSpaceA
lstrcmpA
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
GetPrivateProfileStringA
FindClose
MultiByteToWideChar
FreeLibrary
MulDiv
WritePrivateProfileStringA
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
user32
ScreenToClient
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
PostQuitMessage
GetWindowRect
EnableMenuItem
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
ReleaseDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndDialog
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
GetDC
CreateDialogParamA
SetTimer
GetDlgItem
SetWindowLongA
SetForegroundWindow
LoadImageA
IsWindow
SendMessageTimeoutA
FindWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
EndPaint
DestroyWindow
wsprintfA
ShowWindow
SetWindowTextA
gdi32
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
advapi32
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=159, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$TEMP/BASSMOD.dll
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
shzoom
Minor OS version
0
Major OS version
4
Entry point
73795
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASSMOD_ErrorGetCode
BASSMOD_Free
BASSMOD_GetCPU
BASSMOD_GetDeviceDescription
BASSMOD_GetVersion
BASSMOD_GetVolume
BASSMOD_Init
BASSMOD_MusicDecode
BASSMOD_MusicFree
BASSMOD_MusicGetLength
BASSMOD_MusicGetName
BASSMOD_MusicGetPosition
BASSMOD_MusicGetVolume
BASSMOD_MusicIsActive
BASSMOD_MusicLoad
BASSMOD_MusicPause
BASSMOD_MusicPlay
BASSMOD_MusicPlayEx
BASSMOD_MusicRemoveSync
BASSMOD_MusicSetAmplify
BASSMOD_MusicSetPanSep
BASSMOD_MusicSetPosition
BASSMOD_MusicSetPositionScaler
BASSMOD_MusicSetSync
BASSMOD_MusicSetVolume
BASSMOD_MusicStop
BASSMOD_SetVolume
Name
Size
31KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
$TEMP/R2RPAKG2.dll
- IMPHASH e4c615c4da8a3e3a51df9bb647983467
- SHA256 27847c041b31b85f4e9b8b1b190d7a3cbdcaa20a987fe2f6e47d9bb075e3ab75
- MD5 a910ea2f47f15bdf15c851a77999bfce
- SHA1 fb4a7ac1497b8299d7983c08c532fee9968c25ca
- SHA512 634a189e97ec19e57bfb24582292d285991d945062e45a1c1819c0ca5a6e747af725fbccbee06addad1a4a73dd32ca56367c2054cfa88e845e0c25ba8e40223b
- SSDEEP 12288:ZSAYvf1bu2NcZUNcL1mP6MEWUPfoqSh1rmp9JpZwoM4AHk09RsOrpEY1qj+lHL87:ZSAYvNbu2NcZpRmP6MEWgpZaHfphE+pt
- TLSH T1CCE49D03FA81C5B2F5DF003960B3677E8A369D249729C9D38BA078658D712D06B3F799
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
shzoom
Minor OS version
0
Major OS version
6
Entry point
398286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentProcessId
GetTickCount
FreeLibrary
LoadLibraryA
GlobalMemoryStatus
FlushConsoleInputBuffer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
SetConsoleCtrlHandler
ReadFile
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
GetModuleFileNameA
WideCharToMultiByte
CloseHandle
HeapAlloc
GetACP
CompareStringW
LCMapStringW
HeapReAlloc
FlushFileBuffers
GetConsoleCP
ReadConsoleW
SetFilePointerEx
SetStdHandle
GetStringTypeW
CreateFileW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
HeapSize
SetEndOfFile
DecodePointer
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetLastError
WriteFile
GetFileType
HeapFree
GetStdHandle
user32
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
advapi32
ReportEventA
RegisterEventSourceA
DeregisterEventSource
GenerateLicense
Name
.text
Size
486KB
Virtual Size
485KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=159, id=243, version=40116,
count=25, id=242, version=40116,
count=24, id=259, version=26706,
count=29, id=261, version=26706,
count=16, id=260, version=26706,
count=326, id=260, version=25019,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=110, id=1, productName=Unmarked objects,
count=2, id=260, productName=VS2017 v15.8.5 build 26732, version=26732,
count=1, id=256, productName=VS2017 v15.8.5 build 26732, version=26732,
count=1, id=258, productName=VS2017 v15.8.5 build 26732, version=26732,
$TEMP/bgm.it
- SHA256 6d2769526ebebb8a7a785525868363455a97123206ee98cd89c1bdb4a52924b4
- MD5 eca48589674fb145077f6ee0c45b3a5e
- SHA1 ec1ce2fc53ee57d063e0313daada98bfb685a704
- SHA512 5c3eeac924b154df4c946ebd679bb02d001235986e3a60542c3ad18021afde4f4c9d2ffa946812bfddfe1719fca983235e47f77967b824bdad013a523d1fa861
- SSDEEP 12288:ocBp5m6ubJt/BBDaK+K6YsQx+8JX5OszbBhCDxRpdCawxd0:o+54bH5bn6Yt+qOszbBhCD1dCxW
- TLSH T1DDD4CF22FAC4FD4FE582A935DC2F85217257B8F8DA765147398A3D0E97BB2452C1CB08
- MD5 SHA1 SHA512 SSDEEP TLSH
$TEMP/keygen.exe
- IMPHASH 9afd408c16ad749aaf647af5f1acf3a7
- SHA256 4125f8ad184d4c246bb94afa12aea1aa5340088d899b36c58bc1c6fb7890a5c4
- MD5 6c961cee54569005f9f2b674113cee22
- SHA1 09911bb112416125013a0eb916ab1d6ead9ad997
- SHA512 b006d90112ddcf21550c2c029140ebc1b788e5549b716064c9e82d008007b0a5fa046498c3eb5bc75782657e3de1c9c0dfccf0d4bda822f79b6a7b9d2e66e571
- SSDEEP 12288:tpGVQ4KQonRBVrzRNO9dsU8sVKEidN+4spzEBaLC:tp1QonRBVrz8joD67LC
- TLSH T19FD44D976126CEB9CF81ADF646470443BED5C4EE03300DD36E56EC1EABD12DD48BA229
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
shzoom
Minor OS version
0
Major OS version
4
Entry point
98518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
_TrackMouseEvent
ord17
kernel32
MultiByteToWideChar
SetEndOfFile
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
CreateFileA
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
VirtualProtect
GetCPInfo
GetOEMCP
GetACP
HeapSize
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ReadFile
CloseHandle
LCMapStringW
LCMapStringA
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersionExA
GetStartupInfoA
GetModuleHandleA
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GetLastError
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
HeapReAlloc
RtlUnwind
RaiseException
HeapFree
GetLocalTime
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetShortPathNameA
GlobalLock
GlobalUnlock
MulDiv
GlobalAlloc
GlobalFree
GetCommandLineA
GetSystemInfo
GlobalMemoryStatus
GetVersion
GetComputerNameA
GetWindowsDirectoryA
GetSystemDirectoryA
WinExec
GetProcAddress
LoadLibraryA
FreeLibrary
WideCharToMultiByte
Sleep
HeapAlloc
GetModuleFileNameA
GetTickCount
user32
MessageBoxA
ShowCursor
ChangeDisplaySettingsA
SetClassLongA
EnumDisplaySettingsA
SetCursorPos
GetCursorPos
GetAsyncKeyState
GetSystemMetrics
SetWindowPos
SetActiveWindow
ShowWindow
ReleaseDC
DestroyWindow
SendMessageA
AdjustWindowRectEx
UnregisterClassA
LoadIconA
LoadCursorA
RegisterClassA
PostQuitMessage
InvalidateRect
DefWindowProcA
BeginPaint
EndPaint
FillRect
TabbedTextOutA
GetSysColor
MoveWindow
GetActiveWindow
GetClassLongA
CreateWindowExA
SetWindowLongA
IsWindowEnabled
EnableWindow
SetFocus
GetFocus
GetWindowLongA
GetClientRect
InflateRect
DrawFocusRect
DrawTextA
PostMessageA
SetWindowTextA
GetDlgItemTextA
GetDlgCtrlID
IsDlgButtonChecked
CallWindowProcA
FindWindowA
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MapVirtualKeyA
GetWindowRect
GetDC
gdi32
CreateDIBSection
CreateCompatibleDC
Rectangle
DeleteDC
SetStretchBltMode
StretchBlt
Ellipse
MoveToEx
LineTo
SetPixel
GetPixel
GetTextExtentPoint32A
SetDIBColorTable
CreatePalette
CreateSolidBrush
CreatePen
GetTextMetricsA
SelectPalette
RealizePalette
BitBlt
SelectObject
SetBkMode
SetTextColor
GetStockObject
CreateFontIndirectA
DeleteObject
GetDeviceCaps
comdlg32
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
advapi32
GetUserNameA
shell32
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
winmm
sndPlaySoundA
mciSendStringA
timeEndPeriod
timeGetDevCaps
timeGetTime
timeBeginPeriod
Name
.text
Size
135KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=29, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=95, version=2179,
count=2, id=93, version=2067,
count=14, id=93, version=2179,
count=5, id=25, version=9210,
count=187, id=1, productName=Unmarked objects,
count=118, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=42, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
Black Box Analog Design HG 2 [WIN]/Setup HG-2 v1.3.exe
- IMPHASH 20dd26497880c05caed9305b3c8b9109
- SHA256 86d2f6ccd9c1d7acf876d554290c0490e10bda58f230f417a87b363a608ea3be
- MD5 027c3de785957c8219894952780b1e0b
- SHA1 660c2f9e4c1c41c19a97027d07e9c336b0044a49
- SHA512 767d9005f63224a211266ddac137cb9e44207d02e99477d72ebaf808127270a70d5f7913cc79cba9cbe3145e572028d720901e08829cc1e4b4692e9f5e9d85d6
- SSDEEP 786432:n9tAOjPt1jRTZuMlK/VDL7Po3RFlbikc3Vz+zmTbUGTjRvbybWA2d6G3C0Eo2i:/bvdF9+VDLzQkdTbLTjRvbybWA2d6GSQ
- TLSH T1DD87339287D58878F025F375AD1BD505CD233A241AFA049B6E79FA0D0DB37CB4EB1A42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Password
shzoom
Minor OS version
0
Major OS version
5
Entry point
71644
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep
comctl32
InitCommonControls
Name
.text
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ