1b9b255ef6b9edd3d5c57a1e4a19ae45a5b8197cd9b778139284b7709a6daae0

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jul-30 21:59:04
Detected languages English - United States
CompanyName Jocasta Protocol Team
FileDescription Jocasta Protocol Gaming Assistant
FileVersion 1.6.4
InternalName JocastaProtocol
LegalCopyright Copyright (C) 2025 Jocasta Protocol Team
OriginalFilename JocastaProtocol.exe
ProductName Jocasta Protocol
ProductVersion 1.6.4

Plugin Output

Info Libraries used to perform cryptographic operations: Microsoft's Cryptography API
Suspicious This PE is packed with VMProtect Unusual section name found: .vmp0
Unusual section name found: .vmp1
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Possibly launches other programs:
  • ShellExecuteW
 Uses Microsoft's cryptographic API:
  • CryptStringToBinaryA
 Has Internet access capabilities:
  • WinHttpOpen
 Leverages the raw socket API to access the Internet:
  • WS2_32.dll
Malicious VirusTotal score: 18/69 (Scanned on 2026-08-23 00:53:52) AVG: FileRepMalware [Misc]
Avast: FileRepMalware [Misc]
Bkav: W32.Malware.6448B043
CrowdStrike: win/malicious_confidence_90% (D)
Cylance: Unsafe
Cynet: Malicious (score: 100)
ESET-NOD32: Win64/Packed.VMProtect.MS trojan
Elastic: malicious (high confidence)
Google: Detected
Malwarebytes: Malware.Heuristic.2121
McAfeeD: ti!1B9B255EF6B9
Microsoft: Trojan:Win32/Wacatac.B!ml
Sangfor: Trojan.Win32.Save.a
SentinelOne: Static AI - Suspicious PE
Sophos: Mal/VMProtBad-A
Symantec: ML.Attribute.HighConfidence
Trapmine: suspicious.low.ml.score
ZoneAlarm: Mal/VMProtBad-A

Hashes

MD5 e1900ad0c7cc181af6513cb929c395dc 🔍
SHA1 c8e23c88645444c873d9c90457ddd96785a6b7bf 🔍
SHA256 1b9b255ef6b9edd3d5c57a1e4a19ae45a5b8197cd9b778139284b7709a6daae0 🔍
SHA3 6d400b45d852028726de52bdf76bb9fbd6c92f9e1a6e348be5ba37250196143a 🔍
SSDeep 196608:/AX6yaXLsUYEluXgPmv5sQ264XFIAh0wInKGjJla16rPrM2vnQWILCCkR9o:/4rabsUYElwZ5sQ4IDwIn3rM2PuCCkR 🔍
Imports Hash 21fd0fd0fbd5f0e82cd1aea84ae50524 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 9
TimeDateStamp 2026-Jul-30 21:59:04
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x18ce00
SizeOfInitializedData 0x4b1000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000A1C907 (Section: .vmp1)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x13f6000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x18cdd3
VirtualAddress 0x1000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x112e88
VirtualAddress 0x18e000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x63518
VirtualAddress 0x2a1000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0xd83c
VirtualAddress 0x305000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x200
VirtualAddress 0x313000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x6f135f
VirtualAddress 0x314000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ

.vmp1

MD5 2e346f5654305ebeb6a38f1d9094d2ac 🔍
SHA1 1fa904461470ca461d7bda6cceed3963e0de218f 🔍
SHA256 02152b1c2f0e51e89ce66be6e3db6eee0b0c1e08a937acd9c74e119dd065b81a 🔍
SHA3 f3e70589bef73e32d9d050c75df835b0ced4b7f415e2b6c5d4b54cd79224f79b 🔍
VirtualSize 0x987f6c
VirtualAddress 0xa06000
SizeOfRawData 0x988000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
Entropy 7.96513

.reloc

MD5 7cfa2b506b8e75b073b22090e8a0b69f 🔍
SHA1 1776b5316671c58c46153fa2440957a01d4625c8 🔍
SHA256 12168098485a05166c8912d739972aabea9a370f06dc86524a1d1dff5e7e0602 🔍
SHA3 12794546a9494906f27fc43d867cdb1969adf7db3f3dce8c0392767a7c68aa4e 🔍
VirtualSize 0xd4
VirtualAddress 0x138e000
SizeOfRawData 0x200
PointerToRawData 0x988400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.21631

.rsrc

MD5 d34c381f63ae85f7c5fa7ff5c9220141 🔍
SHA1 d583d00779dcc1ce0b240b2f07e86006f7013ccb 🔍
SHA256 011de45669ee53aefb608b38d7d04aeb258a20ef95721359c5ac8e2b96a801cf 🔍
SHA3 3ab4b8b41989822341d078aac441d2735a5f993493b04d473627cd81f69de221 🔍
VirtualSize 0x6648d
VirtualAddress 0x138f000
SizeOfRawData 0x66600
PointerToRawData 0x988600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.9939

Imports

USER32.dll GetWindow
KERNEL32.dll MultiByteToWideChar
ntdll.dll NtClose
d3d11.dll D3D11CreateDeviceAndSwapChain
D3DCOMPILER_47.dll D3DCompile
WINHTTP.dll WinHttpOpen
IPHLPAPI.DLL GetAdaptersInfo
GDI32.dll GetObjectW
COMDLG32.dll GetOpenFileNameW
ADVAPI32.dll RegDeleteTreeW
SHELL32.dll ShellExecuteW
ole32.dll CoCreateInstance
MSVCP140.dll ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
dwmapi.dll DwmEnableBlurBehindWindow
MSIMG32.dll AlphaBlend
WS2_32.dll send
bcrypt.dll BCryptOpenAlgorithmProvider
CRYPT32.dll CryptStringToBinaryA
IMM32.dll ImmSetCandidateWindow
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll __current_exception
api-ms-win-crt-stdio-l1-1-0.dll __stdio_common_vsscanf
api-ms-win-crt-runtime-l1-1-0.dll _exit
api-ms-win-crt-time-l1-1-0.dll _gmtime64_s
api-ms-win-crt-string-l1-1-0.dll strncpy
api-ms-win-crt-heap-l1-1-0.dll malloc
api-ms-win-crt-convert-l1-1-0.dll strtol
api-ms-win-crt-filesystem-l1-1-0.dll _lock_file
api-ms-win-crt-utility-l1-1-0.dll qsort
api-ms-win-crt-math-l1-1-0.dll sinf
api-ms-win-crt-locale-l1-1-0.dll _configthreadlocale
WTSAPI32.dll WTSSendMessageW
KERNEL32.dll (#2) MultiByteToWideChar
USER32.dll (#2) GetWindow
KERNEL32.dll (#3) MultiByteToWideChar
USER32.dll (#3) GetWindow

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x3ec
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.76407
Detected Filetype PNG graphic file
MD5 37df2d7736b2903c0e1e38919b8272cf 🔍
SHA1 0665ccbfa02a2e37bf0a7de62ebb1610d7f084f8 🔍
SHA256 56808d8b86e5b1d654775d9ba332c0cdaee9bdab4d5a4a6e3d6c12776aa44e11 🔍
SHA3 dc1efc01752c2f971f8d7b877ea5e1cb9efb2e1614d6d62f4df4421e83913e4a 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.83596
Detected Filetype PNG graphic file
MD5 7b473c788cd887d3f1d2be126de921bd 🔍
SHA1 4c3e7b6a101eee84b20763b51c91ce5dbd08fa7f 🔍
SHA256 656105559685e2f46332b69cacef20f34a165ce0f14c19146508fee31a21de41 🔍
SHA3 b0efb7d60f01455873d95be226a4fec43b02bd7e63ee3d76bab8f94a01a1962c 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x7de
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.87438
Detected Filetype PNG graphic file
MD5 b42dfb950128597ea755444b98016a82 🔍
SHA1 9ebada0b2b84a18407b384cbba25922d150ad687 🔍
SHA256 51f76590e4a9617aabe5a44bfcc621a50052bc30f436740f720bbdfb0d2efb22 🔍
SHA3 f60cb8047aeea1e12cb34b2f22afe2e2aeb06cd37746d78470fd11f47e2e349d 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xce0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.93421
Detected Filetype PNG graphic file
MD5 52a51fc422ba8e45625cf4b348739b06 🔍
SHA1 77ff04f65ae41a53be5bd1e5f1f8c03edf181d83 🔍
SHA256 443da982a5f2a692a2561c508177b90f32846ccef78380dbd2658e78b4044644 🔍
SHA3 9575640e0c08e7ea839e16587dc41ef3f6cb3916d1bd8a3f204d03728f8ac182 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x12e9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.93707
Detected Filetype PNG graphic file
MD5 8ed8c3acf55d12beea66b4820b2c7310 🔍
SHA1 4efa8b40a66c12f54f15ce096acc0f54d753bb77 🔍
SHA256 dadfdcaa9041078a0e67ac8d5caee0242d8910d4aa11cd5ff6d149d5bd080237 🔍
SHA3 b358e5553afd23b8f5bec5d0a1f62079413359f1290021639908e64f634e5dfb 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1a07
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96359
Detected Filetype PNG graphic file
MD5 751c37ebb5af4e4ff95704971969d04f 🔍
SHA1 ca0ee7ad841b44f5c251834e8d5a2412cfece3c3 🔍
SHA256 ac6177e3fd6f9fb30ee36c8762706e8ad56905ffaddeed9143db4c5114837f00 🔍
SHA3 79586b4a6999bb72844722df6af1d863e3002225ba083bd7d9cd763642ed844a 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2a18
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97139
Detected Filetype PNG graphic file
MD5 61256f903746b91b6219ee597780be86 🔍
SHA1 ddc08f35cd85422370d99dbb3f56d3e8bbade5f4 🔍
SHA256 f12c4c5dd6bf5b6fb3745bfa72e9d52657d5542647a79faedb50e2cd7623ecd1 🔍
SHA3 2ca37ba26dee7083802b41762815eb9c9bf35c8028d05b77994f0ed659ea4fd0 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5395
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98593
Detected Filetype PNG graphic file
MD5 fbaca712fd23c97b29f86cf5c7f0b545 🔍
SHA1 ef95a3f4ad20c16cf84b38ab22aff47e1b0379d6 🔍
SHA256 c23812ce4e35c7cf4b4238806379cfbea3763562ef9e80eace2e56bf910069f4 🔍
SHA3 fb0a9e3017f65c9aa7d999ada717f2b13801579847de89b4c29d0d5454f80baf 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x89d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98786
Detected Filetype PNG graphic file
MD5 6af991a14d41d9cf228b9734e0406d4f 🔍
SHA1 ea0a1d7c1334af70c355e0dd43d37b674902b79a 🔍
SHA256 71bbe530815e5b63cac2935e81c9832361706469fce9a03ac6f8fb8cc8adde60 🔍
SHA3 71e0717a9f61c2885bf9fd4b96a81f3384abe8820f84baa2761527cf06092a97 🔍

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1d9fa
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99663
Detected Filetype PNG graphic file
MD5 60c2b573b6aae7961848964d21c16c2a 🔍
SHA1 5f4f76f3b61b518dfb0fea972f4b93bb238b5258 🔍
SHA256 f655d986cfe03db8e5fecb9bc50a8ab02f1cbaa5d888f31dd055509ae9d53467 🔍
SHA3 4c77893379759a2bf19fde2c7370cc9a1c3e9b3417c47e2ebb0a52d15d48c324 🔍

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x3ec
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.76407
Detected Filetype PNG graphic file
MD5 37df2d7736b2903c0e1e38919b8272cf 🔍
SHA1 0665ccbfa02a2e37bf0a7de62ebb1610d7f084f8 🔍
SHA256 56808d8b86e5b1d654775d9ba332c0cdaee9bdab4d5a4a6e3d6c12776aa44e11 🔍
SHA3 dc1efc01752c2f971f8d7b877ea5e1cb9efb2e1614d6d62f4df4421e83913e4a 🔍

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.83596
Detected Filetype PNG graphic file
MD5 7b473c788cd887d3f1d2be126de921bd 🔍
SHA1 4c3e7b6a101eee84b20763b51c91ce5dbd08fa7f 🔍
SHA256 656105559685e2f46332b69cacef20f34a165ce0f14c19146508fee31a21de41 🔍
SHA3 b0efb7d60f01455873d95be226a4fec43b02bd7e63ee3d76bab8f94a01a1962c 🔍

13

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x7de
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.87438
Detected Filetype PNG graphic file
MD5 b42dfb950128597ea755444b98016a82 🔍
SHA1 9ebada0b2b84a18407b384cbba25922d150ad687 🔍
SHA256 51f76590e4a9617aabe5a44bfcc621a50052bc30f436740f720bbdfb0d2efb22 🔍
SHA3 f60cb8047aeea1e12cb34b2f22afe2e2aeb06cd37746d78470fd11f47e2e349d 🔍

14

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xce0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.93421
Detected Filetype PNG graphic file
MD5 52a51fc422ba8e45625cf4b348739b06 🔍
SHA1 77ff04f65ae41a53be5bd1e5f1f8c03edf181d83 🔍
SHA256 443da982a5f2a692a2561c508177b90f32846ccef78380dbd2658e78b4044644 🔍
SHA3 9575640e0c08e7ea839e16587dc41ef3f6cb3916d1bd8a3f204d03728f8ac182 🔍

15

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x12e9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.93707
Detected Filetype PNG graphic file
MD5 8ed8c3acf55d12beea66b4820b2c7310 🔍
SHA1 4efa8b40a66c12f54f15ce096acc0f54d753bb77 🔍
SHA256 dadfdcaa9041078a0e67ac8d5caee0242d8910d4aa11cd5ff6d149d5bd080237 🔍
SHA3 b358e5553afd23b8f5bec5d0a1f62079413359f1290021639908e64f634e5dfb 🔍

16

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1a07
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96359
Detected Filetype PNG graphic file
MD5 751c37ebb5af4e4ff95704971969d04f 🔍
SHA1 ca0ee7ad841b44f5c251834e8d5a2412cfece3c3 🔍
SHA256 ac6177e3fd6f9fb30ee36c8762706e8ad56905ffaddeed9143db4c5114837f00 🔍
SHA3 79586b4a6999bb72844722df6af1d863e3002225ba083bd7d9cd763642ed844a 🔍

17

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2a18
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97139
Detected Filetype PNG graphic file
MD5 61256f903746b91b6219ee597780be86 🔍
SHA1 ddc08f35cd85422370d99dbb3f56d3e8bbade5f4 🔍
SHA256 f12c4c5dd6bf5b6fb3745bfa72e9d52657d5542647a79faedb50e2cd7623ecd1 🔍
SHA3 2ca37ba26dee7083802b41762815eb9c9bf35c8028d05b77994f0ed659ea4fd0 🔍

18

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5395
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98593
Detected Filetype PNG graphic file
MD5 fbaca712fd23c97b29f86cf5c7f0b545 🔍
SHA1 ef95a3f4ad20c16cf84b38ab22aff47e1b0379d6 🔍
SHA256 c23812ce4e35c7cf4b4238806379cfbea3763562ef9e80eace2e56bf910069f4 🔍
SHA3 fb0a9e3017f65c9aa7d999ada717f2b13801579847de89b4c29d0d5454f80baf 🔍

19

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x89d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98786
Detected Filetype PNG graphic file
MD5 6af991a14d41d9cf228b9734e0406d4f 🔍
SHA1 ea0a1d7c1334af70c355e0dd43d37b674902b79a 🔍
SHA256 71bbe530815e5b63cac2935e81c9832361706469fce9a03ac6f8fb8cc8adde60 🔍
SHA3 71e0717a9f61c2885bf9fd4b96a81f3384abe8820f84baa2761527cf06092a97 🔍

20

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1d9fa
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99663
Detected Filetype PNG graphic file
MD5 60c2b573b6aae7961848964d21c16c2a 🔍
SHA1 5f4f76f3b61b518dfb0fea972f4b93bb238b5258 🔍
SHA256 f655d986cfe03db8e5fecb9bc50a8ab02f1cbaa5d888f31dd055509ae9d53467 🔍
SHA3 4c77893379759a2bf19fde2c7370cc9a1c3e9b3417c47e2ebb0a52d15d48c324 🔍

1 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16382
Detected Filetype Icon file
MD5 69b5b0a125ef450843a509ca28783844 🔍
SHA1 2cbb3dc25f24db34ae30cf8d95ed7f1d4f93422a 🔍
SHA256 ea3091e805b508e857e06d0a01b25edb1f59ac37da3b30c2ef141611d97caaf6 🔍
SHA3 0bddf76c1817bf2f15ee785847e7856db183762aadc44ff543e4da533bc04685 🔍

102

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.19349
Detected Filetype Icon file
MD5 935e4b13b91320bbfe304bbb05c842dd 🔍
SHA1 3341d59e26b635a3fec4173ebb66c1128be60c8e 🔍
SHA256 7ebcb1907232b15904b730f7db9e81fc86eca0af9ac281721c789529544452f6 🔍
SHA3 d4f07c8a10dc0b8441c4aae1b9f0eda6f27b357cc66081a91b472e072408873d 🔍

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x33c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36176
MD5 de71c4347efaaf435a32b6290ea54019 🔍
SHA1 4fb6ab64708e3f4277e464a922dbbf4663761e8f 🔍
SHA256 b3b2b9433d305beb7a311edecc31494556abe82fb09a29072411322198bfebe4 🔍
SHA3 d5a448de8f0fcf98112a8c28254c520622dc9b27c1528214c3425b6b3e8db3a7 🔍

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.6.4.0
ProductVersion 1.6.4.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Jocasta Protocol Team
FileDescription Jocasta Protocol Gaming Assistant
FileVersion (#2) 1.6.4
InternalName JocastaProtocol
LegalCopyright Copyright (C) 2025 Jocasta Protocol Team
OriginalFilename JocastaProtocol.exe
ProductName Jocasta Protocol
ProductVersion (#2) 1.6.4
Resource LangID English - United States

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1402a1040

RICH Header

Errors

[!] Error: Could not reach the TLS callback table. [*] Warning: Section .text has a size of 0! [*] Warning: Section .rdata has a size of 0! [*] Warning: Section .data has a size of 0! [*] Warning: Section .pdata has a size of 0! [*] Warning: Section _RDATA has a size of 0! [*] Warning: Section .vmp0 has a size of 0!
Leave a comment

No comments yet.