| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date |
2026-Oct-08 03:11:59
|
|
Info
|
Cryptographic algorithms detected in the binary: |
Uses known Mersenne Twister constants
|
|
Suspicious
|
The PE is possibly packed. |
The PE only has 0 import(s).
|
|
Suspicious
|
The file contains overlay data. |
11264 bytes of data starting at offset 0x3c400.
|
|
Suspicious
|
No VirusTotal score. |
This file has never been scanned on VirusTotal.
|
| MD5 |
29984b149b0876d30a0ab7b8cd6fb42c
🔍
|
| SHA1 |
634d6518f0596dcb2338dbcd7651c14d59b42cdd
🔍
|
| SHA256 |
1d26839f344e635890cbd1f8dc6c00f8e9f60bdb4c54775f18f522da8f019104
🔍
|
| SHA3 |
95ca0b825bb08249b45f3d9663dda0aea7e2c30ae9b5da334081aee4ca21caab
🔍
|
| SSDeep |
3072:0xhvRFqgr17r/fL4sgtlThnumvLlnoHk7aosL1rzvsUbj4+vBaymn:0V76l1+kud9XZ
🔍
|
| Imports Hash |
d41d8cd98f00b204e9800998ecf8427e
🔍
|
| e_magic |
MZ
|
| e_cblp |
0x78
|
| e_cp |
0x1
|
| e_crlc |
0
|
| e_cparhdr |
0x4
|
| e_minalloc |
0
|
| e_maxalloc |
0
|
| e_ss |
0
|
| e_sp |
0
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x78
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections |
4
|
| TimeDateStamp |
2026-Oct-08 03:11:59
|
| PointerToSymbolTable |
0
|
| NumberOfSymbols |
0
|
| SizeOfOptionalHeader |
0xf0
|
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic |
PE32+
|
| LinkerVersion |
14.0
|
| SizeOfCode |
0x32600
|
| SizeOfInitializedData |
0x9a00
|
| SizeOfUninitializedData |
0
|
| AddressOfEntryPoint |
0x0000000000002070 (Section: .text)
|
| BaseOfCode |
0x1000
|
| ImageBase |
0x140000000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
6.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
6.0
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x3f000
|
| SizeOfHeaders |
0x400
|
| Checksum |
0
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve |
0x100000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
f0ecb678fdabfdb483d06ebfdbeca681
🔍
|
| SHA1 |
8c4c60443fa4c7f0bdbfed0d3c9ad55ba16b217f
🔍
|
| SHA256 |
9b42203fcf72f8106e198fab255d78014e823149de2cc9851a9a4b36e820a244
🔍
|
| SHA3 |
2194fd1590b37dac15471e853e3219f54f2085335ce95c6da64af0ca9b542587
🔍
|
| VirtualSize |
0x3245a
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x32600
|
| PointerToRawData |
0x400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
6.22765
|
| MD5 |
6237abc543708a46da1deafba7127800
🔍
|
| SHA1 |
fddd22d514f8385f15b93487f08ec6149744b1ee
🔍
|
| SHA256 |
19e2b53294d1e7c03c816cc605b5f0e9408ada617a4f50f5498a7e383bcdccaf
🔍
|
| SHA3 |
4b4bfae42528aa02ff1e6fae1c74b19c577d157d4426984b2f3c8d91b28998fd
🔍
|
| VirtualSize |
0x2316
|
| VirtualAddress |
0x34000
|
| SizeOfRawData |
0x2400
|
| PointerToRawData |
0x32a00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.70964
|
| MD5 |
c4c08f888da8bef3bc31e1412e86b06a
🔍
|
| SHA1 |
27e0d0b6f7178ba338bc6b581e5b9af71cacda6a
🔍
|
| SHA256 |
7b7263b350d4cef020ffcf19f3c1e9c1ef8567b5b9df81c0f893a19d9bb50534
🔍
|
| SHA3 |
89cb683e8f3d3e681859752d44db9ba0264f03560ba34ec5e33137e6f65e8ba5
🔍
|
| VirtualSize |
0x5da4
|
| VirtualAddress |
0x37000
|
| SizeOfRawData |
0x5e00
|
| PointerToRawData |
0x34e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
4.5221
|
| MD5 |
4f57f7d36093c478e207c8c0f42445b6
🔍
|
| SHA1 |
19b0f344150965c4ba76dca808e072ec6d0a9dfd
🔍
|
| SHA256 |
c46547625609dc5c465541251335d368f3e80e58d9e6e22c2999c1ef556d814d
🔍
|
| SHA3 |
8f5ee73f9f64b88a5a290a626232903e52552e2f707746a10bddae803c2bf6a5
🔍
|
| VirtualSize |
0x16b4
|
| VirtualAddress |
0x3d000
|
| SizeOfRawData |
0x1800
|
| PointerToRawData |
0x3ac00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
3.99551
|
[!] Error: Could not read an import's name.
[!] Error: Could not read an IMAGE_BASE_RELOCATION's TypeOrOffset!