| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date |
2025-Sep-05 04:33:46
|
| TLS Callbacks |
2 callback(s) detected.
|
| Debug artifacts |
Embedded COFF debugging symbols
|
| Suspicious |
The PE is possibly packed. |
Unusual section name found: .xdata
Unusual section name found: /4
Unusual section name found: /19
Unusual section name found: /31
Unusual section name found: /45
Unusual section name found: /57
Unusual section name found: /70
Unusual section name found: /81
Unusual section name found: /97
Unusual section name found: /113
|
| Suspicious |
The PE contains functions most legitimate programs don't use. |
Functions which can be used for anti-debugging purposes:
Manipulates other processes:
- OpenProcess
- Process32First
- Process32Next
- WriteProcessMemory
|
| Suspicious |
The file contains overlay data. |
80845 bytes of data starting at offset 0x4b000.
|
| Suspicious |
No VirusTotal score. |
This file has never been scanned on VirusTotal.
|
| MD5 |
1e22eb0332f7a5952cbb673dea428cd9
|
| SHA1 |
796a9b2fc168029282295c4a4099d600c13496ca
|
| SHA256 |
5c9a31bd6be0da7505b7b960de629b1c23314c0bf16d61951e5c576239a33bb0
|
| SHA3 |
f3cddb90d40c01e543fd8785ac87b5e7ad224ca9a2bfe85e95abe7427a029ffb
|
| SSDeep |
6144:r2o5KsKx9E8NI20flgwNU6RkO8RaslPMbJf7/wfUFNk3BX:6wKsKE8NI20fl88k9aJf7/8UFN0BX
|
| Imports Hash |
8b0ae2c8a0b6b431a296a2a646622550
|
| e_magic |
MZ
|
| e_cblp |
0x90
|
| e_cp |
0x3
|
| e_crlc |
0
|
| e_cparhdr |
0x4
|
| e_minalloc |
0
|
| e_maxalloc |
0xffff
|
| e_ss |
0
|
| e_sp |
0xb8
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x80
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections |
19
|
| TimeDateStamp |
2025-Sep-05 04:33:46
|
| PointerToSymbolTable |
0x4b000
|
| NumberOfSymbols |
2947
|
| SizeOfOptionalHeader |
0xf0
|
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
|
| Magic |
PE32+
|
| LinkerVersion |
2.0
|
| SizeOfCode |
0x8800
|
| SizeOfInitializedData |
0x4000
|
| SizeOfUninitializedData |
0xc00
|
| AddressOfEntryPoint |
0x0000000000001400 (Section: .text)
|
| BaseOfCode |
0x1000
|
| ImageBase |
0x140000000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
4.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
5.2
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x56000
|
| SizeOfHeaders |
0x600
|
| Checksum |
0x6b81f
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve |
0x200000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
2db20ca9d3ff01f72dd683ed90444cfb
|
| SHA1 |
9119acdba747143eedb967a547435ae2ad0acdd0
|
| SHA256 |
6612d874ef3403ec7583ceac12392aed42a9070d3ab51acd53abd92906facaea
|
| SHA3 |
b663c8daf3d0e2ccbb010d4ef989fc2e716eeae3a02594580533f96ecd2925cd
|
| VirtualSize |
0x8670
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x8800
|
| PointerToRawData |
0x600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
6.16314
|
| MD5 |
aa6874bc3c6aab75be019eb407f12242
|
| SHA1 |
662f03f9d2babfec8469e150026566cff014fb88
|
| SHA256 |
2240035d6ed8db0b04a261d193a202167386242079309d9d5dd9b11dd8dc627d
|
| SHA3 |
1917fe8c4df9183a5215734377888e2330b145e45a4c673724394ff576cdfe99
|
| VirtualSize |
0xd0
|
| VirtualAddress |
0xa000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x8e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0.803203
|
| MD5 |
23e64471d71ea771ed4f3dfaa06a2aed
|
| SHA1 |
db35c5f22c26e45509b7a78d71a5834faea9e2e0
|
| SHA256 |
735a7d19f00025d316c20e1061377ae59068a8557efcf454761d5bf87c8f1295
|
| SHA3 |
29e669a29e2aee20c062ba68311fe15461e150d8cd45ee0d53304fd58e5cc774
|
| VirtualSize |
0x13d0
|
| VirtualAddress |
0xb000
|
| SizeOfRawData |
0x1400
|
| PointerToRawData |
0x9000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.24287
|
| MD5 |
5d9a153dccb93c5e91585400960d2c26
|
| SHA1 |
82e81ed050761cb073da4f337989d56435ad24b3
|
| SHA256 |
6c95d7ed08b0682738722bb17c9da4f8e1c105a33d8e39620980c77a7375dc0b
|
| SHA3 |
4e53d0ab9a9027ad5602919a184bed8d97b77b2d49382a6761abf7374dd1d1d4
|
| VirtualSize |
0x6a8
|
| VirtualAddress |
0xd000
|
| SizeOfRawData |
0x800
|
| PointerToRawData |
0xa400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
3.74413
|
| MD5 |
caabaec8185305e4d59e57df8263d84b
|
| SHA1 |
f79ca94c0c94b9914607142e16b7a35e6c3fa825
|
| SHA256 |
854bfabc9782fc2166e084bfb418ba30f5f6da68df6b0c4cf6281b57bcfe14fc
|
| SHA3 |
87a58911bc366a04fded4cbaa053d98401053bbae09a222072b8b9bcaee6dd30
|
| VirtualSize |
0x6a8
|
| VirtualAddress |
0xe000
|
| SizeOfRawData |
0x800
|
| PointerToRawData |
0xac00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
3.96155
|
| MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
| SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
| SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
| SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
| VirtualSize |
0xb70
|
| VirtualAddress |
0xf000
|
| SizeOfRawData |
0
|
| PointerToRawData |
0
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 |
c4b05d1ce49ac4a6fb7d49e52a132f23
|
| SHA1 |
072b4b687f55a82733127856ee10a8bf2ba08189
|
| SHA256 |
7e3275231dae589971d6b29786f583c238cc4ae49b8f91610241f646f53c3894
|
| SHA3 |
b0c24a8364ba1c0b434c4a1034c003b9193db38427cfede22e2f81cf9376c40c
|
| VirtualSize |
0xe90
|
| VirtualAddress |
0x10000
|
| SizeOfRawData |
0x1000
|
| PointerToRawData |
0xb400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
4.14305
|
| MD5 |
bf619eac0cdf3f68d496ea9344137e8b
|
| SHA1 |
5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
|
| SHA256 |
076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
|
| SHA3 |
622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
|
| VirtualSize |
0x10
|
| VirtualAddress |
0x11000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0xc400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0
|
| MD5 |
08d63de6c16dc89e1209ee48225e35df
|
| SHA1 |
f33814d3b0c15fdb4c593c56b2092ff43324f8cc
|
| SHA256 |
11a19c0fd0e0de507df1b17bfe171d3f845dc882f3a479fa667855347ebc1aef
|
| SHA3 |
3755f52d8d272b1a407dce98c6cbb4233ba1a983e32604a5f1fafaec0a8d6d83
|
| VirtualSize |
0x4e8
|
| VirtualAddress |
0x12000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0xc600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
4.77685
|
| MD5 |
78e2851603bc424fff0a80f302b93543
|
| SHA1 |
18c825fb7b02ad6cca028b312035a222a9a231ff
|
| SHA256 |
69d18c179c4a3b579a70b6be48fc0c521e4196c3828fdcac4c5e9fbb8a6394b2
|
| SHA3 |
1a783fb568a5f31d208023e5c8251e9427a82b822b84fddb13e120dd54ba19c4
|
| VirtualSize |
0x70
|
| VirtualAddress |
0x13000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0xcc00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
1.36656
|
| MD5 |
040a31fe2211c5d887b5028f4d6cb23c
|
| SHA1 |
d7701e9ecb730f0e4489385c1a4705b53dfa44ef
|
| SHA256 |
38f1451de9af56bf355f7993f749fd3ad7efdfdb0d1e9222449e973f6bdc7736
|
| SHA3 |
7c1b48f4bb36175f052f271d584b663600e885069c5ee53e331f9ef485e8869b
|
| VirtualSize |
0x9b0
|
| VirtualAddress |
0x14000
|
| SizeOfRawData |
0xa00
|
| PointerToRawData |
0xce00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
2.15083
|
| MD5 |
3208b2ee1458d0030674768560c27442
|
| SHA1 |
b980a8b9cc287527748d59bb3bad686c4b75feb6
|
| SHA256 |
189d80ac795283537c85beeb3b8f93a63ac23ddb4638f3d38f24f0e2c3b9c30b
|
| SHA3 |
c0039dd8805a05f750ffd83e7524f57faa36b867e5635e0a7d0bd6d3ce826cb3
|
| VirtualSize |
0x24436
|
| VirtualAddress |
0x15000
|
| SizeOfRawData |
0x24600
|
| PointerToRawData |
0xd800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.95463
|
| MD5 |
e52e50d264abe9e5b65aa68a663d7ada
|
| SHA1 |
e123c1260fae0aef51ed0f8c781d91598576721a
|
| SHA256 |
4a5dc6e7209b3c58538bcccec4d922b76987838c55e38820748a93b5bade29ba
|
| SHA3 |
aa632dde808c07952b33447999f50afe743716f31069bd3ad56674407ddfcc33
|
| VirtualSize |
0x3c3b
|
| VirtualAddress |
0x3a000
|
| SizeOfRawData |
0x3e00
|
| PointerToRawData |
0x31e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.86047
|
| MD5 |
545fc76591207afb266951a9dffd8f5a
|
| SHA1 |
1b94424c0a660e72c3e943564bdf20fa4089ccda
|
| SHA256 |
f8a1ea1ea137fe676a2638f18e269a6e74d1d840a3944eb3dbfb012ec8b1e42e
|
| SHA3 |
95e1c22f807d0e27e859c9acd75ae8538fcf2b7cf7c727e106d3d8feb17560ca
|
| VirtualSize |
0x7d36
|
| VirtualAddress |
0x3e000
|
| SizeOfRawData |
0x7e00
|
| PointerToRawData |
0x35c00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.12481
|
| MD5 |
8d744cd787f1aa9264264164a791a84c
|
| SHA1 |
fff8abe2ceca569f71e190268434594782be7319
|
| SHA256 |
8162f9f210c8ee7b9f35c5dc62523e742e63aa940eb220c1dbd8af47e5ab8fa3
|
| SHA3 |
8fa4d1e62cb09ea037e6ad056096949ee32bde6f70987c11718c6567633820fe
|
| VirtualSize |
0x2320
|
| VirtualAddress |
0x46000
|
| SizeOfRawData |
0x2400
|
| PointerToRawData |
0x3da00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.36335
|
| MD5 |
fb983f32683d3b32f21dbfd85ca31de7
|
| SHA1 |
923cb7d13e72a5ea9d5cbbb074328d0c144bfcf9
|
| SHA256 |
15495394785852788cf57e4b6a0b32efc708444708cbf02070b9a601484de934
|
| SHA3 |
95e95c336cef9aa452b98a169edfd220ce75a19d0ab9ab873e1e7f26cffd0313
|
| VirtualSize |
0x95b
|
| VirtualAddress |
0x49000
|
| SizeOfRawData |
0xa00
|
| PointerToRawData |
0x3fe00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.55271
|
| MD5 |
7c5927ffe9ddd1fe1ae992bb006b80bf
|
| SHA1 |
d69f2c0913488486cab1e30ea58207b5bd1b7763
|
| SHA256 |
ce9b6fcf04df80a39bd870ca544a926ab43f117c1154d0dc823ce7d3bb795c4a
|
| SHA3 |
c8ea09d094cc6f2504ec6e19ee7cf93e2e45f5f88336f60df5e513d8d47743e6
|
| VirtualSize |
0x2378
|
| VirtualAddress |
0x4a000
|
| SizeOfRawData |
0x2400
|
| PointerToRawData |
0x40800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.94681
|
| MD5 |
ee694d0baa95cb9437e42fc696a98667
|
| SHA1 |
5aa933e2b2e9eeadcbbcac9959effe7c3e6cb6d0
|
| SHA256 |
516bbdc8cfe2924612fe19e5e8c353b5716eb084820d7722770e2c6aec9163df
|
| SHA3 |
1bd8feaab7e833ee0e4bbb4d7d8a4c09c419e4b79ddee9a313ab8d99f53da817
|
| VirtualSize |
0x7a6c
|
| VirtualAddress |
0x4d000
|
| SizeOfRawData |
0x7c00
|
| PointerToRawData |
0x42c00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.92682
|
| MD5 |
d596065ce1f9bdf040c9b811d6f89282
|
| SHA1 |
9250a42f681c0c83651a2f80a42dab1c3f26a95a
|
| SHA256 |
d584e9ee145d330e8a9c136456d30be8ff44eb58e2f927942d3a31cd95d56198
|
| SHA3 |
de6dd52ba6e577b4ebcfe1a734e0b3d059cd04881f4817aecc43ad2d5965a41b
|
| VirtualSize |
0x7ce
|
| VirtualAddress |
0x55000
|
| SizeOfRawData |
0x800
|
| PointerToRawData |
0x4a800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.66785
|
| libgcc_s_seh-1.dll |
_Unwind_Resume
|
| KERNEL32.dll |
CloseHandle
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
OpenProcess
Process32First
Process32Next
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
VirtualQueryEx
WriteProcessMemory
|
| api-ms-win-crt-convert-l1-1-0.dll |
mbrtowc
wcrtomb
|
| api-ms-win-crt-environment-l1-1-0.dll |
__p__environ
|
| api-ms-win-crt-filesystem-l1-1-0.dll |
_lock_file
_unlock_file
|
| api-ms-win-crt-heap-l1-1-0.dll |
_set_new_mode
calloc
free
malloc
|
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
localeconv
|
| api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
|
| api-ms-win-crt-private-l1-1-0.dll |
__C_specific_handler
memcpy
|
| api-ms-win-crt-runtime-l1-1-0.dll |
__p___argc
__p___argv
_cexit
_configure_narrow_argv
_crt_atexit
_errno
_exit
_initialize_narrow_environment
_set_app_type
_initterm
_initterm_e
_set_invalid_parameter_handler
abort
exit
signal
strerror
|
| api-ms-win-crt-stdio-l1-1-0.dll |
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
fputc
|
| api-ms-win-crt-string-l1-1-0.dll |
_stricmp
memset
strlen
strncmp
strnlen
wcslen
wcsnlen
|
| api-ms-win-crt-utility-l1-1-0.dll |
rand
|
| libstdc++-6.dll |
_ZNSi3getEv
_ZNSt6chrono3_V212steady_clock3nowEv
_ZSt17__throw_bad_allocv
_ZSt20__throw_length_errorPKc
_ZSt3cin
_ZSt4cout
_ZSt7getlineIcSt11char_traitsIcESaIcEERSt13basic_istreamIT_T0_ES7_RNSt7__cxx1112basic_stringIS4_S5_T1_EE
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZdlPvy
_Znwy
__gxx_personality_seh0
|
| Type |
RT_MANIFEST
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x48f
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.13793
|
| MD5 |
5aa04ce935e78505e230765e85c34355
|
| SHA1 |
6c93b8c5fde8be4b2231dca6b8ec513cdc82c991
|
| SHA256 |
a73f26a8d504043f785d7360e8febf2eeb8522ec873a0d4dd5d1d4bfd1e67d3d
|
| SHA3 |
149467cafc03ba34b33cd8076fc2771413760822357952de205dbae2b5cb8059
|
| StartAddressOfRawData |
0x140011000
|
| EndAddressOfRawData |
0x140011008
|
| AddressOfIndex |
0x14000f07c
|
| AddressOfCallbacks |
0x14000c3a8
|
| SizeOfZeroFill |
0
|
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks |
0x0000000140001B80
0x0000000140001B60
|
[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /31!
[*] Warning: Tried to read outside the COFF string table to get the name of section /45!
[*] Warning: Tried to read outside the COFF string table to get the name of section /57!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /81!
[*] Warning: Tried to read outside the COFF string table to get the name of section /97!
[*] Warning: Tried to read outside the COFF string table to get the name of section /113!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF String Table's reported size is bigger than the remaining bytes!
[*] Warning: Section .bss has a size of 0!