| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Apr-18 18:03:42 |
| Info | Matching compiler(s): | MASM/TASM - sig1(h) |
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xe8 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 4 |
| TimeDateStamp | 2026-Apr-18 18:03:42 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x59a00 |
| SizeOfInitializedData | 0x5000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000005804C (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x61000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| USER32.dll |
SetWindowPos
MonitorFromWindow PostMessageA ScreenToClient GetSystemMetrics ShowWindow SetTimer EndPaint TrackMouseEvent SetWindowTextA GetMonitorInfoA DefWindowProcA AdjustWindowRectEx SetLayeredWindowAttributes TranslateMessage SendMessageA SetCursor SystemParametersInfoA GetClientRect PostQuitMessage RegisterClassExA UpdateWindow ReleaseCapture InvalidateRect ReleaseDC BeginPaint LoadCursorA GetMessageA DispatchMessageA CreateWindowExA GetWindowRect |
|---|---|
| GDI32.dll |
DeleteObject
GetDeviceCaps SelectObject CreateCompatibleBitmap DeleteDC |
| gdiplus.dll |
GdipDeletePen
GdipDeleteFont GdipDeleteStringFormat GdipDeleteGraphics GdipFillRectangleI GdipCloneBrush GdipSetTextRenderingHint GdipCreateFromHDC GdipDrawString GdipCreatePen1 GdipFree GdipClosePathFigure GdipGraphicsClear GdipFillPath GdipCreateSolidFill GdipCreateFont GdipSetStringFormatLineAlign GdipCreatePath GdipSetSmoothingMode GdipDeletePath GdipAlloc GdipDeleteBrush GdipCreateFontFamilyFromName GdipDrawRectangleI GdiplusStartup GdipSetStringFormatAlign GdiplusShutdown GdipCreateStringFormat GdipSetStringFormatFlags GdipDeleteFontFamily GdipDrawPath GdipAddPathArcI |
| MSVCP140.dll |
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ ?_Xinvalid_argument@std@@YAXPEBD@Z |
| KERNEL32.dll |
RtlCaptureContext
RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW CreateThread GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetCurrentProcess TerminateProcess GetTickCount GetTickCount64 MultiByteToWideChar OutputDebugStringA IsProcessorFeaturePresent InitializeSListHead |
| VCRUNTIME140.dll |
__std_exception_destroy
memmove memcpy __std_exception_copy memset memcmp __C_specific_handler _CxxThrowException __current_exception_context __current_exception |
| VCRUNTIME140_1.dll |
__CxxFrameHandler4
|
| api-ms-win-crt-stdio-l1-1-0.dll |
__acrt_iob_func
__stdio_common_vsscanf __stdio_common_vsprintf_s fopen __stdio_common_vfprintf fclose fread ftell __stdio_common_vsprintf __p__commode _set_fmode fseek |
| api-ms-win-crt-math-l1-1-0.dll |
_dtest
log tan fmod fabs round pow sqrt nan floor cos ceil __setusermatherr trunc sin |
| api-ms-win-crt-runtime-l1-1-0.dll |
exit
_exit _configure_narrow_argv _c_exit _register_thread_local_exe_atexit_callback _errno _initterm abort _get_narrow_winmain_command_line _set_app_type _seh_filter_exe _cexit _initialize_onexit_table _register_onexit_function _invoke_watson terminate _initterm_e _crt_atexit _initialize_narrow_environment |
| api-ms-win-crt-string-l1-1-0.dll |
isxdigit
strcmp wcslen isspace isalpha isalnum tolower isdigit toupper |
| api-ms-win-crt-convert-l1-1-0.dll |
strtod
strtoul strtol |
| api-ms-win-crt-utility-l1-1-0.dll |
rand
|
| api-ms-win-crt-heap-l1-1-0.dll |
free
_callnewh _set_new_mode malloc |
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Apr-18 18:03:42 |
| Version | 0.0 |
| SizeofData | 740 |
| AddressOfRawData | 0xa444 |
| PointerToRawData | 0x9844 |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x14005b040 |
| XOR Key | 0xfa44bbe6 |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2008 SP1 build 30729) | 16 |
| ASM objects (35207) | 4 |
| C objects (35207) | 10 |
| C++ objects (35207) | 28 |
| Imports (35207) | 6 |
| Imports (33145) | 9 |
| Total imports | 173 |
| C++ objects (LTCG) (35225) | 1 |
| Linker (35225) | 1 |
No comments yet.