fa09d24d7481dbdfc1cff6aaa92d2aec908e037a22a02346f6feeee5d6ba688e

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2021-Sep-25 21:56:47
Detected languages English - United States
Comments Visit http://www.winamp.com/ for updates.
CompanyName Winamp SA
FileDescription Winamp Installer
FileVersion 5.92.0.10042
LegalCopyright Copyright © 1997-2023 Winamp SA
LegalTrademarks Nullsoft and Winamp are trademarks of Winamp SA
ProductName Winamp Installer
ProductVersion 5.92.0 Build 10042
SpecialBuild full

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • http://nsis.sf.net
  • http://nsis.sf.net/NSIS_Error
  • http://www.winamp.com
  • http://www.winamp.com/
  • nsis.sf.net
  • winamp.com
  • www.winamp.com
Suspicious The PE is an NSIS installer Unusual section name found: .ndata
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
 Can access the registry:
  • RegCreateKeyExW
  • RegEnumKeyW
  • RegQueryValueExW
  • RegSetValueExW
  • RegCloseKey
  • RegDeleteValueW
  • RegDeleteKeyW
  • RegOpenKeyExW
  • RegEnumValueW
 Possibly launches other programs:
  • CreateProcessW
 Can create temporary files:
  • GetTempPathW
  • CreateFileW
 Functions related to the privilege level:
  • AdjustTokenPrivileges
  • OpenProcessToken
 Changes object ACLs:
  • SetFileSecurityW
 Can shut the system down or lock the screen:
  • ExitWindowsEx
Info The PE is digitally signed. Signer: Winamp SA
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Suspicious VirusTotal score: 2/72 (Scanned on 2024-06-26 17:12:42) MaxSecure: Win.MxResIcn.Heur.Gen
Zillya: Trojan.Generic.Win32.1833292

Hashes

MD5 39b72e2cbf2fb8da961538de3e892eba
SHA1 237ce8611cb8e2ede8a5d6b982597f7e93b2cd81
SHA256 fa09d24d7481dbdfc1cff6aaa92d2aec908e037a22a02346f6feeee5d6ba688e
SHA3 24fc0ba66a7a5cd79a283ca9286b25175e5b6299d6efb9dbba1486a3d55bd431
SSDeep 393216:udNH1gz1+ZUUG9NWpHYV6ohIBfqHts7UU2wP3:udZk1vUG964V6ysUs7U/u3
Imports Hash 61259b55b8912888e90f516ca08dc514

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xd8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2021-Sep-25 21:56:47
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 6.0
SizeOfCode 0x6800
SizeOfInitializedData 0x22a00
SizeOfUninitializedData 0x800
AddressOfEntryPoint 0x00003640 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x8000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 6.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x95000
SizeOfHeaders 0x400
Checksum 0xc7e04a
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 6f5abe9eeda26ee84b3c1ed1a6c82001
SHA1 55517dc6ad93689679677d152abfdd1ce20f1135
SHA256 6683c31450d22725f8046313577f87ed284052143421d41ca971ebf03a732b4a
SHA3 0166ffe9450ef9b8cd85513de36173358cc6d06134a32f515f12aa858073020f
VirtualSize 0x6676
VirtualAddress 0x1000
SizeOfRawData 0x6800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.41746

.rdata

MD5 8c5edfd8ff9cc0135e197611be38ca18
SHA1 dc4f14d019cad6646b38852dfb7370532acafebc
SHA256 95df72950424a97746c83c619f9aa736879b408a87751927b5d41994e8183a9c
SHA3 b74f8f6ea5fb7e429da44419f9d163743fd38ce97f3b9819fb2397744d42dad2
VirtualSize 0x139a
VirtualAddress 0x8000
SizeOfRawData 0x1400
PointerToRawData 0x6c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.14107

.data

MD5 4b2421975c21b032f7ea000f5e7f9fbf
SHA1 f45486287d474fdcafc99c24e37c4eb61bf613b3
SHA256 f05daf3c91cc357d04794a740f21eaaeb870f250877e3a6dc498c5c3046cb414
SHA3 03ddd58bddd9af320b79e443521aae041b4098e328b842349f29c2bda6bdb122
VirtualSize 0x20378
VirtualAddress 0xa000
SizeOfRawData 0x600
PointerToRawData 0x8000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.11058

.ndata

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x3a000
VirtualAddress 0x2b000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc

MD5 c28e1a0111bf9b9eb69e0e784376ef9e
SHA1 ebeaf9e4607df62f46b52909ba2bba511104d6fa
SHA256 9529a787022ece8607ab535e6df4257ae9fa99fcdfbe864238d16519282b27b4
SHA3 48dc43dbb0743750b08912e9cf5abfe78c9fadb3d2944e65439df9258696e4c7
VirtualSize 0x2f610
VirtualAddress 0x65000
SizeOfRawData 0x2f800
PointerToRawData 0x8600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.75126

Imports

ADVAPI32.dll RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
SHELL32.dll SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32.dll OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
COMCTL32.dll #17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
USER32.dll GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
GDI32.dll SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
KERNEL32.dll GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Delayed Imports

110

Type RT_BITMAP
Language English - United States
Codepage UNKNOWN
Size 0x666
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82633
MD5 b6bf70baab40fe438feff063bfb9ff6f
SHA1 7d4659d43e08d368ddacd31945872461c0b06253
SHA256 0e90a9e4b8f3a5bf990e8aadfd8096ad7aeaf1a4e032ac7b6395ce191d61c142
SHA3 cab98fabaf20118d9a8a4d2bcff4383a7291a0e04ff11a8690e71eed619c75e7
Preview

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.96367
MD5 3f2759c518ef4ae68b5e5a80a4688af6
SHA1 d833529915442b437016cbd54ab22eeb104ceec3
SHA256 9841fe80a646996197a9de50dffe2064124061df7779f213fbd267bef0f48119
SHA3 7e0fbfc3e95c77a121192dcf3ff9b7f9bb7ba54c7ff7189d07cf3d14c024d99a

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x85fb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96516
Detected Filetype PNG graphic file
MD5 a6d6f11e6061e7e3c832c4fe1634cacb
SHA1 c06cfcf010239bdb9749bca9ff4fe7ea91f15979
SHA256 a4d2698f24262168348d81b23909d7039d07732ba861438bebfcf7bec7f0ba58
SHA3 9e553340d8a7a7d4a7d13c0ebaa7e0c8687fd088cc9a05ebc5ebbb5ebcab4a88

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4c28
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.54289
MD5 b7dbcdfc4f13141cec003dfc02a5aec6
SHA1 cf3273d19c8709697a46a59b569be784f01b6050
SHA256 2b7853b79df15eb4de803f496009e805a59eb001fb3b27bebd54e2d2a282957a
SHA3 eb5db29197164b3f1fcdb59a9d2f29f6883e7122836b1e8b933eb43625534231

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.51773
MD5 2a79208c5654dda10abc4c1ef52b72af
SHA1 e19b48c2a48fbeedd86f6653f793dd3d00cbc0fa
SHA256 c7eb1a57ecb15a5b3a487bc47c1754eb131b9888191e1114d0b4030f5a5ec96f
SHA3 dd622db6e3625eafb76c9d09211d2de7366f8f438828bbed617426e3ad8cbf84

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2868
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94744
MD5 a33e035bb0076a1e47ec9162f84a6498
SHA1 f2763916d6f60b8d940fc5b7496a935a6ce0f38d
SHA256 71177f87df33f7832aa12cd824fb68f34067bc43d0037d803c4259a33c4e6ddf
SHA3 1101a8d0a30091ac7b887fe910dcd9ed8ad33ba00023a5b4d2c3551d2e385ba7

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.68917
MD5 46c9d34dd93809afb82c8aabf3ce266b
SHA1 3f6a757a8df6277f59cdec0485f4f1c18a48b090
SHA256 1b81a1d394e85af59de69200f685ff8efb218f873d9fdd702756005371dc6b6e
SHA3 fb0acadb00a7f5abcaedd36cb673e00e5999e09f2ffcef18cf8593ba4b27cfda

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1628
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.80033
MD5 6ce808fec394940b89a4ea7ced466854
SHA1 61711b20b19bc9af9cb149475c6934ad6b68a2dc
SHA256 5bfa0f88fe8b977791d69959f2476381ca4892d6c47d6c66950fa407c8132cb5
SHA3 ee5563722d73ea8b1d3db86ff8c9b9307306854530ced6cc1b2b42e5513de6d2

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.20982
MD5 c2c59544a6c38328ad272474ce3b9a9a
SHA1 6583d6e63b7a70e0d6c3e9fded7ff9e27887b5b5
SHA256 7e63e86b22001010d4c71e7f97d41a1ad5765276dcbcff6225e24c6ca62c37e0
SHA3 d22f99d20e80bc9984ece77419fde9cff8e43aa4552d5088f334a1e04781add9

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.72532
MD5 728941ca7ddb719060d4b124d623272c
SHA1 af70f493210a7c0bdd33769a6741c269d1d53971
SHA256 a761d0eaefcedf150e2326727982a7402dafa70ff62928d398e4eb9297f2b8a5
SHA3 0a01f240f28b00ef184c4f669a95980ef88d199cf6ca3a283c24edcc2dfdd7f6

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xa68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53998
MD5 31a711366c75adcfa7d8988631bb43a1
SHA1 7a0797cba2c97fe183457698e4c6613a0987c8bf
SHA256 df2bb8ac4b8810dbdfab6cf5ad6effafb546ac87f4645b7846b13f992af0646b
SHA3 7618f55ff7be3f636c336059b93ec9c370f6bb3f91e5fa6db10a9681e106b9ee

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.7748
MD5 8f00eff3767e695dffd0b439fc824108
SHA1 810fb920f91e78f4553ea8b9e24e8d8951c8ea2e
SHA256 0187d18173d56457b4733453abd495bc807580a67850dce10e2506b727be2756
SHA3 445a10836bc5b331507fd9349080d9b1fe537d2e77c769e9d36f66cba0085bf0

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.182
MD5 34a1ac94c4b413ef60f1ec0764bc11e2
SHA1 f33235bb92731c7984eb15784c2af74a3134501e
SHA256 96bb1dea19c7680dcbfc6b902e3e6dd5299fcff9ec756bb5078076f7ae526fe0
SHA3 289fdfb753509c2b01fa3223c1ef140c3e72586a7fac4b27c62b06d27cffb3d3

13

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x6c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.51815
MD5 8c256390d264073ce3e4e456930cd455
SHA1 f2478975cce30e7905f3a97d403d0339c839e448
SHA256 df7413df6f27feaf401d898e607b69a2791194ab2125ee9842e9b36cf24f02e0
SHA3 9f6240afc8d0986e295228bb33a62a5ce6b17eb616019b1fd4a59082655aa362

14

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40464
MD5 3390c45f0ee648c0ab0ba9dfc2253ec8
SHA1 0af845edb14f4864298cd4e68787361a46ddde52
SHA256 c9cbe8dee0c8555d399cdb25319c3a6679e543f5636a2e196ff841b39186e2ca
SHA3 913f0a69b55787f87250a7b3039023593acbdbe8bd16465dec6c66e9db62ef97

15

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.73274
MD5 b646a32f146be8280d6a819185acc275
SHA1 ba029bd6f94eaf3c98980f5f2bb106c41ea1942f
SHA256 413d61d2a24d3f1b5c8490d0dc5f8be620c4517d5c6d0fb6e75fa30fe6ee7c90
SHA3 2a0bec058ed72952b94aaa3f4f8a5c1dcd4c5802b2f62b31b7634c63b0f146b8

16

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.38651
MD5 2f264cb1a7a467557d0423e5110fe7b9
SHA1 35aaba4fa9acec411b30d7b9ebf052ec8db92d05
SHA256 727ee1fde36bf450fe2cf2548fa00a7cbbb2bfb61149e340c1f8b4f3f4467846
SHA3 073bdf89ac4cb45e34ddfabc0bc2385dae3bc49ad0629f1c41e791110102f3d2

17

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.76122
MD5 b5a37cccf0184d0241d185fefd50f667
SHA1 d339ff9582cffc21a34c7fc467b7a5808752413c
SHA256 43fe37bb3761f53c319cb26277ff5384ce87287a0f33edce539b094368f562ec
SHA3 a9e0946a404499a7bf0d1255865890117538b2cf90d3a8759bfad0a3c70ce973

18

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.71819
MD5 623e25fd708b45e9eb4fe960553c07ba
SHA1 e9877e9dd90b9f526abd8491715449c87beccdb4
SHA256 8106393af79f040389726b2034d6b4e09b53b0a51ab45ef0f3fd57de83fead81
SHA3 45de95c2c5ef7b38aa8b51532fbbbc38fd9070b2b6095e8dc191f0f9445c8929

19

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.15856
MD5 431e03930ecb56c3215eddcfcfb28137
SHA1 e232c4ad4836242e9f7ab4de699d21d6d2bf5ca5
SHA256 12b6951a8d656d2be959e8483e0caacae9b6dc49f79d56aa4bf0109d899b238b
SHA3 8478b0b480fe69ea63be647cbe42275bbbf010b6ca2f04c4b6c65f69f4e2b048

102

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xb4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.71813
MD5 a69caf66f3f899403f8b25b02dc61908
SHA1 3e5db9186cf0f75be24676462d88170e5950d9c8
SHA256 7854e8d67a11148566ad37c5d23e1534e0990fe31a160e0e7da3ca751830bb50
SHA3 1eea945e3712b317143e07560f54b0b9a13b1fd6c2b57cab9176181a9aaf4f79

103

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.56193
MD5 db6dd0434da4d7cac564518725167e09
SHA1 a65a1367d7cd96450f089a8f8108239bbcea9f5b
SHA256 c50631fc1f8425a95fd1edcc8e730d339e193a38f18d42372c32847a5ad2c016
SHA3 4e3be5455c51e1cb04836e318cb69ecdffd2deadd0f338d4bc985d8f5ca653ff

104

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x158
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.67285
MD5 e3db3f64c2592f8f5ff3aa9b6a4e99a8
SHA1 9691472bf6bcd563c29dd85f15caada030380d52
SHA256 5fa7add88fb2e0d095207c87603cfe3339f6211ce67900a0cf5af4253ba0bcb3
SHA3 2111ca69a593e96fbe3e61701d36ae172bb4744984fdec6db51b0cb7bf0eb67b

105

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.67385
MD5 d1a92272fbd597e1aa19021483110d5a
SHA1 9f75072682b37c6c52361d8c988ebd06dd003f63
SHA256 15663576584c947d634dab9848defcc7d8f05eb0b7e7c6d52d81eca695fc7a6e
SHA3 704756797695ae34f6fae500852bca70e5066a1d1993348fe40ccf626235d0d6

106

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xf8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.91148
MD5 fa83652660409e90e0db9731ad2adb17
SHA1 0a8f0af67723c87fe26ccf676b8e19ec6357b4dc
SHA256 4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4
SHA3 5b3e1cb25be7a2dbae4f08f0d4794ed23dbd6ea37a3f9702be12dba588f42a7b

111

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0xee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92767
MD5 1db3e4c32b9560257ddf3506fef9dd3f
SHA1 6666e0c8336456cfacec71d84415c6516e9e2673
SHA256 587a03198c39f990e77691056bb5705e21374281862ce06de94c68172f50f763
SHA3 30ca0affc3f1d2ef8b37f2103db7581caaf88548823fb3ae1d308fae9738dab4

103 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.2722
Detected Filetype Icon file
MD5 c250237481d90c43be4b896e78996ff4
SHA1 6107f2168c7e57506c914c92457fe756a3993e26
SHA256 2432489e87448602542b6ef6bdadf298f306adba4acf056927665221ba24794f
SHA3 5da1dadec15de671e2a0c73a960fcf873f0095a587b791186cb95f0e5b0810b8

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x3ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45249
MD5 f9b31c35fd6808dabf675d82ce42196b
SHA1 e0db2a0ce7866891ed7480d9510f209f06bb278c
SHA256 b8346fc3ffed1ced62887a39fc1e6a9c90bc51d7c755658ec45b608243b42411
SHA3 2dc9bbf3a9965e3effb6beb6cfe83a00e7354e7eb4a4df17c5f0251591546a54

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x42e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.28834
MD5 5ee6190e98bb9546fc0551de48610550
SHA1 dd7f27311a739a7ccf8222c022f631361240c3b9
SHA256 a01b1e9b03ff72f72efff34927cef73a3e6f6b7e2beed90120cbde3ad41de1f0
SHA3 f3ad692e880902439757fb96c355d7094e7b7773681ed70ec19e6d569f8e611b

Version Info

Signature 0xfeef04bd
StructVersion 0
FileVersion 5.92.0.10042
ProductVersion 5.92.0.10042
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
Comments Visit http://www.winamp.com/ for updates.
CompanyName Winamp SA
FileDescription Winamp Installer
FileVersion (#2) 5.92.0.10042
LegalCopyright Copyright © 1997-2023 Winamp SA
LegalTrademarks Nullsoft and Winamp are trademarks of Winamp SA
ProductName Winamp Installer
ProductVersion (#2) 5.92.0 Build 10042
SpecialBuild full
Resource LangID English - United States

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0xd26650e9
Unmarked objects 0
C objects (VS2003 (.NET) build 4035) 2
Total imports 165
Imports (VS2003 (.NET) build 4035) 15
48 (9044) 10
Resource objects (VS98 SP6 cvtres build 1736) 1

Errors

[*] Warning: Section .ndata has a size of 0!
Leave a comment

No comments yet.