3d9f61b51e629b55b2cbf387fd84204b

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Feb-04 12:04:18
Detected languages English - United States

Plugin Output

Info Matching compiler(s): MASM/TASM - sig2(h)
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 3d9f61b51e629b55b2cbf387fd84204b
SHA1 5f946867c0e7e8ca26f82d74a83e2a6e28fae476
SHA256 be6e052b787e7fe097782ab84d0715bd25d82b06504fd92a4dc07d029cf9e195
SHA3 0fb1953646e87e24f35346d144893b238ea6cb8e7a81bf09f94fe87f6b71800d
SSDeep 1536:qU5lynoPI5Ai0xZ2/ICmsydfmKrENOnMfgR5LZSn9mNoOB2S0sWeacd+h3mHOGV:qwlyoA5AiQZ2/Pyd4NOI9mNoQ2S7+h3
Imports Hash ec625417a5213f0850669f2563d2b9d1

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2025-Feb-04 12:04:18
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0xc800
SizeOfInitializedData 0xac00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000141C (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xe000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x1b000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 0732b68eac496e841cc3b1daffeea601
SHA1 38ae1f2c7a285778645465538ee412b8f4bc8d0b
SHA256 5eae57972f1657fb9444c07554d163e11a6a4897c2db715f4482c2447bcf9c52
SHA3 37d23625a1c947671e80e35c0d79f4217caac52e3cf8d19b302448c4ebf85eed
VirtualSize 0xc61b
VirtualAddress 0x1000
SizeOfRawData 0xc800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.57116

.rdata

MD5 4c23e725b8c67682e6b48b2028dcd3e1
SHA1 7e73848fe20a14f86fc666237e2d1f89d0e5bf3e
SHA256 280463fb719d6b1c53688d529dec17412bb2979bfe1a56ca85ca241893675607
SHA3 fd9bd9bbf27ebdfae2d9c3125b323d5f7d541e5b9d5b16c966116b50ebb15ccb
VirtualSize 0x8228
VirtualAddress 0xe000
SizeOfRawData 0x8400
PointerToRawData 0xcc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.7798

.data

MD5 841263b2da6bd200532f171388733452
SHA1 249e39f33d7fd60dacea42f57a70895246dacd4c
SHA256 fbde2ab27148aee92fb094ba91fe55b284a8ef317109cbc6168529f1add39455
SHA3 9abdeeff46598aebddf2da8a9c6882173599c5c6f2a17cbfafe47abd3dafd6bc
VirtualSize 0x139c
VirtualAddress 0x17000
SizeOfRawData 0xa00
PointerToRawData 0x15000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.06269

.rsrc

MD5 5568acbb007e074a510d4256bd21f4e5
SHA1 7bab57fd95afa4e0ba59d5ba6d69dd9816df04b0
SHA256 e4716f64eeed1965463739c6d4ba2c409467fdc457ad34e66167ecbff138cd94
SHA3 c466e74f40c51bce222097ef128548f4b5d5f533791ada5dd5f4c3f1e4ec4da3
VirtualSize 0x288
VirtualAddress 0x19000
SizeOfRawData 0x400
PointerToRawData 0x15a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.87263

.reloc

MD5 ffd61bf255efc0ee2c94349d855c2983
SHA1 cc596e8a3744e00b130cd5d4e67c1928e22a4e6b
SHA256 f64dd4ad7c89a157b3213f9cd647d51e7cfcac2641d74732c5102952c10bca1c
SHA3 04ef5ea342f951b57be1536e54451c5fc9c886db1d1242604865cfde66e679f0
VirtualSize 0xf2c
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x15e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.38934

Imports

SDL3.dll SDL_SetRenderDrawColor
SDL_Delay
SDL_SetRenderVSync
SDL_RenderPresent
SDL_RenderClear
SDL_Init
SDL_CreateWindowAndRenderer
SDL_EnterAppMainCallbacks
SDL_RunApp
KERNEL32.dll GetModuleHandleExW
DecodePointer
WriteConsoleW
HeapSize
CreateFileW
FlushFileBuffers
GetProcessHeap
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
CloseHandle
GetConsoleMode
SetFilePointerEx
GetFileType
GetConsoleOutputCP
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x227
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06343
MD5 bd5b97c8c5f843a48753f99cf80d27a1
SHA1 79c7a4cc0777cc5475141fa688f7c6929e8d0821
SHA256 97686763b3d9c9018c2274802d03d39cfb4b9d58b8ec8c03b7bb519e6ac79157
SHA3 43bedc35f2a9c52e621dc6638a8f52363f9fb72e918f67c47865f235f7759444

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Feb-04 12:04:18
Version 0.0
SizeofData 752
AddressOfRawData 0x152ac
PointerToRawData 0x13eac

TLS Callbacks

Load Configuration

Size 0xc0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x417040
SEHandlerTable 0x4151dc
SEHandlerCount 10

RICH Header

XOR Key 0x496f0314
Unmarked objects 0
ASM objects (30795) 10
C++ objects (30795) 153
C objects (30795) 20
ASM objects (34321) 20
C objects (34321) 18
C++ objects (34321) 41
Imports (30795) 2
Imports (34436) 3
Total imports 91
C++ objects (34436) 2
Resource objects (34436) 1
Linker (34436) 1

Errors

<-- -->