| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date |
2025-Jan-16 21:20:17
|
| TLS Callbacks |
2 callback(s) detected.
|
| Debug artifacts |
Embedded COFF debugging symbols
|
| Info |
Interesting strings found in the binary: |
Contains domain names:
- gcc.gnu.org
- github.com
- https://gcc.gnu.org
- https://gcc.gnu.org/bugs/
- https://github.com
|
| Suspicious |
The PE is possibly packed. |
Unusual section name found: .xdata
Unusual section name found: /4
Unusual section name found: /19
Unusual section name found: /31
Unusual section name found: /45
Unusual section name found: /57
Unusual section name found: /70
Unusual section name found: /81
Unusual section name found: /97
Unusual section name found: /113
|
| Info |
The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
- GetProcAddress
- LoadLibraryW
|
| Suspicious |
The file contains overlay data. |
395406 bytes of data starting at offset 0x2cbc00.
|
| Suspicious |
VirusTotal score: 1/72 (Scanned on 2025-01-17 21:37:57) |
APEX:
Malicious
|
| MD5 |
3f1e86f67159d78a32d59031690d2f3b
|
| SHA1 |
3f5d4ce14d6ef71bc9c219959b4b6d614b904d23
|
| SHA256 |
99afac76a2fc65300fe558cfa63234c11914af637bf0aad5d1b724390f2196ed
|
| SHA3 |
b35b471b89774ed03f9e94de50ffb7387af5b5f31182f981aebf5cf3f4bde3f7
|
| SSDeep |
49152:4Y8qmIjAI022gG7cYODN9XSiLpKNx3oKpdIWJpJJErnGCN5EwrHHgDyVJ2u5Bjgg:lacPOx5aPHrGz0ll
|
| Imports Hash |
744a6d6d0c80cf43251f3272e8d980b9
|
| e_magic |
MZ
|
| e_cblp |
0x90
|
| e_cp |
0x3
|
| e_crlc |
0
|
| e_cparhdr |
0x4
|
| e_minalloc |
0
|
| e_maxalloc |
0xffff
|
| e_ss |
0
|
| e_sp |
0xb8
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x80
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections |
19
|
| TimeDateStamp |
2025-Jan-16 21:20:17
|
| PointerToSymbolTable |
0x2cbc00
|
| NumberOfSymbols |
10271
|
| SizeOfOptionalHeader |
0xf0
|
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
|
| Magic |
PE32+
|
| LinkerVersion |
2.0
|
| SizeOfCode |
0x4d800
|
| SizeOfInitializedData |
0x62200
|
| SizeOfUninitializedData |
0xe00
|
| AddressOfEntryPoint |
0x00000000000013F0 (Section: .text)
|
| BaseOfCode |
0x1000
|
| ImageBase |
0x140000000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
4.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
5.2
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x2d7000
|
| SizeOfHeaders |
0x600
|
| Checksum |
0x32ea1b
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve |
0x200000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
2a4c2f42105acd644e1b3cd792c9773f
|
| SHA1 |
fdd1bf91d184603286102e3c55cc09e340059ab6
|
| SHA256 |
6aa6bc0146119b2acab92d626cd80d9c03e7c7f03b88bf3c64f0e03175bd81b4
|
| SHA3 |
e07d232f815bc8b18439cad36a8111abb86b7fca590f05fa9d6db19e73072955
|
| VirtualSize |
0x4d718
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x4d800
|
| PointerToRawData |
0x600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
6.48243
|
| MD5 |
28b5ca004803be28d5e9f327e7da7fcf
|
| SHA1 |
ed84bcbb11b80f8d60c1748da8c002eca02baf2f
|
| SHA256 |
e1b751c32c26dc22c8ffffd02eed947d611a0ee4c9f6493305ed88af29cd92ea
|
| SHA3 |
364957918ad769dd8ded4b39138f82527cc02e2d669e136181968d7e0b654927
|
| VirtualSize |
0x360
|
| VirtualAddress |
0x4f000
|
| SizeOfRawData |
0x400
|
| PointerToRawData |
0x4de00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
1.2312
|
| MD5 |
72ace9db038dddbe7808040b612c9d38
|
| SHA1 |
7ff8932d944922590da004f6996c43d67b25b14a
|
| SHA256 |
a61b7ba53c06b2758e82879b6363c9d700053835de258d8689cff192386cdc74
|
| SHA3 |
84799e0e1150dd69b83b14087361a953c9262b8fb871c2f79bd068411b2bf694
|
| VirtualSize |
0xb2b0
|
| VirtualAddress |
0x50000
|
| SizeOfRawData |
0xb400
|
| PointerToRawData |
0x4e200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
4.4284
|
| MD5 |
208b738a7f9ab8069a3503d1b67c374d
|
| SHA1 |
caf00359f3eb268c1016320920bc9731774d27a6
|
| SHA256 |
f172e7d3c5d23b8f037ffb7acd9eea62c10485365ee97cc3024fdb574d1c2f35
|
| SHA3 |
4eb97f7b9213ea4c08e6066856f689d2517923af2feb23cdfc5d7e3336a576da
|
| VirtualSize |
0x34c8
|
| VirtualAddress |
0x5c000
|
| SizeOfRawData |
0x3600
|
| PointerToRawData |
0x59600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.49958
|
| MD5 |
61b8b0206f158ff5aa9dfa9521f08167
|
| SHA1 |
8fa30ab3839480ff08e13fb249c92114e77423c3
|
| SHA256 |
ab5f4ac13e9832d3e2863f058cb838f26fb78297ab7a1126f2bbcd010eebc7d0
|
| SHA3 |
18a2021596df2134e581037378772844b82b08a786a202700326ff9c156237c9
|
| VirtualSize |
0x3f60
|
| VirtualAddress |
0x60000
|
| SizeOfRawData |
0x4000
|
| PointerToRawData |
0x5cc00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
4.83716
|
| MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
| SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
| SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
| SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
| VirtualSize |
0xdd0
|
| VirtualAddress |
0x64000
|
| SizeOfRawData |
0
|
| PointerToRawData |
0
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 |
5310c42a9fa0900363addb51fbb9807c
|
| SHA1 |
6eb983d6f0ce43e39857d52b92f6cfac3aafb75e
|
| SHA256 |
1b1232c0870c1a004dac2eeaf8ed592bb5b916289254320fb0ee0b61b58f1189
|
| SHA3 |
20e302db172f8366af7495da9b97c5099d33bab57d24dcbfebf1596389ca4056
|
| VirtualSize |
0x1044
|
| VirtualAddress |
0x65000
|
| SizeOfRawData |
0x1200
|
| PointerToRawData |
0x60c00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
4.25007
|
| MD5 |
d19ae7c64c477aa49302314d20507700
|
| SHA1 |
d0cddf42c1285540b7a3ea32c626029c48b1aefa
|
| SHA256 |
3411dbb637f4fd4a773a27e22a43d2918c5175ab2aec3e607d1a192c97375f14
|
| SHA3 |
cae750b4a97daee8b40abcc8e056e68788c88f8f4cb6d30d7b66ad2208646644
|
| VirtualSize |
0x60
|
| VirtualAddress |
0x67000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x61e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0.312494
|
| MD5 |
bf619eac0cdf3f68d496ea9344137e8b
|
| SHA1 |
5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
|
| SHA256 |
076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
|
| SHA3 |
622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
|
| VirtualSize |
0x10
|
| VirtualAddress |
0x68000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x62000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0
|
| MD5 |
2746f45973b6fad2f5f72175cdfc4558
|
| SHA1 |
8ea6e29156e3d4051159762be5eda9bb14e1db8f
|
| SHA256 |
56f7d7d1cbbd2c89cd64c99e19efa443f3eeb0e0a1c8647f92a8f2f6a9a14d80
|
| SHA3 |
8932f473c36fb981778d94924b40a8da8790caf8e084575ca6ca0337d5ba6ae0
|
| VirtualSize |
0x538
|
| VirtualAddress |
0x69000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0x62200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.08556
|
| MD5 |
95bff976f479d27881b1984562cf5acc
|
| SHA1 |
732e7484f8c4a9e6ebbc85238e3bc7f646ee885a
|
| SHA256 |
01e4211eaffbc23b23acd9674dc432794d0ad837b60f2243ea59d9db05881c6d
|
| SHA3 |
2a36c7e7c26ba121cfe95cdd0c501aa2f6e6843a82ef6f0409693e1f6ac34f18
|
| VirtualSize |
0xeb0
|
| VirtualAddress |
0x6a000
|
| SizeOfRawData |
0x1000
|
| PointerToRawData |
0x62800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
2.68763
|
| MD5 |
a5a02145569d7b189825c7a68cce22fc
|
| SHA1 |
ce05d820fd951b5debbd562b4facad646b668c51
|
| SHA256 |
d5ef437aa999d13aac3a70338e39120c26d453f35e808a3a95cefd47e740fc6d
|
| SHA3 |
44c756926f9a82cea1bcb7c8396426480abae39e5cf4cb0725650ea3992e300c
|
| VirtualSize |
0x1a8584
|
| VirtualAddress |
0x6b000
|
| SizeOfRawData |
0x1a8600
|
| PointerToRawData |
0x63800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
6.03034
|
| MD5 |
9345449f35f1356ebc163ed9793f7980
|
| SHA1 |
dffff9e996b5135b8202b73df90365e6c7647b8d
|
| SHA256 |
05e6999b405f84f4e7264df950a8c24983d09cce579ce6074353ee674c00e4f0
|
| SHA3 |
9eea396c8a2788afae77738ad2f1533cdf73d2eb227e3e3e679853bb4b75d21b
|
| VirtualSize |
0xc79d
|
| VirtualAddress |
0x214000
|
| SizeOfRawData |
0xc800
|
| PointerToRawData |
0x20be00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.02707
|
| MD5 |
6f08b9540ba59a6bdfcb2b41478c1fc9
|
| SHA1 |
9385bce746709bbab38a0005daf347ed367820f9
|
| SHA256 |
12410c1fc726f09b9d41b31248ee7d9f0b1e3f7c2741a131c621bbc5f08de5d9
|
| SHA3 |
c44b15df1a11f58c5bda4f313c621989a15c973ede5a1a99dd2e27c24090db40
|
| VirtualSize |
0x39610
|
| VirtualAddress |
0x221000
|
| SizeOfRawData |
0x39800
|
| PointerToRawData |
0x218600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.06588
|
| MD5 |
bbf81e2600f6678223c05810d7557144
|
| SHA1 |
7819f2363e621252581e5b4bffc3611fc82e9aa7
|
| SHA256 |
48404d1794eb1ac5153f46cc25f46ae0ac33583125e9306a04d0eaf780127504
|
| SHA3 |
39bafe36b7cc870548f63b66c52e20b7c0d02e52a1ddef30d80aad373daea2be
|
| VirtualSize |
0x6380
|
| VirtualAddress |
0x25b000
|
| SizeOfRawData |
0x6400
|
| PointerToRawData |
0x251e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.9754
|
| MD5 |
8493e83608f22e70b583d008728683ec
|
| SHA1 |
e6491aeec98745c2c8d6c0778c1099ba77c418d2
|
| SHA256 |
8871fccd3c03aa96c5dc21e5c8db50b9ed100f796ae9fa6a717fd472c01e5a6a
|
| SHA3 |
aa1157cd75b04471baefb4a9ae45ca66d7133d4653fa66977ea1c7424f73e223
|
| VirtualSize |
0x547a
|
| VirtualAddress |
0x262000
|
| SizeOfRawData |
0x5600
|
| PointerToRawData |
0x258200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.56202
|
| MD5 |
038f0a01a2168f80d2c2ead2a746ebe8
|
| SHA1 |
353f1ca96cd416edc817943792f6e4656f5a719e
|
| SHA256 |
dcbd96dbee08fc437d59db68c4d1b8ec008be889093b05f95b6b8d2f75b68f1c
|
| SHA3 |
025f268e3a3a5172f5afdd759b2b1e25a756712a82afc5a322a53b958b1b2f07
|
| VirtualSize |
0x4c57
|
| VirtualAddress |
0x268000
|
| SizeOfRawData |
0x4e00
|
| PointerToRawData |
0x25d800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.95274
|
| MD5 |
f40eddc53fe726d6b656ec0119d0b610
|
| SHA1 |
63abf392d03f3f72fdfd09f01469d057897b420e
|
| SHA256 |
a04446a989b6e374373b4694b66674cd8a93d12e6f5aa958abaa176e26feae1e
|
| SHA3 |
ba3947f36d92ab6b3405e5d74623c207ac8cb9a6df9b09b1b9fb3cd17cabc498
|
| VirtualSize |
0x53c2d
|
| VirtualAddress |
0x26d000
|
| SizeOfRawData |
0x53e00
|
| PointerToRawData |
0x262600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.23484
|
| MD5 |
1d9703dfff066be932ec125b353a198c
|
| SHA1 |
8cf889e50c400efeea917bee60aabd50ffbcb3c7
|
| SHA256 |
575e775d20bdbdcddd28d03057f7824cb0f3e2a7b5a8990cf007b1f739767cb5
|
| SHA3 |
8728cbef159e9c4e66f0717dc6dc4bab1f4f852581a02c9d5a82e9a624e6e09b
|
| VirtualSize |
0x15701
|
| VirtualAddress |
0x2c1000
|
| SizeOfRawData |
0x15800
|
| PointerToRawData |
0x2b6400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.98987
|
| GDI32.dll |
SetDIBitsToDevice
|
| KERNEL32.dll |
CloseHandle
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
GetEnvironmentVariableW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetThreadId
InitializeConditionVariable
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
LocalFree
MultiByteToWideChar
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
|
| msvcrt.dll |
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_aligned_free
_aligned_malloc
_amsg_exit
_assert
_cexit
_close
_commode
_errno
_exit
_fmode
_initterm
_isatty
_localtime64
_lock
_onexit
_open
_read
_time64
_unlock
abort
calloc
exit
fclose
fopen
fprintf
fputc
fputs
free
fwrite
getenv
isspace
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
signal
strchr
strcmp
strerror
strftime
strlen
strncmp
strtoul
vfprintf
wcslen
|
| USER32.dll |
AdjustWindowRectEx
BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
GetMessageA
GetWindowLongPtrA
InvalidateRect
PeekMessageA
PostQuitMessage
RegisterClassExA
SetWindowLongPtrA
ShowWindow
TranslateMessage
UpdateWindow
|
| StartAddressOfRawData |
0x140068000
|
| EndAddressOfRawData |
0x140068008
|
| AddressOfIndex |
0x14006423c
|
| AddressOfCallbacks |
0x140067038
|
| SizeOfZeroFill |
0
|
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks |
0x0000000140013550
0x0000000140013520
|
[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /31!
[*] Warning: Tried to read outside the COFF string table to get the name of section /45!
[*] Warning: Tried to read outside the COFF string table to get the name of section /57!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /81!
[*] Warning: Tried to read outside the COFF string table to get the name of section /97!
[*] Warning: Tried to read outside the COFF string table to get the name of section /113!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF String Table's reported size is bigger than the remaining bytes!
[*] Warning: Section .bss has a size of 0!