49d91dd6811c5f969bdfe56df3794eeb7e2f460c6b1c2c17a9cd4ae2e239bf9a

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2022-Apr-17 09:31:41
Detected languages English - United States
Russian - Russia
Debug artifacts D:\codes\hpprecrack\Release\hpprecrack.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • CurrentControlSet\Services
 Contains another PE executable:
  • This program cannot be run in DOS mode.
 Contains domain names:
  • http://msdl.microsoft.com
  • http://msdl.microsoft.com/download/symbols
  • microsoft.com
  • msdl.microsoft.com
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA1
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryExW
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
  • SwitchToThread
 Code injection capabilities:
  • VirtualAlloc
  • OpenProcess
  • VirtualAllocEx
  • WriteProcessMemory
  • CreateRemoteThread
 Code injection capabilities (process hollowing):
  • ResumeThread
  • SetThreadContext
  • WriteProcessMemory
 Code injection capabilities (mapping injection):
  • CreateFileMappingW
  • MapViewOfFile
  • CreateRemoteThread
 Can access the registry:
  • RegEnumValueW
  • RegCloseKey
  • RegCreateKeyW
  • RegSetValueExW
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegOpenKeyW
  • SHDeleteKeyW
 Uses Windows's Native API:
  • ntohl
  • ntohs
 Can create temporary files:
  • GetTempPathW
  • CreateFileW
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
  • VirtualAllocEx
  • VirtualProtectEx
 Leverages the raw socket API to access the Internet:
  • WS2_32.dll
 Functions related to the privilege level:
  • OpenProcessToken
  • AdjustTokenPrivileges
 Manipulates other processes:
  • OpenProcess
  • WriteProcessMemory
  • ReadProcessMemory
Malicious The PE is possibly a dropper. Resource 101 detected as a PE Executable.
Resources amount for 95.5213% of the executable.
Malicious VirusTotal score: 19/69 (Scanned on 2026-11-07 18:23:26) Antiy-AVL: Trojan[Packed]/Win32.VMProtect
CrowdStrike: win/malicious_confidence_60% (D)
Cynet: Malicious (score: 100)
Elastic: malicious (moderate confidence)
Fortinet: W32/PossibleThreat
Gridinsoft: Trojan.Win32.Packed.cl
K7AntiVirus: Trojan ( 0056f4061 )
K7GW: Trojan ( 0056f4061 )
Lionic: Trojan.Win32.Generic.4!c
Malwarebytes: Malware.AI.1499487292
McAfeeD: ti!49D91DD6811C
Paloalto: generic.ml
Rising: Trojan.Zpevdo!8.F912 (RDMK:cmRtazoOJIiEDE7MKuFjj30NjQFr)
SentinelOne: Static AI - Suspicious PE
Skyhigh: Artemis
Trapmine: malicious.high.ml.score
TrellixENS: Artemis!8D9A97E9B552
TrendMicro-HouseCall: Trojan.Win32.Gen.TL0101H626ZV
Varist: W32/ABRisk.JJKS-2523

Hashes

MD5 8d9a97e9b55231886d981d6260eeeda8 🔍
SHA1 fa68a7c8f8349e6bfa62fc6fba6eca7e5f601ad3 🔍
SHA256 49d91dd6811c5f969bdfe56df3794eeb7e2f460c6b1c2c17a9cd4ae2e239bf9a 🔍
SHA3 1ac18372370012861b5ef84bc2a477cb40975bd60deaa9fed9d33539e6335706 🔍
SSDeep 393216:gj9NRsOLlhL6jer0YWJgITBRFVUFOdlkucXp4G3TeeKTeXzn:CzsslhL6EITBLVTcXqiTeeKTG 🔍
Imports Hash a844153d7db7467eadd00e2198ba2e76 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2022-Apr-17 09:31:41
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x9c200
SizeOfInitializedData 0x11ea800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000675A3 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x9e000
ImageBase 0x10000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x1289000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ef820629d1827d10e3694b71100a9808 🔍
SHA1 8ea71d6e0beea4adf437ceda0905760927361c3b 🔍
SHA256 41a967c075b9cb15e4b52b8c8fe6c9f8764e899ceaf88f4caf0ce4e6a4cd8f19 🔍
SHA3 5ff68a1e4b2bb9537aae6d61b180457926ecf845ef6460ed8205d0757b244316 🔍
VirtualSize 0x9c16d
VirtualAddress 0x1000
SizeOfRawData 0x9c200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.62892

.rdata

MD5 291415c27ef4d47e5bd87a451e31e033 🔍
SHA1 440f4d183f6c7aaae5994b56898fe35d693958fb 🔍
SHA256 57e1955571e9a93a77fc6b28c709235a2464fb8fbc160a3cfec36c91d5498c41 🔍
SHA3 2b5f33b57467975b5e40206af1e64ac474bc223845430c01da9cdc7769cd27bf 🔍
VirtualSize 0x2ad48
VirtualAddress 0x9e000
SizeOfRawData 0x2ae00
PointerToRawData 0x9c600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.15047

.data

MD5 b4a8fd75145d9de71a60b0d620d52936 🔍
SHA1 da0790460ba2c91f5673f6eb10ec0bcdf1591bda 🔍
SHA256 1cd815b87534c254ae46087d80453c3d2bc0e592812e3f6e5926c10266420ad5 🔍
SHA3 69e88c3cc162a840431594c73d5b70b2958be6888e3fcc9268acfafce11a6b82 🔍
VirtualSize 0x9d30
VirtualAddress 0xc9000
SizeOfRawData 0x4000
PointerToRawData 0xc7400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.98638

.rsrc

MD5 b630c1ab6c2f5d122b2d3d1f8f31e393 🔍
SHA1 d735f9889c71724befaffaf3da808593d003d9ec 🔍
SHA256 4c8a92f81adcc0d1792471af31b91cc30417f1bd098555bdd31641cf058d97f1 🔍
SHA3 431a0c4675045cd20f52aa5ee8a6736b68014777b1699a2a7b4ccc95d0becc78 🔍
VirtualSize 0x11ace30
VirtualAddress 0xd3000
SizeOfRawData 0x11ad000
PointerToRawData 0xcb400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.99517

.reloc

MD5 6067467b1a6868d1214477fdf45ec3bc 🔍
SHA1 6bd821cc0240546d5e826592cbe5bf47342d0ca7 🔍
SHA256 35fd3712e2e75bf65e8041656752e0043e2a1faacf500be26d7f6660bf5cb6b9 🔍
SHA3 32c7480c795fceb29cd852036f105752233dca76afe396350429dbd5ed0db1bc 🔍
VirtualSize 0x8a10
VirtualAddress 0x1280000
SizeOfRawData 0x8c00
PointerToRawData 0x1278400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.58503

Imports

KERNEL32.dll DeleteCriticalSection
WideCharToMultiByte
TlsFree
FormatMessageA
GetModuleHandleA
LoadLibraryA
GetProcAddress
SizeofResource
FreeLibraryAndExitThread
Sleep
LockResource
CreateThread
LoadResource
FindResourceW
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
QueueUserAPC
HeapReAlloc
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
SetWaitableTimer
TlsSetValue
SetLastError
CreateWaitableTimerW
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
CreateEventW
MultiByteToWideChar
VerSetConditionMask
SleepEx
VerifyVersionInfoW
TlsGetValue
CreateIoCompletionPort
InitializeCriticalSectionEx
RaiseException
DecodePointer
LocalFree
CloseHandle
TlsAlloc
TerminateThread
SetEvent
GetLastError
FormatMessageW
PostQueuedCompletionStatus
WaitForSingleObject
LeaveCriticalSection
WaitForMultipleObjects
CreateToolhelp32Snapshot
EnterCriticalSection
WriteConsoleW
SetStdHandle
GetStringTypeW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
TryEnterCriticalSection
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
GetSystemTimeAsFileTime
GetTickCount
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
OutputDebugStringW
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
InitializeCriticalSection
GetModuleFileNameW
GetFileAttributesW
CreateActCtxW
WriteFile
GetTempPathW
CreateFileW
UnmapViewOfFile
DeleteFileW
GetTempFileNameW
CreateFileMappingW
ReleaseActCtx
MapViewOfFile
ActivateActCtx
GetEnvironmentVariableW
GetSystemDirectoryW
DeactivateActCtx
GetSystemWow64DirectoryW
Module32FirstW
GetCurrentDirectoryW
GetWindowsDirectoryW
DuplicateHandle
GetCurrentThread
DeviceIoControl
CreateNamedPipeW
GetProcessId
OpenProcess
IsWow64Process
GetSystemInfo
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
VirtualProtectEx
ReadProcessMemory
CreateRemoteThread
VirtualQueryEx
LoadLibraryW
FreeLibrary
GetThreadTimes
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
LoadLibraryExW
GetVersionExW
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
USER32.dll wsprintfW
WS2_32.dll select
ntohl
shutdown
listen
WSASetLastError
WSAStringToAddressW
WSASocketW
getpeername
bind
accept
WSASend
getsockopt
htonl
htons
ioctlsocket
setsockopt
WSAGetLastError
inet_addr
ntohs
inet_ntoa
WSACleanup
WSAStartup
WSARecv
closesocket
WSAAddressToStringW
ole32.dll CoUninitialize
CoCreateInstance
CoInitialize
ADVAPI32.dll RegEnumValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyW
RegSetValueExW
RegQueryValueExW
OpenThreadToken
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyW
OLEAUT32.dll SysFreeString
SHLWAPI.dll SHDeleteKeyW

Delayed Imports

??0Assembler@asmjit@@QAE@PAURuntime@1@@Z

Ordinal 1
Address 0x4cb00

??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z

Ordinal 2
Address 0x5c360

??0HostRuntime@asmjit@@QAE@XZ

Ordinal 3
Address 0x54740

??0JitRuntime@asmjit@@QAE@XZ

Ordinal 4
Address 0x54870

??0Runtime@asmjit@@QAE@XZ

Ordinal 5
Address 0x54700

??0StaticRuntime@asmjit@@QAE@PAXI@Z

Ordinal 6
Address 0x547a0

??0VMemMgr@asmjit@@QAE@PAX@Z

Ordinal 7
Address 0x51f60

??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z

Ordinal 8
Address 0x54bc0

??0Zone@asmjit@@QAE@I@Z

Ordinal 9
Address 0x5c650

??1Assembler@asmjit@@UAE@XZ

Ordinal 10
Address 0x4cba0

??1CodeGen@asmjit@@UAE@XZ

Ordinal 11
Address 0x5c3c0

??1HostRuntime@asmjit@@UAE@XZ

Ordinal 12
Address 0x54730

??1JitRuntime@asmjit@@UAE@XZ

Ordinal 13
Address 0x54940

??1Runtime@asmjit@@UAE@XZ

Ordinal 14
Address 0x54730

??1StaticRuntime@asmjit@@UAE@XZ

Ordinal 15
Address 0x54730

??1VMemMgr@asmjit@@QAE@XZ

Ordinal 16
Address 0x52000

??1X86Assembler@asmjit@@UAE@XZ

Ordinal 17
Address 0x54bf0

??1Zone@asmjit@@QAE@XZ

Ordinal 18
Address 0x5c670

??_FVMemMgr@asmjit@@QAEXXZ

Ordinal 19
Address 0x392f0

?Start@@YAXXZ

Ordinal 20
Address 0x51c0

?_alloc@Zone@asmjit@@QAEPAXI@Z

Ordinal 21
Address 0x5c750

?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z

Ordinal 22
Address 0x55230

?_grow@Assembler@asmjit@@QAEII@Z

Ordinal 23
Address 0x4cd80

?_grow@PodVectorBase@asmjit@@IAEIII@Z

Ordinal 24
Address 0x5c4f0

?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z

Ordinal 25
Address 0x4cf40

?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ

Ordinal 26
Address 0x4cfd0

?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B

Ordinal 27
Address 0xb1090

?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z

Ordinal 28
Address 0x4cea0

?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z

Ordinal 29
Address 0x550d0

?_reserve@Assembler@asmjit@@QAEII@Z

Ordinal 30
Address 0x4ce20

?_reserve@PodVectorBase@asmjit@@IAEIII@Z

Ordinal 31
Address 0x5c5e0

?_x86CondToCmovcc@asmjit@@3QBIB

Ordinal 32
Address 0xb1960

?_x86CondToJcc@asmjit@@3QBIB

Ordinal 33
Address 0xb1a00

?_x86CondToSetcc@asmjit@@3QBIB

Ordinal 34
Address 0xb19b0

?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B

Ordinal 35
Address 0xb1a50

?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B

Ordinal 36
Address 0xb34c0

?_x86ReverseCond@asmjit@@3QBIB

Ordinal 37
Address 0xb1910

?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z

Ordinal 38
Address 0x549c0

?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z

Ordinal 39
Address 0x547d0

?align@X86Assembler@asmjit@@UAEIII@Z

Ordinal 40
Address 0x54e30

?alloc@VMemMgr@asmjit@@QAEPAXII@Z

Ordinal 41
Address 0x52070

?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z

Ordinal 42
Address 0x514d0

?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z

Ordinal 43
Address 0x51530

?allocZeroed@Zone@asmjit@@QAEPAXI@Z

Ordinal 44
Address 0x5c800

?bind@Assembler@asmjit@@UAEIABULabel@2@@Z

Ordinal 45
Address 0x4d030

?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z

Ordinal 46
Address 0x64390

?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z

Ordinal 47
Address 0x643c0

?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ

Ordinal 48
Address 0x5ede0

?dup@Zone@asmjit@@QAEPAXPBXI@Z

Ordinal 49
Address 0x5c840

?embed@Assembler@asmjit@@UAEIPBXI@Z

Ordinal 50
Address 0x4d140

?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z

Ordinal 51
Address 0x54c70

?emit@Assembler@asmjit@@QAEII@Z

Ordinal 52
Address 0x4d2a0

?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z

Ordinal 53
Address 0x4d320

?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z

Ordinal 54
Address 0x4d520

?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z

Ordinal 55
Address 0x4d560

?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z

Ordinal 56
Address 0x4d300

?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z

Ordinal 57
Address 0x4d480

?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z

Ordinal 58
Address 0x4d4d0

?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z

Ordinal 59
Address 0x4d2d0

?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z

Ordinal 60
Address 0x4d3e0

?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z

Ordinal 61
Address 0x4d430

?emit@Assembler@asmjit@@QAEIIH@Z

Ordinal 62
Address 0x4d340

?emit@Assembler@asmjit@@QAEII_K@Z

Ordinal 63
Address 0x4d390

?flush@HostRuntime@asmjit@@UAEXPAXI@Z

Ordinal 64
Address 0x54790

?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ

Ordinal 65
Address 0x54770

?getHost@CpuInfo@asmjit@@SAPBU12@XZ

Ordinal 66
Address 0x5ee00

?getPageGranularity@VMemUtil@asmjit@@SAIXZ

Ordinal 67
Address 0x514c0

?getPageSize@VMemUtil@asmjit@@SAIXZ

Ordinal 68
Address 0x514b0

?getStackAlignment@HostRuntime@asmjit@@UAEIXZ

Ordinal 69
Address 0x54780

?make@Assembler@asmjit@@UAEPAXXZ

Ordinal 70
Address 0x4d240

?noOperand@asmjit@@3UOperand@1@B

Ordinal 71
Address 0xb1080

?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z

Ordinal 72
Address 0x54ab0

?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z

Ordinal 73
Address 0x54a80

?release@JitRuntime@asmjit@@UAEIPAX@Z

Ordinal 74
Address 0x54a70

?release@StaticRuntime@asmjit@@UAEIPAX@Z

Ordinal 75
Address 0x6910

?release@VMemMgr@asmjit@@QAEIPAX@Z

Ordinal 76
Address 0x521a0

?release@VMemUtil@asmjit@@SAIPAXI@Z

Ordinal 77
Address 0x515a0

?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z

Ordinal 78
Address 0x515d0

?relocCode@Assembler@asmjit@@QBEIPAX_K@Z

Ordinal 79
Address 0x4d1b0

?reset@Assembler@asmjit@@QAEX_N@Z

Ordinal 80
Address 0x4ccb0

?reset@PodVectorBase@asmjit@@QAEX_N@Z

Ordinal 81
Address 0x5c4b0

?reset@VMemMgr@asmjit@@QAEXXZ

Ordinal 82
Address 0x52060

?reset@Zone@asmjit@@QAEX_N@Z

Ordinal 83
Address 0x5c6d0

?sdup@Zone@asmjit@@QAEPADPBD@Z

Ordinal 84
Address 0x5c890

?setArch@X86Assembler@asmjit@@QAEII@Z

Ordinal 85
Address 0x54c00

?setError@CodeGen@asmjit@@QAEIIPBD@Z

Ordinal 86
Address 0x5c410

?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z

Ordinal 87
Address 0x5c470

?sformat@Zone@asmjit@@QAAPADPBDZZ

Ordinal 88
Address 0x5c900

?shrink@VMemMgr@asmjit@@QAEIPAXI@Z

Ordinal 89
Address 0x52360

?x86RegData@asmjit@@3UX86RegData@1@B

Ordinal 90
Address 0xaca08

101

Type TEXT
Language Russian - Russia
Codepage UNKNOWN
Size 0x11acc00
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99519
Detected Filetype PE Executable
MD5 207043268b10e01caa9fe94dc0e3526a 🔍
SHA1 ca12ab61b785a300da52830451d6c6604e155668 🔍
SHA256 45badcb0e32204c755756519eb2dd4a092c71e3b725fcb95030940325daa31f1 🔍
SHA3 e4af236a1cd1cb1c734740efec10b4417c5e983237432e53d88cd45195e7057c 🔍

2

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2022-Apr-17 09:31:41
Version 0.0
SizeofData 67
AddressOfRawData 0xc0278
PointerToRawData 0xbe878
Referenced File D:\codes\hpprecrack\Release\hpprecrack.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2022-Apr-17 09:31:41
Version 0.0
SizeofData 20
AddressOfRawData 0xc02bc
PointerToRawData 0xbe8bc

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2022-Apr-17 09:31:41
Version 0.0
SizeofData 916
AddressOfRawData 0xc02d0
PointerToRawData 0xbe8d0

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2022-Apr-17 09:31:41
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x100c0680
EndAddressOfRawData 0x100c0720
AddressOfIndex 0x100cd610
AddressOfCallbacks 0x1009e42c
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_16BYTES
Callbacks (EMPTY)

Load Configuration

Size 0xbc
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x100c90f4
SEHandlerTable 0x100bfd24
SEHandlerCount 341

RICH Header

XOR Key 0x8253ac55
Unmarked objects 0
ASM objects (VS2017 v14.15 compiler 26715) 18
C++ objects (VS2017 v14.15 compiler 26715) 162
C objects (VS 2015/2017 runtime 26706) 1
C objects (VS 2015/2017/2019 runtime 29118) 15
ASM objects (VS 2015/2017/2019 runtime 29118) 24
C++ objects (VS 2015/2017/2019 runtime 29118) 141
C objects (VS2017 v14.15 compiler 26715) 24
Imports (VS2017 v14.15 compiler 26715) 15
Total imports 245
C++ objects (LTCG) (VS2019 Update 8 (16.8.3) compiler 29335) 56
Exports (VS2019 Update 8 (16.8.3) compiler 29335) 1
Resource objects (VS2019 Update 8 (16.8.3) compiler 29335) 1
151 1
Linker (VS2019 Update 8 (16.8.3) compiler 29335) 1

Errors

Leave a comment

No comments yet.