Architecture |
IMAGE_FILE_MACHINE_AMD64
|
---|---|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
Compilation Date | 2023-Mar-30 16:39:56 |
Detected languages |
English - United Kingdom
English - United States |
Debug artifacts |
C:\projects\snes9x\win32\_Intermediate\snes9x\Release Unicode\x64\snes9x.pdb
|
CompanyName | http://www.snes9x.com |
FileDescription | Snes9x |
FileVersion | 1.62.3 |
InternalName | Snes9x |
LegalCopyright | Copyright 1996-2023 |
OriginalFilename | Snes9x.exe |
ProductName | Snes9x SNES Emulator |
ProductVersion | 1.62.3 |
Info | Interesting strings found in the binary: |
Contains domain names:
|
Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to SHA256 |
Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
Suspicious | VirusTotal score: 1/69 (Scanned on 2024-01-24 13:02:04) | Cynet: Malicious (score: 100) |
e_magic | MZ |
---|---|
e_cblp | 0x90 |
e_cp | 0x3 |
e_crlc | 0 |
e_cparhdr | 0x4 |
e_minalloc | 0 |
e_maxalloc | 0xffff |
e_ss | 0 |
e_sp | 0xb8 |
e_csum | 0 |
e_ip | 0 |
e_cs | 0 |
e_ovno | 0 |
e_oemid | 0 |
e_oeminfo | 0 |
e_lfanew | 0x148 |
Signature | PE |
---|---|
Machine |
IMAGE_FILE_MACHINE_AMD64
|
NumberofSections | 6 |
TimeDateStamp | 2023-Mar-30 16:39:56 |
PointerToSymbolTable | 0 |
NumberOfSymbols | 0 |
SizeOfOptionalHeader | 0xf0 |
Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_RELOCS_STRIPPED
|
Magic | PE32+ |
---|---|
LinkerVersion | 14.0 |
SizeOfCode | 0x813600 |
SizeOfInitializedData | 0x6ab000 |
SizeOfUninitializedData | 0 |
AddressOfEntryPoint | 0x00000000006DA8A8 (Section: .text) |
BaseOfCode | 0x1000 |
ImageBase | 0x140000000 |
SectionAlignment | 0x1000 |
FileAlignment | 0x200 |
OperatingSystemVersion | 5.2 |
ImageVersion | 0.0 |
SubsystemVersion | 5.2 |
Win32VersionValue | 0 |
SizeOfImage | 0xec2000 |
SizeOfHeaders | 0x400 |
Checksum | 0 |
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
SizeofStackReserve | 0x100000 |
SizeofStackCommit | 0x1000 |
SizeofHeapReserve | 0x100000 |
SizeofHeapCommit | 0x1000 |
LoaderFlags | 0 |
NumberOfRvaAndSizes | 16 |
COMCTL32.dll |
ImageList_Add
ImageList_Create InitCommonControlsEx |
---|---|
WINMM.dll |
waveOutRestart
waveOutClose waveOutUnprepareHeader waveOutGetDevCapsW waveOutGetNumDevs waveOutSetVolume waveOutReset joyGetPosEx joyGetDevCapsW timeGetDevCaps timeKillEvent timeEndPeriod timeSetEvent timeBeginPeriod waveOutWrite waveOutOpen waveOutPrepareHeader timeGetTime waveOutPause |
OPENGL32.dll |
wglCreateContext
wglMakeCurrent wglDeleteContext wglGetProcAddress |
WSOCK32.dll |
connect
gethostname socket send ioctlsocket recv htons WSAStartup select gethostbyname closesocket __WSAFDIsSet setsockopt htonl inet_addr gethostbyaddr listen bind accept WSAGetLastError |
AVIFIL32.dll |
AVIFileInit
AVIStreamSetFormat AVIFileExit AVIMakeCompressedStream AVISaveOptions AVIFileRelease AVIFileOpenW AVIStreamRelease AVIFileCreateStreamW AVIStreamWrite |
SHLWAPI.dll |
PathIsRelativeW
PathFindExtensionW SHDeleteKeyW PathFindFileNameW |
KERNEL32.dll |
WaitForMultipleObjectsEx
UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList SetProcessAffinityMask SetStdHandle GetFileType ExitThread ResumeThread SetEnvironmentVariableA SetEnvironmentVariableW SetCurrentDirectoryA GetCurrentDirectoryA GetFullPathNameA PeekNamedPipe SetFilePointerEx VirtualFree VirtualProtect VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread WriteConsoleW ReleaseSemaphore WaitForSingleObject CreateEventW Sleep ResetEvent CreateSemaphoreW ReadFile WriteFile SetFilePointer CreateFileW GetLastError CloseHandle LoadLibraryA GetProcAddress FreeLibrary lstrcpynW lstrcpyW SetCurrentDirectoryW lstrlenW LoadLibraryW FileTimeToSystemTime GetTimeFormatW SystemTimeToTzSpecificLocalTime GetDateFormatW GetFileTime WideCharToMultiByte lstrcmpiW lstrcmpW GetVersionExW LocalAlloc SetEvent LocalFree OutputDebugStringA FormatMessageW OutputDebugStringW FormatMessageA DebugBreak GetModuleHandleA GetModuleHandleW WaitForMultipleObjects GetSystemInfo CreateThread CreateMutexW ReleaseMutex CopyFileA MoveFileExA CreateFileA GetFullPathNameW GetModuleFileNameW InitializeCriticalSection DeleteCriticalSection GetModuleFileNameA CreateWaitableTimerW QueryPerformanceFrequency GetFileSize QueryPerformanceCounter GetLogicalDrives FindFirstFileW GetCommandLineW FindNextFileW SetErrorMode FindClose SetFileAttributesW lstrcatW GetCurrentDirectoryW GetDriveTypeW MultiByteToWideChar GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority SignalObjectAndWait CreateTimerQueue InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetNativeSystemInfo GetExitCodeThread GetCurrentThread GetCurrentProcess WaitForSingleObjectEx DuplicateHandle GetTickCount GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc SwitchToThread InitializeCriticalSectionAndSpinCount TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection GetModuleHandleExW QueueUserWorkItem IsProcessorFeaturePresent GetCurrentThreadId RtlCaptureStackBackTrace RaiseException DecodePointer EncodePointer RtlPcToFileHeader CreateHardLinkW MoveFileExW CopyFileW CreateDirectoryExW DeviceIoControl SetLastError AreFileApisANSI GetTempPathW SetFileTime RemoveDirectoryW GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW GetDiskFreeSpaceExW FindFirstFileExW DeleteFileW RtlUnwind CreateDirectoryW ExitProcess GetStdHandle GetACP SetEndOfFile GetConsoleMode ReadConsoleW GetConsoleCP HeapAlloc HeapFree IsValidLocale RtlUnwindEx GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation HeapReAlloc FlushFileBuffers HeapSize HeapQueryInformation SetConsoleCtrlHandler FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap CreateMutexA SetWaitableTimer |
USER32.dll |
ValidateRect
GetDlgItemTextW IsDlgButtonChecked TranslateAcceleratorW GetUpdateRect TranslateMessage SendDlgItemMessageA PeekMessageW SetMenuItemInfoW GetDlgCtrlID DispatchMessageW GetDlgItemTextA RegisterDeviceNotificationW ShowWindow GetActiveWindow GetSubMenu LoadAcceleratorsW CreatePopupMenu UnregisterClassW GetMenuItemCount SetActiveWindow DestroyWindow InsertMenuItemW CallWindowProcW LoadMenuW SendMessageA SetCapture SetCursor wsprintfW CheckDlgButton PostQuitMessage ReleaseCapture LoadImageW SetCursorPos GetCursorPos EnableWindow GetMenu GetWindowPlacement SetWindowPlacement GetMessageW DrawMenuBar GetKeyState DestroyCursor DestroyAcceleratorTable GetSystemMetrics DefWindowProcW MapVirtualKeyW RegisterClassExW GetAsyncKeyState SetTimer GetSysColor IsWindowEnabled SetFocus LoadCursorW GetSysColorBrush UpdateWindow InvalidateRect BeginPaint EndPaint GetForegroundWindow SetDlgItemTextW SendDlgItemMessageW LoadIconW SetScrollInfo GetScrollInfo MapDialogRect SetScrollPos ScrollWindow GetParent GetWindowTextW ChangeDisplaySettingsW EnumDisplayDevicesW EnumDisplaySettingsW ReleaseDC GetWindowLongW AdjustWindowRectEx GetWindowRect GetDC SetWindowPos MonitorFromWindow SetWindowLongPtrW CreateWindowExW ScreenToClient SendMessageW EndDialog SetWindowTextW GetWindowLongPtrW RedrawWindow GetMonitorInfoW MoveWindow GetDlgItem DialogBoxParamW OffsetRect ClientToScreen GetClientRect MessageBoxW IsIconic MessageBoxA PostMessageW CreateDialogParamW MapWindowPoints SetMenu GetMenuItemInfoW RemoveMenu |
GDI32.dll |
GetDeviceCaps
GetTextMetricsW GetTextExtentPoint32W CreateICW GetStockObject SetTextColor DeleteObject CreateFontIndirectW ChoosePixelFormat SwapBuffers SetPixelFormat SelectObject CreateDIBSection CreateCompatibleDC StretchDIBits DeleteDC ExtTextOutW SetBkColor |
COMDLG32.dll |
GetSaveFileNameW
GetOpenFileNameW |
ADVAPI32.dll |
RegCreateKeyExW
RegCloseKey RegSetValueExW |
SHELL32.dll |
CommandLineToArgvW
ShellExecuteW DragQueryFileW SHGetMalloc DragAcceptFiles SHGetPathFromIDListW SHBrowseForFolderW DragFinish |
ole32.dll |
CoUninitialize
CoInitializeEx CoCreateInstance |
OLEAUT32.dll |
SysFreeString
SysAllocString |
d3d9.dll |
Direct3DCreate9
|
DDRAW.dll |
DirectDrawCreate
|
Signature | 0xfeef04bd |
---|---|
StructVersion | 0x10000 |
FileVersion | 1.5.5.0 |
ProductVersion | 1.5.5.0 |
FileFlags | (EMPTY) |
FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
FileType |
VFT_APP
|
Language | English - United Kingdom |
CompanyName | http://www.snes9x.com |
FileDescription | Snes9x |
FileVersion (#2) | 1.62.3 |
InternalName | Snes9x |
LegalCopyright | Copyright 1996-2023 |
OriginalFilename | Snes9x.exe |
ProductName | Snes9x SNES Emulator |
ProductVersion (#2) | 1.62.3 |
Resource LangID | English - United States |
---|
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Mar-30 16:39:56 |
Version | 0.0 |
SizeofData | 101 |
AddressOfRawData | 0x963864 |
PointerToRawData | 0x962264 |
Referenced File | C:\projects\snes9x\win32\_Intermediate\snes9x\Release Unicode\x64\snes9x.pdb |
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Mar-30 16:39:56 |
Version | 0.0 |
SizeofData | 20 |
AddressOfRawData | 0x9638cc |
PointerToRawData | 0x9622cc |
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Mar-30 16:39:56 |
Version | 0.0 |
SizeofData | 1000 |
AddressOfRawData | 0x9638e0 |
PointerToRawData | 0x9622e0 |
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Mar-30 16:39:56 |
Version | 0.0 |
SizeofData | 0 |
AddressOfRawData | 0 |
PointerToRawData | 0 |
StartAddressOfRawData | 0x140963ce8 |
---|---|
EndAddressOfRawData | 0x140963d14 |
AddressOfIndex | 0x140a8eb08 |
AddressOfCallbacks | 0x140815ec0 |
SizeOfZeroFill | 0 |
Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
Callbacks | (EMPTY) |
Size | 0x100 |
---|---|
TimeDateStamp | 1970-Jan-01 00:00:00 |
Version | 0.0 |
GlobalFlagsClear | (EMPTY) |
GlobalFlagsSet | (EMPTY) |
CriticalSectionDefaultTimeout | 0 |
DeCommitFreeBlockThreshold | 0 |
DeCommitTotalFreeThreshold | 0 |
LockPrefixTable | 0 |
MaximumAllocationSize | 0 |
VirtualMemoryThreshold | 0 |
ProcessAffinityMask | 0 |
ProcessHeapFlags | (EMPTY) |
CSDVersion | 0 |
Reserved1 | 0 |
EditList | 0 |
SecurityCookie | 0x140a19230 |
XOR Key | 0xcc6ed82a |
---|---|
Unmarked objects | 0 |
241 (40116) | 21 |
243 (40116) | 195 |
242 (40116) | 46 |
Imports (40310) | 2 |
Imports (VS2012 build 50727 / VS2005 build 50727) | 2 |
199 (41118) | 11 |
ASM objects (VS 2015/2017 runtime 26706) | 14 |
C++ objects (VS 2015/2017 runtime 26706) | 129 |
C objects (VS 2015/2017 runtime 26706) | 39 |
C++ objects (27049) | 14 |
C objects (VS2008 SP1 build 30729) | 1 |
135 (VS2008 SP1 build 30729) | 1 |
173 (VS2010 build 30319) | 1 |
Imports (VS2008 SP1 build 30729) | 29 |
Total imports | 395 |
C++ objects (LTCG) (27049) | 183 |
Resource objects (27049) | 1 |
151 | 1 |
Linker (27049) | 1 |