Architecture |
IMAGE_FILE_MACHINE_AMD64
|
---|---|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
Compilation Date | 2024-Aug-01 16:09:13 |
Detected languages |
English - United States
|
Debug artifacts |
C:\Users\karag\Desktop\spammers\imgui factura\examples\example_win32_directx11\Release\example_win32_directx11.pdb
|
Info | Matching compiler(s): | MASM/TASM - sig1(h) |
Info | Interesting strings found in the binary: |
Contains domain names:
|
Info | Cryptographic algorithms detected in the binary: | Uses constants related to CRC32 |
Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
e_magic | MZ |
---|---|
e_cblp | 0x90 |
e_cp | 0x3 |
e_crlc | 0 |
e_cparhdr | 0x4 |
e_minalloc | 0 |
e_maxalloc | 0xffff |
e_ss | 0 |
e_sp | 0xb8 |
e_csum | 0 |
e_ip | 0 |
e_cs | 0 |
e_ovno | 0 |
e_oemid | 0 |
e_oeminfo | 0 |
e_lfanew | 0xf8 |
Signature | PE |
---|---|
Machine |
IMAGE_FILE_MACHINE_AMD64
|
NumberofSections | 6 |
TimeDateStamp | 2024-Aug-01 16:09:13 |
PointerToSymbolTable | 0 |
NumberOfSymbols | 0 |
SizeOfOptionalHeader | 0xf0 |
Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Magic | PE32+ |
---|---|
LinkerVersion | 14.0 |
SizeOfCode | 0x4dc00 |
SizeOfInitializedData | 0x34ae00 |
SizeOfUninitializedData | 0 |
AddressOfEntryPoint | 0x000000000004D4AC (Section: .text) |
BaseOfCode | 0x1000 |
ImageBase | 0x140000000 |
SectionAlignment | 0x1000 |
FileAlignment | 0x200 |
OperatingSystemVersion | 6.0 |
ImageVersion | 0.0 |
SubsystemVersion | 6.0 |
Win32VersionValue | 0 |
SizeOfImage | 0x39e000 |
SizeOfHeaders | 0x400 |
Checksum | 0 |
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
SizeofStackReserve | 0x100000 |
SizeofStackCommit | 0x1000 |
SizeofHeapReserve | 0x100000 |
SizeofHeapCommit | 0x1000 |
LoaderFlags | 0 |
NumberOfRvaAndSizes | 16 |
d3d11.dll |
D3D11CreateDeviceAndSwapChain
|
---|---|
D3DCOMPILER_43.dll |
D3DCompile
|
KERNEL32.dll |
LoadLibraryA
QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetModuleHandleW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GlobalUnlock RtlCaptureContext CreateEventW WaitForSingleObjectEx ResetEvent SetEvent IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead DeleteCriticalSection InitializeCriticalSectionAndSpinCount WideCharToMultiByte GlobalLock GlobalFree RtlLookupFunctionEntry GlobalAlloc EnterCriticalSection RtlVirtualUnwind CloseHandle LeaveCriticalSection |
USER32.dll |
RegisterClassExW
UnregisterClassW CreateWindowExW DestroyWindow ShowWindow TranslateMessage PostQuitMessage GetKeyState GetMessageExtraInfo GetAsyncKeyState DispatchMessageW DefWindowProcW ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData PeekMessageW UpdateWindow |
MSVCP140.dll |
?_Xlength_error@std@@YAXPEBD@Z
|
IMM32.dll |
ImmSetCompositionWindow
ImmReleaseContext ImmGetContext ImmSetCandidateWindow |
d3dx11_43.dll |
D3DX11CreateShaderResourceViewFromMemory
|
VCRUNTIME140_1.dll |
__CxxFrameHandler4
|
VCRUNTIME140.dll |
memmove
memset __C_specific_handler __current_exception_context __current_exception strstr __std_terminate __std_exception_copy __std_exception_destroy memchr memcmp memcpy _CxxThrowException |
api-ms-win-crt-stdio-l1-1-0.dll |
_wfopen
__stdio_common_vfprintf fseek fclose __stdio_common_vsprintf __acrt_iob_func ftell __stdio_common_vsscanf fwrite fflush __p__commode _set_fmode fread |
api-ms-win-crt-utility-l1-1-0.dll |
qsort
|
api-ms-win-crt-string-l1-1-0.dll |
strncpy
strcmp |
api-ms-win-crt-heap-l1-1-0.dll |
_callnewh
_set_new_mode malloc free |
api-ms-win-crt-runtime-l1-1-0.dll |
_exit
_invalid_parameter_noinfo_noreturn __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm terminate _get_initial_narrow_environment _set_app_type _seh_filter_exe _configure_narrow_argv _cexit exit _initialize_narrow_environment _wassert _crt_atexit _initialize_onexit_table _register_onexit_function |
api-ms-win-crt-math-l1-1-0.dll |
powf
sinf cosf fmodf sqrtf acosf __setusermatherr ceilf |
api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
Characteristics |
0
|
---|---|
TimeDateStamp | 2024-Aug-01 16:09:13 |
Version | 0.0 |
SizeofData | 139 |
AddressOfRawData | 0x5d834 |
PointerToRawData | 0x5c834 |
Referenced File | C:\Users\karag\Desktop\spammers\imgui factura\examples\example_win32_directx11\Release\example_win32_directx11.pdb |
Characteristics |
0
|
---|---|
TimeDateStamp | 2024-Aug-01 16:09:13 |
Version | 0.0 |
SizeofData | 20 |
AddressOfRawData | 0x5d8c0 |
PointerToRawData | 0x5c8c0 |
Characteristics |
0
|
---|---|
TimeDateStamp | 2024-Aug-01 16:09:13 |
Version | 0.0 |
SizeofData | 912 |
AddressOfRawData | 0x5d8d4 |
PointerToRawData | 0x5c8d4 |
Characteristics |
0
|
---|---|
TimeDateStamp | 2024-Aug-01 16:09:13 |
Version | 0.0 |
SizeofData | 0 |
AddressOfRawData | 0 |
PointerToRawData | 0 |
StartAddressOfRawData | 0x14005dc88 |
---|---|
EndAddressOfRawData | 0x14005dc90 |
AddressOfIndex | 0x140396bb0 |
AddressOfCallbacks | 0x14004f6f8 |
SizeOfZeroFill | 0 |
Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
Callbacks | (EMPTY) |
Size | 0x138 |
---|---|
TimeDateStamp | 1970-Jan-01 00:00:00 |
Version | 0.0 |
GlobalFlagsClear | (EMPTY) |
GlobalFlagsSet | (EMPTY) |
CriticalSectionDefaultTimeout | 0 |
DeCommitFreeBlockThreshold | 0 |
DeCommitTotalFreeThreshold | 0 |
LockPrefixTable | 0 |
MaximumAllocationSize | 0 |
VirtualMemoryThreshold | 0 |
ProcessAffinityMask | 0 |
ProcessHeapFlags | (EMPTY) |
CSDVersion | 0 |
Reserved1 | 0 |
EditList | 0 |
SecurityCookie | 0x140065038 |
XOR Key | 0x4332d385 |
---|---|
Unmarked objects | 0 |
Imports (VS2008 SP1 build 30729) | 16 |
C++ objects (30034) | 27 |
C objects (30034) | 9 |
ASM objects (30034) | 3 |
Imports (30034) | 6 |
Imports (29395) | 10 |
Imports (21202) | 7 |
Total imports | 159 |
C++ objects (LTCG) (30148) | 8 |
Resource objects (30148) | 1 |
Linker (30148) | 1 |