656fb43f43ede26560aa1629e3f2ac8ba2b29d16a0b07c8526dd3859560f772b
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Sep-26 08:43:51 |
| FileDescription | BATTROPICA Launcher |
| FileVersion | 1.0.0.0 |
| InternalName | BATTROPICA-Launcher.exe |
| LegalCopyright | |
| OriginalFilename | BATTROPICA-Launcher.exe |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE is possibly packed. | The PE only has 0 import(s). |
| Suspicious | The PE is possibly a dropper. | Resources amount for 82.683% of the executable. |
| Malicious | VirusTotal score: 5/71 (Scanned on 2026-09-26 12:55:22) |
APEX:
Malicious
Bkav: W32.Malware.4E47956F CrowdStrike: win/malicious_confidence_70% (D) MaxSecure: Trojan.Malware.300983.susgen McAfeeD: ti!656FB43F43ED |
Hashes
| MD5 | ce9538f1b6d39083589ac51ae406c0be 🔍 |
|---|---|
| SHA1 | af5b4a77d6533bc36a1cd71dba414c88220e91ed 🔍 |
| SHA256 | 656fb43f43ede26560aa1629e3f2ac8ba2b29d16a0b07c8526dd3859560f772b 🔍 |
| SHA3 | 6c2677ad6410a3c12e5777252e49c6e3fda301432edc2b5daa8548f515482a4e 🔍 |
| SSDeep | 6144:kiu2PLSA5cVPumAMUF8hcZMmOGklfN9ZIvdB:k/MxhmPUFWV9o 🔍 |
| Imports Hash | d41d8cd98f00b204e9800998ecf8427e 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 2 |
| TimeDateStamp | 2026-Sep-26 08:43:51 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 11.0 |
| SizeOfCode | 0x9800 |
| SizeOfInitializedData | 0x2f200 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000000000 (Section: ?) |
| BaseOfCode | 0x2000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3c000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x400000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x2000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | d4b3c35b911dc3e1abb6a47f34ae170b 🔍 |
|---|---|
| SHA1 | 35ceeee66d7a4b653dfadfd95a02191a786fc742 🔍 |
| SHA256 | bc19b1ab56bc5e4c89d437c4be1b3c47df33a017ea360e42cab033c8c940fb48 🔍 |
| SHA3 | 2398368736c4ba294a478702333fd6188704f88bcd939581b358737ec216725b 🔍 |
| VirtualSize | 0x979c |
| VirtualAddress | 0x2000 |
| SizeOfRawData | 0x9800 |
| PointerToRawData | 0x200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.90896 |
.rsrc
| MD5 | 8dd7f370fba37e1a780e596a52e5228f 🔍 |
|---|---|
| SHA1 | 92abd6f8993e99f21d8f485e777d9a7c7d2f2bdc 🔍 |
| SHA256 | e1d1f4ec8d212425d06925048841084ed336ccfca3df009ddd778ebcbde2fa9f 🔍 |
| SHA3 | befe22b351a859064c80e7a7499f5a690aa3e6727805e7fa7093a55e04c381db 🔍 |
| VirtualSize | 0x2f130 |
| VirtualAddress | 0xc000 |
| SizeOfRawData | 0x2f200 |
| PointerToRawData | 0x9a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.99193 |
Imports
Delayed Imports
2
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x3c5 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.74431 |
| Detected Filetype | PNG graphic file |
| MD5 | 2b8ec02edaef7f6bbcc47a81730b999f 🔍 |
| SHA1 | a943b59d153d10fe9601837fea003f98f3060efb 🔍 |
| SHA256 | 4cd7a5dfda94d12585bac08ba751ea4b4596fdf2c605c0d3ce23dd92c3b54888 🔍 |
| SHA3 | 275bc173fdf7159597bb0ea96319f75ac92868e02b27836ee83451fd81442487 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x7c3 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.88896 |
| Detected Filetype | PNG graphic file |
| MD5 | 91f83fc003e03539111dcded61f69016 🔍 |
| SHA1 | f741666e4e5126f50db03be1861efd630f9777ae 🔍 |
| SHA256 | 6ab8a76b761474152dd736b1e838d900af3a02c4b07703bbb3d66e952e294989 🔍 |
| SHA3 | 8d02d3b672d78e4d050e41735d7aa5c7ad99efc771ad9b18127b9861f3188e13 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0xcf6 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.93026 |
| Detected Filetype | PNG graphic file |
| MD5 | ce1e06481996fb891a1160e3fbed474e 🔍 |
| SHA1 | bf4544a51898d03ec5b0d0a7e236ebeea5012a7b 🔍 |
| SHA256 | 41000f4ebab1a6d7aa178337b19527ff34f6a19dea623dbb60934788c744a239 🔍 |
| SHA3 | 1b91243cacded14b4344eb95cf032d004f1b41298c343764815a86e9e8060fb0 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x1b12 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.96312 |
| Detected Filetype | PNG graphic file |
| MD5 | 7158b7690a3227521db9d161badaca45 🔍 |
| SHA1 | 25315a3a8ac7674d59d28a2217f56b0a1a9f01a6 🔍 |
| SHA256 | 5e457134d6de27f99d2a276da5781c53fbd217184f1670dcf6219881d85ab271 🔍 |
| SHA3 | e166930a72a06db3e677c9f06cc1c642299b5572faa9843fbe1684d8e81554ca 🔍 |
6
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x2d88 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.97226 |
| Detected Filetype | PNG graphic file |
| MD5 | 27c003282e06b6270e9af75853f4d123 🔍 |
| SHA1 | 53f297a471f985a3c852f7c67a828756fa62f0f0 🔍 |
| SHA256 | 69f1df482473f51532af2db373d13a748d2c4e83a8c646ed7cab3f811e0b6737 🔍 |
| SHA3 | 8e042503353ccfef497fcadd691afeb4ec8053975ef3f6ccc81b37e2aa2952c4 🔍 |
7
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x9952 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.9877 |
| Detected Filetype | PNG graphic file |
| MD5 | cbd3420dd3b695f63e41ad2cb89abb12 🔍 |
| SHA1 | f7de035332ea7c0f40f334260ffa5c6345870893 🔍 |
| SHA256 | 617641dcf772b99e7aa1f006483e23e799b0abd161cd9ae02e2e791549e12c42 🔍 |
| SHA3 | a8534959eb883acfb653258fd9b870b853814ffd4f743d3d5710a35b9f3540de 🔍 |
8
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x1ef6f |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.99557 |
| Detected Filetype | PNG graphic file |
| MD5 | e6bf45d7265412ea9981f8ed5f4763fc 🔍 |
| SHA1 | cf16280a1b7771fb37154f47f4eccb40c3a10b22 🔍 |
| SHA256 | b07e5f8dc892857e5e20399cde49c855cf3562c5b236a1abab0299ca92041041 🔍 |
| SHA3 | 7970b10daa35a782c041b3897b42e4937a21aeabb428900e3489312505f7433f 🔍 |
32512
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x68 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.76718 |
| Detected Filetype | Icon file |
| MD5 | 1a2148199bbad4f22823776526dc9462 🔍 |
| SHA1 | 9b283a81f80d240eb859aadc279f832d9a0e7142 🔍 |
| SHA256 | c69aac7b08199a554e1b1e9a24e6d0759cd2daec45f1dbbb6f9da124434055d8 🔍 |
| SHA3 | 916818de1fed98425078dccd11545b2f580676b91c48cc0bb33beda761145e03 🔍 |
1
| Type |
RT_VERSION
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x298 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.3258 |
| MD5 | 29a21e24965873ec037dfe1123895535 🔍 |
| SHA1 | 812f4b02c72d1065fa375ffd09f4f27b9fdd131a 🔍 |
| SHA256 | 01c82566b825ac9d8d7ab871e1b1be6e1648f6fb362e682715cc659cd98c552b 🔍 |
| SHA3 | 20ce4fe51ca2df630dfca35cd4ea4cc5ce49ee9de62ea23f9b0adfbf7b92423f 🔍 |
1 (#2)
| Type |
RT_MANIFEST
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x1ea |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.00112 |
| MD5 | a19a2658ba69030c6ac9d11fd7d7e3c1 🔍 |
| SHA1 | 879dcf690e5bf1941b27cf13c8bcf72f8356c650 🔍 |
| SHA256 | c0085eb467d2fc9c9f395047e057183b3cd1503a4087d0db565161c13527a76f 🔍 |
| SHA3 | 93cbaf236d2d3870c1052716416ddf1c34f21532e56dd70144e9a01efcd0ce34 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| FileDescription | BATTROPICA Launcher |
| FileVersion (#2) | 1.0.0.0 |
| InternalName | BATTROPICA-Launcher.exe |
| LegalCopyright | |
| OriginalFilename | BATTROPICA-Launcher.exe |
| ProductVersion (#2) | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
| Resource LangID | UNKNOWN |
|---|
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.