6b90f2223074d18aad040a2957e4208d

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 1970-Jan-01 00:00:00

Plugin Output

Suspicious PEiD Signature: Private exe Protector V2.0 -> SetiSoft Team ! Sign by fly
Private exe Protector V2.0 -> SetiSoft Team
Suspicious The PE is possibly packed. The PE only has 0 import(s).
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 6b90f2223074d18aad040a2957e4208d
SHA1 e3103f420bf4de41435904e379ee63fae68f79b8
SHA256 e8314748fc905a96d48d377593f2589b1872905c85fea0b57c5ec7c6157a6afc
SHA3 ab027199ef91712ab43342ef9a26ab44652f07141d506120687aab7c73401370
SSDeep 1536:ZGhbaCNW8HqUHn3kDYhjC5V73tS/XfnofF:An4gHn3IV73tSPA
Imports Hash d41d8cd98f00b204e9800998ecf8427e

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 4
TimeDateStamp 1970-Jan-01 00:00:00
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 3.0
SizeOfCode 0x1d8ec
SizeOfInitializedData 0x4179
SizeOfUninitializedData 0x2f4745
AddressOfEntryPoint 0x0001E416 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x1f000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x31a000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
SizeofStackReserve 0x1000000
SizeofStackCommit 0x10000
SizeofHeapReserve 0x1000000
SizeofHeapCommit 0x10000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 4ed3ad209d74796248a749dbb2818cc4
SHA1 80996aa35ae7ee18b72e510f3abd2565b7750989
SHA256 fd37286c6137ec078978ee3b09d3fb1dd25784f7523cf3b645004f4e300c6555
SHA3 1ea8dbaf212975172a349e51f7f2059220d4530a5a96975e9d08c78200b13862
VirtualSize 0x1d8ec
VirtualAddress 0x1000
SizeOfRawData 0x1da00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.01327

.data

MD5 e106f030861de554b95069778886f6de
SHA1 e7b224c6137fe629c73b60ee09f23943e1a2a0b5
SHA256 75b0ebd4cfc13c01f1f17cb739d38f4bda0325d1f0bcd4eb21a4175501c5634e
SHA3 f3c1a88bf9d0dfe2b89658a94eefcfbef5d8d4f90127a1d848bea6805f019336
VirtualSize 0x4179
VirtualAddress 0x1f000
SizeOfRawData 0x4200
PointerToRawData 0x1de00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.13942

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x2f4745
VirtualAddress 0x24000
SizeOfRawData 0
PointerToRawData 0x22000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0xc14
VirtualAddress 0x319000
SizeOfRawData 0xe00
PointerToRawData 0x316800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

Imports

Delayed Imports

Version Info

TLS Callbacks

Load Configuration

RICH Header

Errors

[!] Error: Could not read the IMAGE_IMPORT_DESCRIPTOR. [*] Warning: Section .bss has a size of 0! [*] Warning: Section .idata is larger than the executable! [*] Warning: Section .idata is larger than the executable! [*] Warning: Section .idata is larger than the executable!