Manalyze report for 7011dc89b4cee0efc34f0cab258fd2740ec94ad1261ec459e39d70bd49fd491d

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2026-Aug-30 08:56:12
Detected languages	English - United States
Debug artifacts	C:\Users\v-sav\source\repos\MBRLS\x64\Debug\MBRLS.pdb

Plugin Output

Suspicious	The PE is possibly packed.	`Section .textbss is both writable and executable.` `Unusual section name found: .msvcjmc`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`cfb30248c1a5e1580da231b1b2cb02c5` 🔍
SHA1	`aa775765d44ae928b07bc6bd8d148c5a908a19dd` 🔍
SHA256	`7011dc89b4cee0efc34f0cab258fd2740ec94ad1261ec459e39d70bd49fd491d` 🔍
SHA3	`4728cc37edecb452d6becab8fc45d7c2d357c3e051c63f8f6f3c96cc3d805eed` 🔍
SSDeep	`196608:NB5shOmlqM8mLNIj34x4KuYT5VP73vMbRDYkCf8:75fFmZIjoxPfTj3vdf0` 🔍
Imports Hash	`7a6ae6723c54f0d8f37e6709742939c3` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x100`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`11`
TimeDateStamp	2026-Aug-30 08:56:12
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xcd800`
SizeOfInitializedData	`0x77d9cc00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000065073 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x77ed5000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.textbss

MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`
VirtualSize	`0x63b1e`
VirtualAddress	`0x1000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.text

MD5	`d37a244f6f2add5479d2913250031d9f 🔍`
SHA1	`63eb99b6cec4e09b91af39a02ec8574654f8bf68 🔍`
SHA256	`19a982a5564253e849455d9e975f7d3a4313fa0f125c597c3529234bf987108a 🔍`
SHA3	`eae86f1577d9d36917e84bfff47a8b5b157e3ce764277bd5b80f8e9e34c69c64 🔍`
VirtualSize	`0xcd790`
VirtualAddress	`0x65000`
SizeOfRawData	`0xcd800`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.59007`

.rdata

MD5	`cf5f0cc7c0287d4475b74f3ed301cb2d 🔍`
SHA1	`3eb09e308d403d3387412f4212ce7c38fc853230 🔍`
SHA256	`f6679c3ab35b1f8eb260a9e835211d0697aa9fbe4941f3ed4eabe4c295b19937 🔍`
SHA3	`d78c685eedc5fe0acc3e39c8002b1330d44cd809dc84bb7463a73f922f6ae4a9 🔍`
VirtualSize	`0x74c873`
VirtualAddress	`0x133000`
SizeOfRawData	`0x74ca00`
PointerToRawData	`0xcdc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.2584`

.data

MD5	`4baf20d7691a6ead18e75bed9d2a55a1 🔍`
SHA1	`ba868b232636d0adc4106c7cb06bb92511b66020 🔍`
SHA256	`85f916faea450b112124c6f42694d3053d15295ca01a067a0fb1081d01db84aa 🔍`
SHA3	`82a8aea49841b06e3a2883fccb62e3c87186c4ff79a9e066970217ff2d8774be 🔍`
VirtualSize	`0x77648c68`
VirtualAddress	`0x880000`
SizeOfRawData	`0x200`
PointerToRawData	`0x81a600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.753626`

.pdata

MD5	`6b703389e382c9a0614a163ee04d4f0d 🔍`
SHA1	`bc6421a4d5941c52abbc9809c3be2b4c00e521dd 🔍`
SHA256	`3651fc028901b78b7ba0ef3cdba289eec8b4302f25000167ce56372c8ba2e408 🔍`
SHA3	`853c6e96a8b6367b0914aa42fcfef48b35ef1c86f0a3b151ce1812b19cd7cd19 🔍`
VirtualSize	`0x330c`
VirtualAddress	`0x77ec9000`
SizeOfRawData	`0x3400`
PointerToRawData	`0x81a800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`2.95494`

.idata

MD5	`ec51639385fe4f7a37dd8b7894b3c478 🔍`
SHA1	`c0071e806da59cc89b533d795a82176c4bba10b9 🔍`
SHA256	`14c8e2f2bb6e12b9981a32f5c9153de660c16d55abaa19d4fbe662eaa9b88de0 🔍`
SHA3	`6737ee8a85bad850da76749472f4f57ebc042d8d6c5ed2aa4540b652559d4186 🔍`
VirtualSize	`0x1bc6`
VirtualAddress	`0x77ecd000`
SizeOfRawData	`0x1c00`
PointerToRawData	`0x81dc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.67995`

.msvcjmc

MD5	`8a6eee9dd8f9f93e4df53d0b88004ab7 🔍`
SHA1	`014886594d26294ab9d42c1efe0ee67493ccdc7e 🔍`
SHA256	`842fab41297bd995e4cce49c27a0d0bd2a766d3de6bd9a0d98c87c556a3ab2c7 🔍`
SHA3	`b25c2e2670a6a04a46934c20cd3fbde2d2ec1b2b40edc72820cd827335165a19 🔍`
VirtualSize	`0x154`
VirtualAddress	`0x77ecf000`
SizeOfRawData	`0x200`
PointerToRawData	`0x81f800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.575581`

.tls

MD5	`c573bd7cea296a9c5d230ca6b5aee1a6 🔍`
SHA1	`04a0b9fde89c71864acaf5e74689fe4c269bd7a8 🔍`
SHA256	`13bde09a110c13b533dc985f3e2c475b6f6bcf514d1a23fce5b784a653548e91 🔍`
SHA3	`3679da6860e8ab20485113de9ac22dfe22ddc29d53f14ddc33a648aa98196361 🔍`
VirtualSize	`0x309`
VirtualAddress	`0x77ed0000`
SizeOfRawData	`0x400`
PointerToRawData	`0x81fa00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.0111738`

.00cfg

MD5	`565fd4bffbf9751112c0c482d9484615 🔍`
SHA1	`d9cd33d7af09cc66b66432eeec6e59752ca8699c 🔍`
SHA256	`96ddc5734635be70c43e03c3c8026cb69555b43e5e59256d265088ed3230f8ed 🔍`
SHA3	`cc9aab3e8122f7f7077eff1c77fd19b4ddf9a311912931c530673ebfd017b31e 🔍`
VirtualSize	`0x11b`
VirtualAddress	`0x77ed1000`
SizeOfRawData	`0x200`
PointerToRawData	`0x81fe00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`0.191963`

.rsrc

MD5	`37fd25b54e78d0597604a552d55daa8c 🔍`
SHA1	`2fc7de8731f8749e78619bf08707f5bccf274900 🔍`
SHA256	`2c04db36cd3e7a1edd8cbb6b51bce3c39a5454c1ba85b643e0386f39b188cbc7 🔍`
SHA3	`e843d97713166eb2ad28a9ebea2f41cafdc13b365a110bbc604a4ead49b3c18d 🔍`
VirtualSize	`0x43c`
VirtualAddress	`0x77ed2000`
SizeOfRawData	`0x600`
PointerToRawData	`0x820000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`2.15052`

.reloc

MD5	`6f1c3de66d2ef875782402ecdb26b38b 🔍`
SHA1	`6bb9578bb341484673fc84c2b5cc55736425183f 🔍`
SHA256	`f2212263b4f3db4d7106c040c6c235a17e08e3b6340ac220883952ff18eb0518 🔍`
SHA3	`a66e5f0bf03ec504c4354b91c49bb9de4dbdbc23cfe5c8b3b3bdeafb097879fe 🔍`
VirtualSize	`0x1505`
VirtualAddress	`0x77ed3000`
SizeOfRawData	`0x1600`
PointerToRawData	`0x820600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`1.36005`

Imports

libfftw3f-3.dll	`fftwf_destroy_plan` `fftwf_plan_dft_1d` `fftwf_malloc` `fftwf_free` `fftwf_execute`
KERNEL32.dll	`GetCurrentProcess` `SetConsoleCP` `IsProcessorFeaturePresent` `CloseHandle` `WriteFile` `CreateFileW` `GetSystemTimeAsFileTime` `SetUnhandledExceptionFilter` `RtlVirtualUnwind` `UnhandledExceptionFilter` `RtlLookupFunctionEntry` `TerminateProcess` `InitializeSListHead` `GetCurrentThreadId` `EnterCriticalSection` `LeaveCriticalSection` `InitializeCriticalSectionAndSpinCount` `DeleteCriticalSection` `SetEvent` `ResetEvent` `WaitForSingleObjectEx` `CreateEventW` `GetModuleHandleW` `GetProcAddress` `RtlCaptureContext` `IsDebuggerPresent` `GetCurrentProcessId` `QueryPerformanceCounter` `FreeLibrary` `VirtualQuery` `GetProcessHeap` `HeapFree` `HeapAlloc` `GetLastError` `GetStartupInfoW` `WideCharToMultiByte` `MultiByteToWideChar` `RaiseException`
USER32.dll	`LoadImageW`
GDI32.dll	`SelectObject` `GetDIBits` `DeleteObject` `DeleteDC` `CreateCompatibleDC` `GetObjectW`
COMDLG32.dll	`GetOpenFileNameW` `GetSaveFileNameW`
MSVCP140D.dll	`_FDtest`
VCRUNTIME140D.dll	`__CxxFrameHandler3` `__vcrt_GetModuleHandleW` `__C_specific_handler` `memcmp` `__std_type_info_destroy_list` `__vcrt_LoadLibraryExW` `memcpy` `__C_specific_handler_noexcept` `__vcrt_GetModuleFileNameW` `memset`
ucrtbased.dll	`expf` `floorf` `log10f` `ceilf` `powf` `sinf` `sqrtf` `tanf` `_time64` `_CrtDbgReport` `_CrtDbgReportW` `strcpy_s` `strcat_s` `_seh_filter_exe` `_set_app_type` `__setusermatherr` `_configure_narrow_argv` `_initialize_narrow_environment` `_get_initial_narrow_environment` `_initterm` `_initterm_e` `exit` `_exit` `_set_fmode` `__p___argc` `__p___argv` `_cexit` `_c_exit` `_register_thread_local_exe_atexit_callback` `_configthreadlocale` `_set_new_mode` `__p__commode` `_seh_filter_dll` `_initialize_onexit_table` `_register_onexit_function` `_execute_onexit_table` `_crt_atexit` `_crt_at_quick_exit` `terminate` `_wmakepath_s` `_wsplitpath_s` `wcscpy_s` `cosf` `atanf` `atan2f` `asinf` `ldexp` `tan` `sqrt` `sin` `pow` `log` `fabs` `exp` `cos` `atan2` `atan` `asin` `rand` `srand` `abs` `__stdio_common_vsprintf_s` `__stdio_common_vfscanf` `__stdio_common_vfprintf` `fwrite` `fseek` `fread` `fclose` `fopen_s` `_wsetlocale` `__stdio_common_vfwprintf` `_putws` `__acrt_iob_func` `free` `calloc` `logf`

Delayed Imports

1

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x17d`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.91161`
MD5	`1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍`
SHA1	`4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍`
SHA256	`4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍`
SHA3	`4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍`

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-Aug-30 08:56:12
Version	`0.0`
SizeofData	`78`
AddressOfRawData	`0x87c970`
PointerToRawData	`0x817570`
Referenced File	C:\Users\v-sav\source\repos\MBRLS\x64\Debug\MBRLS.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2026-Aug-30 08:56:12
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0x87c9c0`
PointerToRawData	`0x8175c0`

TLS Callbacks

StartAddressOfRawData	`0x1b7ed0000`
EndAddressOfRawData	`0x1b7ed0208`
AddressOfIndex	`0x1b7ec8b70`
AddressOfCallbacks	`0x140133a58`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_4BYTES`
Callbacks	`(EMPTY)`

Load Configuration

Size	`0x100`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x140880028`

RICH Header

XOR Key	`0x77b4ba13`
Unmarked objects	`0`
Imports (VS 2015/2017 runtime 26706)	`4`
C++ objects (VS 2015/2017 runtime 26706)	`27`
C objects (VS 2015/2017 runtime 26706)	`11`
ASM objects (VS 2015/2017 runtime 26706)	`3`
Imports (27412)	`10`
Imports (VS2015 UPD2 build 23918)	`3`
Total imports	`139`
C++ objects (27054)	`1`
C objects (27054)	`3`
Resource objects (27054)	`1`
Linker (27054)	`1`

Errors

[*] Warning: Section .textbss has a size of 0!
[*] Warning: Yara callback received an unhandled message (6).

Leave a comment

📂 Transfer # B6742 from Coinbase. SIGN IN ->> graph.org/Bitcoin- 16 hours ago

📂 Transfer # B6742 from Coinbase. SIGN IN ->> graph.org/Bitcoin-Mining-08-27?hs=e8cbe5a5c2eaeda64c37ed85a5c761ed&  📂