7766489bd85d793d00c94cfbb74d916d6d4c09b86185bbe9f037972a3e09af03
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Jul-15 20:58:41 |
| Detected languages |
English - United States
|
| FileDescription | BestFlashTool |
| FileVersion | 1.5.0.0 |
| ProgramID | BestFlashTool |
| ProductName | BestFlashTool |
| ProductVersion | 1.5.0.0 |
Plugin Output
| Suspicious | This PE is packed with VMProtect |
Unusual section name found: .vmp0
Unusual section name found: .vmp1 |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Malicious | VirusTotal score: 48/71 (Scanned on 2026-10-01 15:27:21) |
ALYac:
Gen:Variant.Draftor.4358
AVG: Win32:MalwareX-gen [Misc] AhnLab-V3: Trojan/Win.MalwareX-gen.C5746823 Alibaba: Trojan:Win32/VMProtect.565f9c58 Antiy-AVL: Trojan/Win32.Etset Arcabit: Trojan.Draftor.D1106 Avast: Win32:MalwareX-gen [Misc] Avira: TR/W32.Agent BitDefender: Gen:Variant.Draftor.4358 Bkav: W32.Malware.FDB20F23 CAT-QuickHeal: Trojan.Etset CTX: exe.trojan.vmprotect CrowdStrike: win/malicious_confidence_60% (D) Cylance: Unsafe Cynet: Malicious (score: 99) DeepInstinct: MALICIOUS ESET-NOD32: Win32/Packed.VMProtect.ACR trojan Elastic: malicious (high confidence) Emsisoft: Gen:Variant.Draftor.4358 (B) F-Secure: Trojan.TR/W32.Agent Fortinet: W32/PossibleThreat GData: Gen:Variant.Draftor.4358 Google: Detected Gridinsoft: Trojan.Win32.Packed.cl Ikarus: Trojan.Win32.VMProtect K7AntiVirus: Riskware ( 005cdd9e1 ) K7GW: Riskware ( 005cdd9e1 ) Kingsoft: Win32.Troj.etset.v Lionic: Trojan.Win32.FraudPack.l2h8 Malwarebytes: Malware.AI.3943842992 MaxSecure: Trojan.Malware.325675668.susgen McAfeeD: ti!7766489BD85D MicroWorld-eScan: Gen:Variant.Draftor.4358 Microsoft: Trojan:Win32/Etset!rfn Paloalto: generic.ml Panda: Trj/Chgt.AD Sangfor: Trojan.Win32.VMProtect.V4h4 SentinelOne: Static AI - Suspicious PE Skyhigh: Artemis Sophos: Mal/Generic-S Symantec: ML.Attribute.HighConfidence TrellixENS: Artemis!31E1179E1706 TrendMicro: TROJ_GEN.R002C0DH525 TrendMicro-HouseCall: TROJ_GEN.R002C0DH525 VIPRE: Gen:Variant.Draftor.4358 Varist: W32/ABRisk.DRXC-5298 Webroot: W32.Malware.gen alibabacloud: VirTool:Win/Packed.VMProtect.AWY |
Hashes
| MD5 | 31e1179e1706565035d2789169469741 🔍 |
|---|---|
| SHA1 | 5e5a5b2700237deb4ab7cb74ab4b3c01b2e308c6 🔍 |
| SHA256 | 7766489bd85d793d00c94cfbb74d916d6d4c09b86185bbe9f037972a3e09af03 🔍 |
| SHA3 | ab5275db9a0cc4c3a579d9b907a6be04ff06bdc019551f5d86df28927f593aaa 🔍 |
| SSDeep | 393216:+4zs8gztaUxJWsfi26ekigZJCG1Ny9RPf1wqaCmioW/u6cikCWomQw8E/Dk:ps8QtH226e2ZJZ1NopaCh/hcx+w7D 🔍 |
| Imports Hash | 576ff364785f83a0582b9df284eee159 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x50 |
| e_cp | 0x2 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0xf |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0x1a |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 12 |
| TimeDateStamp | 2025-Jul-15 20:58:41 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_RELOCS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x956600 |
| SizeOfInitializedData | 0xc5e600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0233A6EA (Section: .vmp1) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x958000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3864000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x94aac0 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
|
.itext
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0xba00 |
| VirtualAddress | 0x94c000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
|
.data
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x885730 |
| VirtualAddress | 0x958000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.bss
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0xa2bb0 |
| VirtualAddress | 0x11de000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.idata
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x680a |
| VirtualAddress | 0x1281000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.didata
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x6180 |
| VirtualAddress | 0x1288000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.edata
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x76 |
| VirtualAddress | 0x128f000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
|
.tls
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x58 |
| VirtualAddress | 0x1290000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.rdata
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x5d |
| VirtualAddress | 0x1291000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
|
.vmp0
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x109fcc9 |
| VirtualAddress | 0x1292000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
|
.vmp1
| MD5 | ce22051b357e7ecbd44d95f10f3750d9 🔍 |
|---|---|
| SHA1 | 06609523a517953af5376ed5f53fe755b7298412 🔍 |
| SHA256 | 23ae2154ac1712f34bac62c7a961da58175dd5e59315ce579ed970dbd84781ff 🔍 |
| SHA3 | 37f52af071b10518ef431ae5916054b95e284d20c5867751fa2d2c7372864305 🔍 |
| VirtualSize | 0x14ece80 |
| VirtualAddress | 0x2332000 |
| SizeOfRawData | 0x14ed000 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
|
| Entropy | 7.99676 |
.rsrc
| MD5 | 2c855752a157e419948e874cdc0bc823 🔍 |
|---|---|
| SHA1 | 3a4afa30bb4fb13eb2229876d51232d1d6d75390 🔍 |
| SHA256 | ef760c4d87c84ec0d88f42eb0c688ee3b4a485de9b9a15af15fb3f2070aba860 🔍 |
| SHA3 | 32149864ee62e0a5d818687ade7027a1e9089444a83b9772c8d8efb9f79d2f5a 🔍 |
| VirtualSize | 0x446e6 |
| VirtualAddress | 0x381f000 |
| SizeOfRawData | 0x44800 |
| PointerToRawData | 0x14ed400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.01234 |
Imports
| mpr.dll |
WNetEnumResourceW
|
|---|---|
| winmm.dll |
timeGetTime
|
| shlwapi.dll |
StrCmpLogicalW
|
| wininet.dll |
InternetCloseHandle
|
| winspool.drv |
DocumentPropertiesW
|
| comdlg32.dll |
ChooseColorW
|
| comctl32.dll |
ImageList_GetImageInfo
|
| shell32.dll |
SHBrowseForFolderW
|
| user32.dll |
CopyImage
|
| version.dll |
GetFileVersionInfoSizeW
|
| oleaut32.dll |
SafeArrayPutElement
|
| netapi32.dll |
NetWkstaGetInfo
|
| advapi32.dll |
RegSetValueExW
|
| msvcrt.dll |
strncmp
|
| libusb0.dll |
usb_close
|
| kernel32.dll |
GetVersion
GetVersionExW |
| libLZ4.dll |
LZ4_decompress_safe_continue
|
| QMSL_MSVC10R.dll |
QLIB_DisconnectAllServers
|
| gdiplus.dll |
GdipFillEllipseI
|
| ole32.dll |
RevokeDragDrop
|
| gdi32.dll |
AddFontMemResourceEx
|
| WTSAPI32.dll |
WTSSendMessageW
|
| kernel32.dll (#2) |
GetVersion
GetVersionExW |
| user32.dll (#2) |
CopyImage
|
| kernel32.dll (#3) |
GetVersion
GetVersionExW |
| user32.dll (#3) |
CopyImage
|
| kernel32.dll (delay-loaded) |
GetVersion
GetVersionExW |
Delayed Imports
| Attributes | 0x1 |
|---|---|
| Name | kernel32.dll |
| ModuleHandle | 0x12881e0 |
| DelayImportAddressTable | 0x128821c |
| DelayImportNameTable | 0x27179e4 |
| BoundDelayImportTable | 0x1289544 |
| UnloadDelayImportTable | 0x1289ea0 |
| TimeStamp | 1970-Jan-01 00:00:00 |
dbkFCallWrapperAddr
| Ordinal | 1 |
|---|---|
| Address | 0x11e1644 |
__dbk_fcall_wrapper
| Ordinal | 2 |
|---|---|
| Address | 0x13db0 |
1
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x468 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 6.49469 |
| MD5 | 354b5b6451e9de13059055415ad6b1d6 🔍 |
| SHA1 | d5987f70397db6900b9676482dd00d562eb0a62c 🔍 |
| SHA256 | b6117c1ff48fbbe2f55670324eca652d6f5e975c93b7200dbd019da8a2d5cf0a 🔍 |
| SHA3 | b7bde075cceb05ab75cbd468edea885fe10e3d6115d99190bf36904aac48715e 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x988 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 6.40987 |
| MD5 | 33d8890b0195ef58def8f29f05ba52ee 🔍 |
| SHA1 | a2c6818712d55b6b78a01bafe585cb30b12281e5 🔍 |
| SHA256 | a7b586dcd07611e88fab25dd672911283a50a1a55aca9112b347a6e70cf90c1e 🔍 |
| SHA3 | db905851989c3e32a72cbcc6b5dc1fed159b491674d4c0d3cd8346640fd43090 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x10a8 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 6.46966 |
| MD5 | 50a9909963abed74aa034945488e564d 🔍 |
| SHA1 | 7fe6297c24fd32f1d65ff60409a99833189cd52f 🔍 |
| SHA256 | 10bb16806ae5f75890000b0844230cc9054f8a94e727fff7f4e86f6aaf25fc2e 🔍 |
| SHA3 | 5f373fa49fd6b880a49d9a5d57ca3ca7292a4a7289fa2427514d8abb13338798 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x25a8 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 6.26251 |
| MD5 | a413e7c9e879cae338eafd7070cd6532 🔍 |
| SHA1 | b5b588e4b740e5e7adea6ec7a53322119980b99b 🔍 |
| SHA256 | 91c27a0a6682b326bec8f1129f129e630ef1d162b9231d61ebfa3a66424c80dd 🔍 |
| SHA3 | ea8ff0defc88087fecbc7338df953953f8635b89b1a9bc8443e6bf6e6284d105 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x4228 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 6.14451 |
| MD5 | 6cd77c2ec4d4787c7927814457b19342 🔍 |
| SHA1 | 56598edf02556e9efbc251e62871ae4ce42a84b9 🔍 |
| SHA256 | 102311a49d4de8c6ba26f2af984440fbdc9e1893099631f9dfc017ff751a1b61 🔍 |
| SHA3 | 01e2e04d6ce3150bf3812c5b760d3b7d392de42dcb2d9c2818beb1e05a12e6d7 🔍 |
6
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x5488 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 6.00112 |
| MD5 | f32e24d763480b52e22bbb10988fb2cc 🔍 |
| SHA1 | 352833b20e18503c4c16ae54d053b92f49487fd6 🔍 |
| SHA256 | df30e0e8a7ebc57673dac0b658415585a41045a90838a87ea598a221b1b1eef8 🔍 |
| SHA3 | 13ef4e541ecf009e99f1f548abb58a9b262e3682a3767362965d200ea7b1696b 🔍 |
7
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x94a8 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 5.81732 |
| MD5 | 42dfcdfa40fd4bb434f1b412cbb494a6 🔍 |
| SHA1 | 3ae839277fb85a2a99ce88c411e5e5ad9b1970bb 🔍 |
| SHA256 | 1ef5637fa16d7278d452577afaa51dfa467fb6f6d5af44d64dfec59e477450fe 🔍 |
| SHA3 | e232ee0b7aefac7bde3a1b0779c53c1e28578e59f338faf685d13c4e0d077d0b 🔍 |
8
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x10828 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 5.69162 |
| MD5 | 91af1eef7370487112d28d55d6aa410d 🔍 |
| SHA1 | c8193794708d5282957beccebf91cc997896591d 🔍 |
| SHA256 | 3ebf4a47f67fa0ae98cab4088fecabd497a662cf1f49b35f641147269a3125af 🔍 |
| SHA3 | 0b9a4cbd9833c9876368362b9be8fe4fc438e7ede2289c2143ad0fe1ca687995 🔍 |
9
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x1c2cd |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 7.99272 |
| Detected Filetype | PNG graphic file |
| MD5 | 4d63be48a0f9f13f42d7d2d14cee71d0 🔍 |
| SHA1 | 488904676b52b16d6c4214699501e101662c16b2 🔍 |
| SHA256 | d0137de9e7e5b2f775b4d49c127f396176410cfa6414ab3c5eb55984e632920b 🔍 |
| SHA3 | 88da29f166b416c576eacff0ec5b47b46b27bbfe0c4a6160bea11988ac58a04a 🔍 |
MAINICON
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x84 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 3.05309 |
| Detected Filetype | Icon file |
| MD5 | 207579d79fd2079624ba82b94cdf4504 🔍 |
| SHA1 | b9a3cdd934ad6c7ea3b2aeb806688d464ee1997f 🔍 |
| SHA256 | 0d2392e50e50d54d74ac10f3781d1f6ea8e46e259ab0f648d2df3b64be3115d4 🔍 |
| SHA3 | 0d7d004b9928a0d03c14ad707b4160fcb2865e876bd7de306189438a443d65e5 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x1f8 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 3.21331 |
| MD5 | aeb4f2378e47b4de267988d9e1666fe2 🔍 |
| SHA1 | c097fa29e3324f553fe6916fa073f26c9c3cf06d 🔍 |
| SHA256 | 2439a89f5982de0195045cc0acdcf2d8c347a2a06905c9164377f11177dabf3d 🔍 |
| SHA3 | cf4c3e217d6d7512ecdb89aba3a173ea40ab68ef2a3ae8c4149692122e623a56 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x716 |
| TimeDateStamp | 2025-Jul-16 02:28:40 |
| Entropy | 5.26758 |
| MD5 | 5e0f4b7ae0e8e09db40209f0c8d59e2e 🔍 |
| SHA1 | b9ed3edd6e73ac5b17f0baad95ac24320a6de8f7 🔍 |
| SHA256 | a87fe171fba769aacaf45819d0b3c2239a0f7d85c8fcaa36d747afb61801dc08 🔍 |
| SHA3 | ea618875ecfa47de6e6dff45fea74c589c867337273dd407c03e96d5c514a44d 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.5.0.0 |
| ProductVersion | 1.5.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| FileDescription | BestFlashTool |
| FileVersion (#2) | 1.5.0.0 |
| ProgramID | BestFlashTool |
| ProductName | BestFlashTool |
| ProductVersion (#2) | 1.5.0.0 |
| Resource LangID | English - United States |
|---|
TLS Callbacks
Load Configuration
RICH Header
Errors
[!] Error: Could not reach the TLS callback table.
[*] Warning: Section .text has a size of 0!
[*] Warning: Section .itext has a size of 0!
[*] Warning: Section .data has a size of 0!
[*] Warning: Section .bss has a size of 0!
[*] Warning: Section .idata has a size of 0!
[*] Warning: Section .didata has a size of 0!
[*] Warning: Section .edata has a size of 0!
[*] Warning: Section .tls has a size of 0!
[*] Warning: Section .rdata has a size of 0!
[*] Warning: Section .vmp0 has a size of 0!
[*] Warning: 1 invalid export(s) not shown.
Leave a comment
No comments yet.