| Architecture |
IMAGE_FILE_MACHINE_I386
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date |
1970-Jan-01 00:00:00
|
| Detected languages |
English - United States
|
|
Suspicious
|
The PE is possibly packed. |
The PE only has 0 import(s).
|
|
Suspicious
|
No VirusTotal score. |
This file has never been scanned on VirusTotal.
|
| MD5 |
09edcdca213fe39ff97887b534bf132c
🔍
|
| SHA1 |
dae8583e3bc24f84b2a46cd12c94fc88915f2876
🔍
|
| SHA256 |
7e5aa24d5a3c06fef58fdeb6e770e954c96ae6f28b4d0f2e22a88d5b23cddcc9
🔍
|
| SHA3 |
6a09533ba0b8ada5a03bf7c65119504597826297268b34a8f95eb0a8eb229820
🔍
|
| SSDeep |
3:GltlVg//t/vkw/l/1ltlltvl7//llrllVltUt1l9tllFlleN/FlHl//lnll/kll:ya3t/8w9jml/f2lBDTj2lOlYfE
🔍
|
| Imports Hash |
d41d8cd98f00b204e9800998ecf8427e
🔍
|
| e_magic |
MZ
|
| e_cblp |
0
|
| e_cp |
0
|
| e_crlc |
0
|
| e_cparhdr |
0
|
| e_minalloc |
0
|
| e_maxalloc |
0
|
| e_ss |
0
|
| e_sp |
0
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x40
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections |
1
|
| TimeDateStamp |
1970-Jan-01 00:00:00
|
| PointerToSymbolTable |
0
|
| NumberOfSymbols |
0
|
| SizeOfOptionalHeader |
0xe0
|
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
| Magic |
PE32
|
| LinkerVersion |
1.0
|
| SizeOfCode |
0x200
|
| SizeOfInitializedData |
0
|
| SizeOfUninitializedData |
0
|
| AddressOfEntryPoint |
0x00001000 (Section: .rsrc)
|
| BaseOfCode |
0x1000
|
| BaseOfData |
0
|
| ImageBase |
0x400000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
4.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
4.0
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x2000
|
| SizeOfHeaders |
0x200
|
| Checksum |
0
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| SizeofStackReserve |
0x100000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
b95784dbf06b2befffbc0267d743d182
🔍
|
| SHA1 |
342e51d8973a06e16808a3b3375a7d17dd7e208b
🔍
|
| SHA256 |
7db5c2107475580c79ea50db85e49098d835c73656a73241600d492b40ea64b8
🔍
|
| SHA3 |
080f72f6fded613fe2cdb9605d8589209e0701f235abb43bf2ead31747e14cd9
🔍
|
| VirtualSize |
0x200
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
1.13617
|
| Type |
RT_CURSOR
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x2
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
1
|
| MD5 |
b86fc6b051f63d73de262d4c34e3a0a9
🔍
|
| SHA1 |
06d945942aa26a61be18c3e22bf19bbca8dd2b5d
🔍
|
| SHA256 |
38164fbd17603d73f696b8b4d72664d735bb6a7c88577687fd2ae33fd6964153
🔍
|
| SHA3 |
21f29d555c7c5f9e5859a7984c0b2f8ccad9d5245fbe6c4703fd75c0922d7735
🔍
|
| Type |
RT_CURSOR
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x10
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
0
|
| MD5 |
80fda7545b1fc3f70af956e7cbdf33bf
🔍
|
| SHA1 |
1261b0450c221794cd1a59cb2f6f561fa5d40141
🔍
|
| SHA256 |
a0105e01d2acd079eeeba226fef186ff3319c53c9222a7ccbd7e53b799f2606e
🔍
|
| SHA3 |
5df1c3fee47a7c9b83f39b10b8a63fa16c63d7292451e00361c00aa85d7b3d1b
🔍
|
| Type |
RT_GROUP_CURSOR
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x22
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
2.07456
|
| Detected Filetype |
Cursor file
|
| MD5 |
021a568ed7814ccf520321e7397a0704
🔍
|
| SHA1 |
3fce8f7c556facb7a574967cc10c7077b8e6a67b
🔍
|
| SHA256 |
d438cdaf054ce56b50f14cc932fc32cd2ca526aaeb4b2f4ca3c2727f8508a7a5
🔍
|
| SHA3 |
9ae399ca51c0b1d6c41ba5b8cb93b8534527d708da15ada820dd91edda5ab140
🔍
|
[*] Warning: Resource 201 is empty!