8a56805e0e47c07cbe5fdeaa152370d67e2f066ff3044a3df8c830ce62f90a87

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2016-Jan-16 09:49:24
Detected languages German - Germany
Debug artifacts d:\Soldner\SecretOps\Game\bin\ReleasePDB\SoeldnerSecretWars.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 6.0 - 8.0
Microsoft Visual C++ v7.1 EXE
Microsoft Visual Basic v5.0 - v6.0
Microsoft Visual C++
Microsoft Visual C++ v6.0
Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • CurrentControlSet\Services
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Can access the registry:
  • RegCloseKey
  • RegOpenKeyExA
  • RegEnumKeyExA
  • RegQueryValueExA
 Can create temporary files:
  • GetTempPathA
  • CreateFileA
 Enumerates local disk drives:
  • GetVolumeInformationA
  • GetDriveTypeA
  • GetLogicalDriveStringsA
Info The PE's resources present abnormal characteristics. Resource 7 is possibly compressed or encrypted.
Resource 8 is possibly compressed or encrypted.
Resource 9 is possibly compressed or encrypted.
Resource 10 is possibly compressed or encrypted.
Resource 11 is possibly compressed or encrypted.
Resource 12 is possibly compressed or encrypted.
Safe VirusTotal score: 0/57 (Scanned on 2017-02-01 10:59:14) All the AVs think this file is safe.

Hashes

MD5 508d8094be65eaae4d481d40aacb2925 🔍
SHA1 272a1651a7e6ef80925d864bbb89113fb3498ab4 🔍
SHA256 8a56805e0e47c07cbe5fdeaa152370d67e2f066ff3044a3df8c830ce62f90a87 🔍
SHA3 c25f45593c9fc5295c34c79c415365ee9263a4733c8566f369846e0ffe3d8f49 🔍
SSDeep 6144:DCPMR9XGPGLeL2mxG4Byypl7i74B7RDYYO5:uPMR9XRmcy6e 🔍
Imports Hash b0e2958000da8c8d44040544331ed972 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2016-Jan-16 09:49:24
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 7.0
SizeOfCode 0xc000
SizeOfInitializedData 0x50000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000BFD0 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xd000
ImageBase 0x1c000000
SectionAlignment 0x1000
FileAlignment 0x1000
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x5d000
SizeOfHeaders 0x1000
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c82008abc8065fd850d95485ef47464d 🔍
SHA1 e525cf0d1921ade095043e2e9e3feedfa0e4c4d2 🔍
SHA256 59f9af111a2377e0b75cfabb419867069d1a438a1de11f9d6bdad8fd85d2524f 🔍
SHA3 7c39deb59e39f5e0621083f5efae42c40a54ac43ed674b0810045171e2b8fec1 🔍
VirtualSize 0xb8bd
VirtualAddress 0x1000
SizeOfRawData 0xc000
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.24628

.rdata

MD5 df86ca25d885b0c00ca3bc2bbef0ff62 🔍
SHA1 27095452c74727b1005063b31aeba965a516a709 🔍
SHA256 5d429094cbcfa2166d44143389dff8ab1666763c06a66b8491ad73d030f6c507 🔍
SHA3 ea5abee2e5665e3fc6969f4786d56c5bfdd5e8f41287c909df6778bca999e25c 🔍
VirtualSize 0x3f92
VirtualAddress 0xd000
SizeOfRawData 0x4000
PointerToRawData 0xd000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.7319

.data

MD5 1a8098b2e28839ba7f1c1276e9b7b55e 🔍
SHA1 8f4e1ec6dabf20a13172dbb9abd93bf32fa92561 🔍
SHA256 9bb239b4145913bb6d754f8dbae6ebc827a1fff915bc62494f2b5e5674ff72f4 🔍
SHA3 1bb1599737ac649cb1352acae61231d2cd13fd68e3c17edf7ae4e39456f8944f 🔍
VirtualSize 0x1148c
VirtualAddress 0x11000
SizeOfRawData 0xe000
PointerToRawData 0x11000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.53469

.rsrc

MD5 59e5f631983f0484e5b459fd0fc5bac5 🔍
SHA1 3f31697d4c6919f4a78d7e6cd52818c6256cb5b1 🔍
SHA256 e9db21a6b4da0f375cde439daef3ccff2530a6f6baa0a51d26eaca8c410449e6 🔍
SHA3 5320e891aa1da27585db16b92baff5813a193ffb4eb23ce32cc2694225384283 🔍
VirtualSize 0x371f0
VirtualAddress 0x23000
SizeOfRawData 0x38000
PointerToRawData 0x1f000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.78015

.reloc

MD5 6ead4cda1c0d6b498488a0c89f5bfb27 🔍
SHA1 9b8380973fe1f6677ac4200d4ddafddf1e339363 🔍
SHA256 ee695a526a57a4f97635626bc73008fc87992f5711dc93e30b2bfd75330eda88 🔍
SHA3 ff9d070e72564a8fa29edac953094a80344a515e144b86207e064ebd679d0ab4 🔍
VirtualSize 0x14f8
VirtualAddress 0x5b000
SizeOfRawData 0x2000
PointerToRawData 0x57000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.57246

Imports

SHELL32.dll SHGetFolderPathA
MemoryManager.dll ?FreePooled@CMemoryManager@memory@@QAEXPAX@Z
?AllocPooled@CMemoryManager@memory@@QAEPAXII@Z
?MemMemory@memory@@3VCMemoryManager@1@A
ObjectFactory.dll ?Init@CApp@@QAEHPAUHINSTANCE__@@PADHH@Z
?app@@3VCApp@@A
?append@CString@base@@QAEAAV12@PBDID@Z
??1CString@base@@QAE@XZ
?c_str@CString@base@@QBEPBDXZ
?assign@CString@base@@QAEAAV12@PBDI@Z
?osGlobal@base@@3USosGlobal@1@A
?wlGlobal@base@@3USGlobal@1@A
??0CString@base@@QAE@XZ
?pFrameworkConfig@base@@3PAVCFrameworkConfig@1@A
?m_pSingleton@ISoundSystem@@2PAV1@A
?Close@CApp@@QAEHXZ
?CAppMain@@YAH_N@Z
?PollMsgQueue@CApp@@QAEHXZ
?ActivateSingleplayer@@YAHXZ
?logging@@3VCLogging@base@@A
?Log@CLogging@base@@QAAXIPBDZZ
?ShutDownGame@@YAHPAD@Z
USER32.dll LoadIconA
wsprintfA
MessageBoxA
MSVCP71.dll ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?width@ios_base@std@@QBEHXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?to_int_type@?$char_traits@D@std@@SAHABD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?to_char_type@?$char_traits@G@std@@SAGABG@Z
?eq_int_type@?$char_traits@G@std@@SA_NABG0@Z
?eof@?$char_traits@G@std@@SAGXZ
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?to_int_type@?$char_traits@G@std@@SAGABG@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
dbghelp.dll SymGetLineFromAddr64
SymGetSymFromAddr64
StackWalk64
SymLoadModule64
EnumerateLoadedModules64
SymGetTypeInfo
SymEnumSymbols
SymSetContext
SymGetModuleBase64
SymFunctionTableAccess64
SymGetModuleInfo64
SymCleanup
MSVCR71.dll ??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
__CxxFrameHandler
_CxxThrowException
fputs
strrchr
fclose
fprintf
fopen
_snprintf
_except_handler3
_local_unwind2
_stricmp
strncpy
_getcwd
exit
toupper
strstr
_mbsrchr
_vsnprintf
memcpy
strcpy
memset
memmove
atoi
strcat
malloc
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??0exception@@QAE@ABV0@@Z
sprintf
_itoa
_strlwr
??0bad_cast@@QAE@ABV0@@Z
WingsCrashReport.dll SendCrashLogTo
KERNEL32.dll GetLastError
CloseHandle
GetStartupInfoA
QueryDosDeviceA
DeviceIoControl
Sleep
GetTempPathA
GetSystemDirectoryA
WriteFile
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateFileA
GetCurrentThreadId
GetCurrentProcessId
LocalFree
IsBadStringPtrA
VirtualQuery
SetUnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
ReleaseMutex
GetCurrentProcess
WaitForSingleObject
CreateMutexA
GetLocalTime
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
GetFullPathNameA
GetSystemTime
GetTickCount
ExitProcess
GetComputerNameA
TerminateProcess
FormatMessageA
GetCurrentThread
ADVAPI32.dll RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA

Delayed Imports

103

Type REGISTRY
Language German - Germany
Codepage UNKNOWN
Size 0xb0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06489
MD5 4eb2767f18104c0f992da8cae1330dc5 🔍
SHA1 c426d504388e6a627e3e64d8e1cd93552e9cfa3b 🔍
SHA256 b7fb4ecb7cff1e7c98378d2ee37345ee552b5851e66c65e6cd2727d7b7d78db3 🔍
SHA3 52b9e757a05a1bfe00d518df2a0ba50fbe97ef1ba882da059143dedca5dbfd09 🔍

104

Type REGISTRY
Language German - Germany
Codepage UNKNOWN
Size 0x2bd
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.38641
MD5 deb4d0ea6651480c76ea8397e582e185 🔍
SHA1 5dbb740bcf30ee7261c9740c2b345059d59e7556 🔍
SHA256 9073de9d06efa8a4341d9d1c75835d5e014e74467c9d130f1fbfa1bac8bbdf78 🔍
SHA3 f7f48a9c479e2ead9fac821ac50867531b9dabf924fcde2424ec5f7012996b90 🔍

1

Type TYPELIB
Language German - Germany
Codepage UNKNOWN
Size 0x1138
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.16154
MD5 ed8fee163574bba66a71dd83c2da3baf 🔍
SHA1 ea9cb6fc85b16d43f8de82d6e200f076c6329523 🔍
SHA256 44e4c1d5c2d8d4ef3ab178ae64a1b421edf547f4df1385d548df3ce84d0d265f 🔍
SHA3 c79e0a45359e5f963b38bd12a7cfb8a234689ab20ebb365527ad83218e635278 🔍

1 (#2)

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.36784
MD5 4ad043e5445578a82b5f0f56c1868c12 🔍
SHA1 47f6a4d6d761fd7cef91a0e40b610c39b82549d1 🔍
SHA256 7552ebb080c3f0c3a3d31dec17a8b7a2c1f0186293f22feb447abb7fb196dff3 🔍
SHA3 211bb79978d0e4cd87ef40e8e8d26d15861dfde21c60373fc9ea7de4e6861489 🔍

2

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x5488
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.32419
MD5 1ac7223a8b495fe25c7bb83062818e39 🔍
SHA1 4dfe32c51fb40fed694b46cc851608ddfeae38c9 🔍
SHA256 ec51a9a3bd792331675dd078ff43eef249829e564440beff0326d5754647f60e 🔍
SHA3 5527c0e967a19dfc48162f9bf5d75e21c7b3d155771b9c1e510afc45e8f13415 🔍

3

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.3638
MD5 b7c555e1b3807215248efd9a83e49c2c 🔍
SHA1 207a60fdd2e4022dc13592be3f0d3dbaa1a76141 🔍
SHA256 91ba8645fcdeff53d28933a89b79106e16cdef58bd26507defcadccbc96f0430 🔍
SHA3 f627cd872a1101692e94304e4ea2257216b75b91ebeaff7b55ab963fcd63d6f7 🔍

4

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.29268
MD5 ce5dfbf147d2fad276a119701282d618 🔍
SHA1 4611a14ed4615922b3ac3d7550c6a56e7e77d48f 🔍
SHA256 63c79145290e89d0a049a985c96dbd2a0fb0afb0990ec99c2a1da2ba2facfe8d 🔍
SHA3 e6b2206a86a15f05eef03a4fda8330fcda43942eb6588b1ff2528c1bbaed8d7f 🔍

5

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.31932
MD5 fd3ce6e9626fe05f72b05d0f1ff06777 🔍
SHA1 cdf7996c0679b41a30d1b4e8e96f37b216585fef 🔍
SHA256 6623b408a7423ebf27efd7fdbfe0a45cd2a5601a56bf9e6b10ca34ba3c84d980 🔍
SHA3 490a3cf233cbe4b2da2b87afdc073ee6c1354d730f5807ea52c18449fecbb98e 🔍

6

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.02094
MD5 309a1b3641f7a16d9845050c356f8eef 🔍
SHA1 bf4eb847d2e70bef0001773771fec41e0ab19908 🔍
SHA256 f5da5827df77ff3f41c8ea8fff9e0d7683cb57bdf02c33333fc14abf4d7b771b 🔍
SHA3 571ea0d73649cc2ebb146e1714f2e4ff0d5327650c053d928d002b96fbb56367 🔍

7

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x70a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.58451
MD5 29922b339ece413d2e67b2d1bd5d958a 🔍
SHA1 ebd2107eb105085a1157d1da0cf543b1dcf7b938 🔍
SHA256 c47b7c889d9a3bd9e8d8f6fc6b5d09522a4f0218d7de0454aac3557813e77f6b 🔍
SHA3 022572e19703c020241169177566d09cd30e5c22bcc7beb52c503cd4ba001412 🔍

8

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x4048
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.53991
MD5 550dc09d30bcdb507d41f6f6761bebac 🔍
SHA1 e92c75f86f507a8125be2add93195fbd19bae714 🔍
SHA256 3e0beeef1373938b8d8ef55bfbd3f2f51d9be5190879e93abe52473895755d9f 🔍
SHA3 030d42af1f66dfbfaef7b1b1b1eb3b55dd797daa169621feb1ae76172fb59486 🔍

9

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x3228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.5814
MD5 c3144899027fab8b1f0d8c2ffb3f2500 🔍
SHA1 eff49451f8b7d69a4574dd95a70530e48cf1276f 🔍
SHA256 434a0bc0b363f87a271dfe982eaef733f0125d505039e076fb546f51025ad17b 🔍
SHA3 ad1b45a9a0e698e86e683cc0b07ec8f1252a122f84e787523fd27b4f9edb2cc7 🔍

10

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x1ca8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.50642
MD5 3c7197939fa7770191f99a9375b4dd23 🔍
SHA1 ffc0fb6c30f536ceff6adcbb97e4e787d9f176f6 🔍
SHA256 8fb68a00f18645240adfb328deb917fcae746afb72026942f065cd821d592e70 🔍
SHA3 4a43d977221f96b80dd2f93bbd281d610ecb8323128bfa539fe6404fc2ece5f0 🔍

11

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0xca8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.52373
MD5 ed763314934aabf1345e9ff3796ce141 🔍
SHA1 86911a766ba50f901c2c92a83395f7518ce3df08 🔍
SHA256 65715f37b6abcb6aa741af6fa0fe121c09a21a326bf653fd6a3e27d3f68906ff 🔍
SHA3 cea549a3547976b94d4ad4fc2546e4fda857e414fb5c2f72e8669dd0aaa7e748 🔍

12

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x368
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.14604
MD5 1a634498ba4da13bd983b9749bef5b2a 🔍
SHA1 bd0cc2c6aa2ea9c3ad657dc239d48c4643d10122 🔍
SHA256 178ede3ad51849eb8b2d019cd22cb08961d6b3083f11c7ecb5d2c2313bb0030b 🔍
SHA3 4370ba4d0d6776a112196611fc376a344bf7fcc921e8cbcc603430b41b860594 🔍

13

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x2ca8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.69655
MD5 e2d81093332023e80db3983a219a43aa 🔍
SHA1 a1ff54ad2d25fc89df6081b4f4704e544564d633 🔍
SHA256 3343d8a63382aba2b783e818395b81ed08fa22fa4bc0f723ff68384471f3c925 🔍
SHA3 c50c5bded6e0a45b37bb973f054806df094201b076c465ed20823cf07196a6e5 🔍

14

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x1bc8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.71139
MD5 7bacba9f6e46e1fee696f92a818b0702 🔍
SHA1 137499250a1c37126414681b343df0e0f25bf6d8 🔍
SHA256 e1ca72973524a5c431f0e944c25e4bcc92ee779ed219b8e2b2a59f06150c0fcd 🔍
SHA3 9622f91bef7920992b5b42a1a35e53ea0d6d5a5ec7ae2532ee9c30aed5752e1b 🔍

15

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x1628
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.79765
MD5 7a6848e3262a6df5711f43f5a38c39b0 🔍
SHA1 c3ec59fd267eac1553582d2f8c3c9ef8d0bc762e 🔍
SHA256 26d7e0c76a6469c7337f3cf1ec96085c15c9b1efc5f233a111b237229d5973bb 🔍
SHA3 3e1718d7f49b56b27a6c87ae18483f19dfa2628cd8951e7aa86d03a9c1879343 🔍

16

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.81209
MD5 e9735f01fb93d39bd66ea97b8642fda5 🔍
SHA1 d56b25aded7a150e9162081dc186e49725697881 🔍
SHA256 1312aa7deb5acf7c68e5e1e768a0a4bb07449ce7a2e74507c3d76422056d22e9 🔍
SHA3 e9a106ae35f99296e4f38f7a84c0913af0aafefc0b2f04a9f1a3cd7f4f0e8719 🔍

17

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.74699
MD5 22d5d8fd34c41f7b22fe5c70adef98a8 🔍
SHA1 c5e8a931e366f04747003de60cd5900774d4d952 🔍
SHA256 0995a3ad78a2a86651b73a5e4379292d32b311ba00244527f993e082c4dbe663 🔍
SHA3 69037cf3241d76ab869c2a422fb433ee4d4137ed460a1946b6c995c18a3c5f2e 🔍

18

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.18787
MD5 bfa52ecccd0ec8c71f11d430af7f8671 🔍
SHA1 f36fcc5e5757e66b3cfe66d71924889346555d3b 🔍
SHA256 723f26f16c659af5f1c35da87cfcd78e5d3d2e73cd58fcd312dd45712eeef92c 🔍
SHA3 c6dbbed3343493c48cbc8ce4cf096841cf284d8640781b534bdf263d4bd79b57 🔍

19

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.80566
MD5 f1d60d6f68e3c93e1801a5c801203da6 🔍
SHA1 114c0a6441f91bd218e0f99bc9c90d98d8c4ffc3 🔍
SHA256 26786b5315703231a37bffe31134a7c3673970b42d6795219b3f177f164e8e6e 🔍
SHA3 c8f4317ab31f499f4aedb740ed59a4ce052366c65471f294d4bce92ce9476a8b 🔍

20

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.74279
MD5 eafa8121e13b56503b1a97ce6934c081 🔍
SHA1 545830b28e480423773189264ef8f4ba10cc2164 🔍
SHA256 d7de317babf85a83f74d9df7f055a134c9a6b0adc22d97a254258f3f94bc446c 🔍
SHA3 a9f545d8f9bd2236d4bd3ac651c5bbe2adf14af2ecd972d5c53b31e46cf88519 🔍

21

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.71439
MD5 896f822cee972c94eb2aa06944d3e9ed 🔍
SHA1 54d9cd5c436ea8f868129aed22057fbca590d6ed 🔍
SHA256 427ce99d0984c9541bc28d0db778ca3a657f72c2410d0944885c91cbb3e28308 🔍
SHA3 f27610d503cfc2f0eb395117442e35f8d9bb59601a1c44407684239f97bade4f 🔍

22

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.45131
MD5 b012225a3c787eb5658cc6830206f4f2 🔍
SHA1 9f6f99389b144c4a71e530ea3799e240c63e5be3 🔍
SHA256 fbe688d4c71b374527fcd1e37ffbabce567f6eb2f14a7e16edd12b908195c38d 🔍
SHA3 dc9a516800cba15f4af840ecd8845b779763cbdb583a0849a745fd9080899e5c 🔍

23

Type RT_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.01712
MD5 3f3a27bead1d6e67a6e53f72908409ec 🔍
SHA1 df93ec2a3d56039e52458eb19e05922f180d185c 🔍
SHA256 1c8e9ddd7298dfa8e3e14900b657fb2e9dfd9c7cafd3be3b90b916ed8bff41f9 🔍
SHA3 43d2bdf138908e6309d580caa0abcf8e114844857b1b228522fecc5a41692b01 🔍

108

Type RT_DIALOG
Language German - Germany
Codepage UNKNOWN
Size 0x66
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32484
MD5 6e166e733e3cd49e610f342008e50a60 🔍
SHA1 9e2a8e0889740a36d9c373e019dbc317aa2cc91b 🔍
SHA256 95de2b4b81a6d5b7d1fbf07d83550f0a2cbc3957c482a541d814ad19c4b7a52d 🔍
SHA3 29f0129f036d88d6258d34fd6bc0a836f2e5df392ef06743bcb98b38b71f7217 🔍

110

Type RT_GROUP_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x102
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.25837
Detected Filetype Icon file
MD5 a711e5d3dd557768f3c5f50a0fd42939 🔍
SHA1 684a99246f37c41ee3d7083fe01ac295dd2d7d91 🔍
SHA256 876bc01662c255476a612e3c3258053523282538295bcee1330a4e8dfcea3494 🔍
SHA3 7ee7e2fb65eadd7499c75b57f92dc32e5ada83404e2672bbdcb71d6b2731ff14 🔍

111

Type RT_GROUP_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x30
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.72749
Detected Filetype Icon file
MD5 32100069894cfeb06cfe4a91481e4d34 🔍
SHA1 b3641674238b149eb16092bf434205042edb36a8 🔍
SHA256 212b23fb07b96ef11f49e0c4752648b0462898ad4576772e80cba5efa38a8476 🔍
SHA3 999d929c1894aac6bb60d000f5e9418b27fab0a9b5bde83eceec9f5b131864b0 🔍

112

Type RT_GROUP_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.0815
Detected Filetype Icon file
MD5 74907c92e2fb28a98b5d8fd7cd26c7da 🔍
SHA1 0b8c97f3925b3b438836cd6af27129b09847b0ba 🔍
SHA256 4487de3521abdd37cfb11ee0f774589580b579c95aa8a527748ccb14caca0c9b 🔍
SHA3 07d0da29cc6063037052ee0160824bb33d8a8e6beecaafda3d16f566d64056e5 🔍

113

Type RT_GROUP_ICON
Language German - Germany
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.0815
Detected Filetype Icon file
MD5 149df986da61e35e5f5f12bc3e04cf6e 🔍
SHA1 258ddcd0e2161214e81a65ea9552a5648c452a6e 🔍
SHA256 8003061839748e17187024b076d4af5622ed63c4618356bf2ecd29130e834814 🔍
SHA3 75a36b62ac43d5dc0377467c0b9116949b287995fab3fb1dbe34d7d3106ce283 🔍

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2016-Jan-16 09:49:24
Version 0.0
SizeofData 88
AddressOfRawData 0xe5f4
PointerToRawData 0xe5f4
Referenced File d:\Soldner\SecretOps\Game\bin\ReleasePDB\SoeldnerSecretWars.pdb

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0xd5ae44c2
Unmarked objects 0
105 (2067) 3
ASM objects (VS2003 (.NET) build 3077) 3
C objects (VS2003 (.NET) build 3077) 11
Imports (2067) 2
Imports (VS2003 (.NET) build 3077) 10
Imports (9210) 3
C objects (VC++ 6.0 SP5 build 8804) 4
C++ objects (VC++ 6.0 SP5 build 8804) 5
Imports (2179) 6
Total imports 219
C++ objects (VS2003 (.NET) build 3077) 9
94 (VS2003 (.NET) build 3052) 1
Linker (VS2003 (.NET) build 3077) 1

Errors

Leave a comment

No comments yet.