8c79906319148f2ba30b421386954c5d7be964914e831c832d84042918489d98

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Oct-16 11:23:04
Detected languages English - United States
TLS Callbacks 3 callback(s) detected.

Plugin Output

Suspicious The PE is possibly packed. Unusual section name found: _guard_c
Unusual section name found: _guard_d
Unusual section name found: memcmp_
Unusual section name found: memcpy_
Unusual section name found: memset_
Unusual section name found: . $*
Unusual section name found: .h2h
Unusual section name found: .,=K
Malicious The PE contains functions mostly used by malware. Leverages the raw socket API to access the Internet:
  • WS2_32.dll
 Functions related to the privilege level:
  • AdjustTokenPrivileges
Info The PE is digitally signed. Signer: Mykolai Skydan
Issuer: GlobalSign GCC R45 EV CodeSigning CA 2020
Malicious VirusTotal score: 5/69 (Scanned on 2026-10-21 11:21:38) AVG: FileRepMalware
Avast: FileRepMalware
McAfeeD: ti!8C7990631914
Skyhigh: Artemis
TrellixENS: Artemis!86934D0AD32D

Hashes

MD5 86934d0ad32d3a78b5f34660db0e3c0f 🔍
SHA1 03d3bb4e8807c2ccfa5ca384cf1fc7ef1eb323e5 🔍
SHA256 8c79906319148f2ba30b421386954c5d7be964914e831c832d84042918489d98 🔍
SHA3 03bc5f8ea34105390b796cbe7fa621791cff4c66b0c0ca3295ae3539c0bf9edd 🔍
SSDeep 393216:EPsmDhlve4Hghej/h7Thk35aKzkInk3AxZfFwKFuF1KvsOvPE:8DhlvaChXq5l4bKDMK0L 🔍
Imports Hash 5482166703c7a0db1fb0f4c96ea9ac6b 🔍

DOS Header

e_magic MZ
e_cblp 0x78
e_cp 0x1
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0
e_ss 0
e_sp 0
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x78

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 17
TimeDateStamp 2026-Oct-16 11:23:04
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xa40800
SizeOfInitializedData 0x66a000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000214D3AA (Section: .,=K)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x2eb3000
SizeOfHeaders 0x600
Checksum 0x14cb329
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0xa407d6
VirtualAddress 0x1000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x568ca4
VirtualAddress 0xa42000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x2ebe4
VirtualAddress 0xfab000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x84e34
VirtualAddress 0xfda000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fptable

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x100
VirtualAddress 0x105f000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x2971
VirtualAddress 0x1060000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x444
VirtualAddress 0x1063000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_guard_c

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x24
VirtualAddress 0x1064000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics (EMPTY)

_guard_d

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x24
VirtualAddress 0x1065000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics (EMPTY)

memcmp_

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x58
VirtualAddress 0x1066000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics (EMPTY)

memcpy_

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x14c
VirtualAddress 0x1067000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics (EMPTY)

memset_

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x78
VirtualAddress 0x1068000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics (EMPTY)

. $*

MD5 d41d8cd98f00b204e9800998ecf8427e 🔍
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍
VirtualSize 0x9802dc
VirtualAddress 0x1069000
SizeOfRawData 0
PointerToRawData 0
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.h2h

MD5 c1a692f3c432e26e752cb29b58e25009 🔍
SHA1 c8007d64b4b48cfb2b00fdf7d780210934ada505 🔍
SHA256 fd9971a686012d302108aead8a95b13b1ba4c6337638ab9040650579b35fdc17 🔍
SHA3 5fe4c10bb09e6632b2ce3e551cc0d2a0a466a58e52aa52b3caf477f9d0bbdd37 🔍
VirtualSize 0x2ab8
VirtualAddress 0x19ea000
SizeOfRawData 0x2c00
PointerToRawData 0x600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.083741

.,=K

MD5 4a8632d8f82e395dd92cfe8692ee4b64 🔍
SHA1 cfb78c8b85b4d4199a536a655ac7e0a8fa0fc24b 🔍
SHA256 237c9e08bdd5dc2bb97c78585b88e6b3d5da4d55b3530a0d2be3772d1da9dee3 🔍
SHA3 cd8a72859d9316ae5398ff16481eac8bea990b8a85243c24816dc180375d12d7 🔍
VirtualSize 0x1475aa0
VirtualAddress 0x19ed000
SizeOfRawData 0x1475c00
PointerToRawData 0x3200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
Entropy 7.82095

.rsrc

MD5 238069b26b32a0f000c59e47f038ff35 🔍
SHA1 e59c01a3e63d03602c1338395e9feb70a99362cb 🔍
SHA256 4d8b0dbde883609912207e9531285334bb175aed0fe9c08d4074ce6779c77a79 🔍
SHA3 9feef8dd81a59d5f7920806d93fd2c8534241d8aaa1e4aeb01e9f18c3eff6eb2 🔍
VirtualSize 0x4eae7
VirtualAddress 0x2e63000
SizeOfRawData 0x4ec00
PointerToRawData 0x1478e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.85315

.reloc

MD5 10230d4f279e2f14491c62f25d9721b8 🔍
SHA1 b07d287892c1f30cd49dbc54531bd540e54b69ea 🔍
SHA256 65c6162da4d4cf175994d70579dff0d4f629c6e222a60545c7200041b65349fd 🔍
SHA3 04edada74b80c7fb1db4d4c053a779ab1474b221dff466f086439c06f5a8df99 🔍
VirtualSize 0xb4
VirtualAddress 0x2eb2000
SizeOfRawData 0x200
PointerToRawData 0x14c7a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 2.09276

Imports

d3d11.dll D3D11CreateDevice
ADVAPI32.dll AdjustTokenPrivileges
WSOCK32.dll WSACleanup
WS2_32.dll GetAddrInfoExCancel
KERNEL32.dll AcquireSRWLockExclusive
USER32.dll AdjustWindowRectEx
SHELL32.dll CommandLineToArgvW
ole32.dll CoCreateInstance
OLEAUT32.dll SysStringLen
GDI32.dll CreateRectRgn
IMM32.dll ImmGetContext
D3DCOMPILER_47.dll D3DCompile
dwmapi.dll DwmEnableBlurBehindWindow
api-ms-win-core-synch-l1-2-0.dll WaitOnAddress
IPHLPAPI.DLL if_nametoindex
bcrypt.dll BCryptGenRandom
CRYPT32.dll CertCloseStore

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5656
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97908
Detected Filetype PNG graphic file
MD5 c4c2def3111a6ed22183661911fd3fd0 🔍
SHA1 a256d162a6186e7e869d2f9a63d9501f9e8bcd59 🔍
SHA256 46979abc27d91769bfa1bdc9047dcc45f4939c2aeae79a2bf16a285927c4e71b 🔍
SHA3 0c71db2cb095cd8296b77706207bf76faa82679fe9108a77f862f7380f28bb5b 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.0354
MD5 8caff3e07e2b21beb04eda9bc59d0d84 🔍
SHA1 6d8fee2679ed3195f25b14285a14f02945ad916e 🔍
SHA256 f5037d72d349593e5a8cc4b2d1f343a5c4a710611908557a74883828b093c2de 🔍
SHA3 f71319931caad0fb1900d5c9315541a7e318e570c0b0e39bfec461b53aa121e7 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.26781
MD5 a55b0652e9b3e4135115458584543542 🔍
SHA1 dfb090684731ad1c1c19279393c0f31129e6baf2 🔍
SHA256 338fc7be6b39d99aa999a013bcf8346dc0197ad8f6921f696672c4732dae3e18 🔍
SHA3 04ee376c0148642523a2c50d3b2f4b2a78df48872cb79191bba5dc20448fb366 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46187
MD5 40f2b1358fdf7f30bfcfefe3417e5994 🔍
SHA1 9ca3c04857fbd05e562141f96b3dc9faf4702d09 🔍
SHA256 765e06a19670ce886ed816fb893a0007269abd95de435626fb4368e203f4e447 🔍
SHA3 cd09a1a6df7a5df072849751d6b0183d710361107296d9cef1e47decedda6f53 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.80142
MD5 f48a2ad558ab838c254c37f7fbc69748 🔍
SHA1 9bfca17c8acacfa8c9ccb9f75704ccc81afd3a5b 🔍
SHA256 7139a96f518d00572d43e33aef834f05ead4b08df5a960eea859de3f8cef0365 🔍
SHA3 7327a54aa0b1219d663e1c1c8fb47aa085843d62be5dcc7348f49ac072c8b7a6 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.07151
MD5 79747a2012e159d6a6db8e875beb576d 🔍
SHA1 2e8fc35b19ee02abcc3114e3ac096837ea9b6e7f 🔍
SHA256 3e070e50e757daadd66e7b9265ab38a65c6a8bb31e5afb4143974e1fb82b5c12 🔍
SHA3 83250c4ac9a722a09663b3e37dcc2e7091b3a75776a99e0ee8c29e171b0698cb 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1a68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.26611
MD5 00aa1c2c31907de1eed4a9332f1657c4 🔍
SHA1 8282e28c8b49073e05f5ca219644255a4241b291 🔍
SHA256 ee05359993d2860df30d46206ba54297df90fb922c6608124f46dfd7637ad897 🔍
SHA3 c1a90254fb6bf863d72b3eacd110d804198c646d91e216482e4cf29ccdec1121 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.58976
MD5 61389d2f587f560d21b79d3c6543cb76 🔍
SHA1 0ed57a31557511992d28d7da29d96693a47a6889 🔍
SHA256 d55c4988614f7ce9fb1a5fdfeb78f227a6d82c4b3926f85f56ab52ffd8e5a560 🔍
SHA3 74ceb43fd1c49e27d150fdc6ed59cf7ba172785c7d4b9b31dca32e8155477e37 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.8878
MD5 b577dc4cccd313edf649182bf97f4810 🔍
SHA1 adcb7efbd7a887d80010b8f3335b689f602934c1 🔍
SHA256 1307051b05ff9d80473cc6a2c817027c24588a420dbff785793e0b1f04846ba8 🔍
SHA3 07673f331ca981d0e30fe3d94673bf57dcb228aac5fbbebc9b23c96e0c01d132 🔍

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.41322
MD5 c426d01007764b2489cecaa5048859b7 🔍
SHA1 3e27e21c9deb6cdf52013fc401b47c1dcff6c5f2 🔍
SHA256 270c79c5e4203bcf03d221fc5601334465786da034d47ac963a917b5dcbb3640 🔍
SHA3 0a0b760a7e4ba64c532885a9b5e1909af4b790fde3e16c680b98152a88764d80 🔍

IDI_MAINICON

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.09569
Detected Filetype Icon file
MD5 ff9af45181e4bc022ba467fc5484fdc4 🔍
SHA1 d6f2ee0c4b0e7691d5b459a4d262c5091b0d3634 🔍
SHA256 f2f58fa003278fc7dbaefdb75d3c9a8ee90e7fae6296bf3cf00333b9a700a5ed 🔍
SHA3 3c34259460f7014f04ad947cd4baaf8b91340abf0bde3cd21e162822350b3314 🔍

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x177
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.7551
MD5 1f7f9f7576fa558def076a2171be2723 🔍
SHA1 47943d6f7e07be45451afe3882521cd2b1596875 🔍
SHA256 e3c59bf1b9a0302d28c72465d056b1cf41c8f7f7fc17a902ef9773eebbb2d847 🔍
SHA3 8684f26c98dc046c33c3e22749cec2e3c9d929a33cda63691ea7ca02624b552a 🔍

Version Info

TLS Callbacks

StartAddressOfRawData 0x1419ea118
EndAddressOfRawData 0x1419eca88
AddressOfIndex 0x140fd2328
AddressOfCallbacks 0x1427ede50
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_16BYTES
Callbacks 0x00000001427E6509
0x00000001403EE620
0x000000014038A9E0

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140fab640

RICH Header

Errors

[*] Warning: Section .text has a size of 0! [*] Warning: Section .rdata has a size of 0! [*] Warning: Section .data has a size of 0! [*] Warning: Section .pdata has a size of 0! [*] Warning: Section .fptable has a size of 0! [*] Warning: Section .tls has a size of 0! [*] Warning: Section _RDATA has a size of 0! [*] Warning: Section _guard_c has a size of 0! [*] Warning: Section _guard_d has a size of 0! [*] Warning: Section memcmp_ has a size of 0! [*] Warning: Section memcpy_ has a size of 0! [*] Warning: Section memset_ has a size of 0! [*] Warning: Section . $* has a size of 0!
Leave a comment

No comments yet.