9d0410eeae1ceb669ebba66826035f9bf0ba6b3d41d2e9e9688bdd9915fed671

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Jun-10 20:48:39
Detected languages English - United States
Debug artifacts C:\Users\Layn Void\Desktop\hookloader\output\hookloader.pdb

Plugin Output

Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
  • LoadLibraryExW
 Functions which can be used for anti-debugging purposes:
  • FindWindowW
 Possibly launches other programs:
  • system
Malicious VirusTotal score: 4/68 (Scanned on 2026-07-21 02:27:04) APEX: Malicious
Bkav: W32.Malware.B6FBD3CD
Elastic: malicious (moderate confidence)
Symantec: ML.Attribute.HighConfidence

Hashes

MD5 43e49fd65e1171ecee61942fda2637f7
SHA1 ea905b51b869adc346bd79596a6ad142a424d166
SHA256 9d0410eeae1ceb669ebba66826035f9bf0ba6b3d41d2e9e9688bdd9915fed671
SHA3 74c3af188a208a44f062786fe5859e3efa18672fecb8abd104c3ed8272dd2637
SSDeep 768:iiOU4eUxAwxCspzoqmQ+hR3kWhYmYH5+vdNGcqbRT+38v:zOUnfwUsWPqmYH0NGcq3
Imports Hash 82dcbc4be8faa5d8721b1224f16876c7

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf0

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Jun-10 20:48:39
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x6400
SizeOfInitializedData 0x4600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000006310 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x10000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c6bef07e3ce8b6f85b4591317100a131
SHA1 1ab0681b6e5d3b3e6fc75ef4e506c0d135bfcaaf
SHA256 f59926827d9da03ac97869639f3a0b2c373b2842e3b4987f2b18bfa9888aeb3d
SHA3 a7f4d6d4dfbca8aa451161014424af7b5f319a42a4217a94f4677db205d6e836
VirtualSize 0x62a8
VirtualAddress 0x1000
SizeOfRawData 0x6400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.03516

.rdata

MD5 ce82b5e44efe4d0590511679291d24c2
SHA1 50b5227edcf92fd806462f76c8ae2b5158f5d49d
SHA256 5c3ed041559f1258f64587832a96cbaee9f9f8a9c1757037585189b98f669c91
SHA3 3dcefe40a9c9dc7d9df5122c3ecdcfd4bea903bcb0fca2b9e8b14a0053732e61
VirtualSize 0x377a
VirtualAddress 0x8000
SizeOfRawData 0x3800
PointerToRawData 0x6800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.7964

.data

MD5 89fb886b49080c034059a87e93fc685d
SHA1 80547924eaad9913667c4204da889b891e74a4fd
SHA256 8044604592598cadfc38e4c964f24e3622608415e4b66481d45a209ca2371ceb
SHA3 0d0aba7c407cb5d28a2669af583e0898f2389318c49ee676dfaa9dcadb583ce4
VirtualSize 0x330
VirtualAddress 0xc000
SizeOfRawData 0x400
PointerToRawData 0xa000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.63808

.pdata

MD5 6f5d1dfe9c252f2c5f5e35d9152727e7
SHA1 819b1655c5d8947770bc863012db5f8ddc3fb8f2
SHA256 517412f4e6061028ac345851b638d0a281b0376dc9777849c8dc1608bd6322e9
SHA3 d02a9f7a507b09228f7efd642c3ef9d650d0a3411e82a97259454fe49eb6596c
VirtualSize 0x5c4
VirtualAddress 0xd000
SizeOfRawData 0x600
PointerToRawData 0xa400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.20503

.rsrc

MD5 ae95088ed848b39aad014fdd45607faf
SHA1 9e9053664fdab4363eb31b1cb601c87da71582d0
SHA256 3749d4275556b89ca21309f85c9be1c1409e5711e93414c0468a5d0d5c87fe8c
SHA3 7fdb8b9861174597d34d75522adea49ba62452e38c33cf63f6cf2ef81622bd06
VirtualSize 0x1e0
VirtualAddress 0xe000
SizeOfRawData 0x200
PointerToRawData 0xaa00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.7015

.reloc

MD5 1a04002fed727a80f313261ab1a56157
SHA1 1c7d415da89edb6b57c08d48e3c9f7498a632e12
SHA256 80815c773775f37635322e518c9418d7552402d0fb4a92c73d4b7dacd8b498d6
SHA3 fac4c701c593f576304102c4f3adac8087a9eba23c855955ba3dc10dc651811a
VirtualSize 0x9c
VirtualAddress 0xf000
SizeOfRawData 0x200
PointerToRawData 0xac00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 2.11949

Imports

dbghelp.dll ImageDirectoryEntryToData
KERNEL32.dll LocalFree
FormatMessageA
GetModuleFileNameA
SetConsoleTextAttribute
SetConsoleScreenBufferSize
GetStdHandle
SetConsoleMode
SetConsoleWindowInfo
GetConsoleScreenBufferInfoEx
GetModuleHandleA
GetConsoleMode
SetConsoleScreenBufferInfoEx
LoadLibraryA
GetProcAddress
SetConsoleCP
FreeLibrary
GetConsoleWindow
SetConsoleOutputCP
SetConsoleTitleW
LoadLibraryExW
GetLocaleInfoEx
FindClose
FindFirstFileW
GetFileAttributesExW
GetFileInformationByHandleEx
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetModuleHandleW
GetLastError
CloseHandle
AreFileApisANSI
CreateFile2
USER32.dll FindWindowW
SendMessageW
SetWindowLongPtrW
SetWindowPos
GetWindowRect
ShowScrollBar
GetWindowThreadProcessId
GetWindowLongPtrW
SHELL32.dll #680
ShellExecuteExA
MSVCP140.dll ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll __current_exception_context
__current_exception
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
__C_specific_handler
memset
_CxxThrowException
memmove
api-ms-win-crt-heap-l1-1-0.dll free
_set_new_mode
malloc
_callnewh
api-ms-win-crt-runtime-l1-1-0.dll _register_thread_local_exe_atexit_callback
_c_exit
_cexit
_register_onexit_function
_crt_atexit
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
system
_set_app_type
_seh_filter_exe
terminate
abort
__p___argc
__p___argv
_errno
api-ms-win-crt-convert-l1-1-0.dll strtol
api-ms-win-crt-locale-l1-1-0.dll _configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0.dll __setusermatherr
api-ms-win-crt-stdio-l1-1-0.dll __p__commode
_set_fmode
api-ms-win-crt-string-l1-1-0.dll strlen

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jun-10 20:48:39
Version 0.0
SizeofData 84
AddressOfRawData 0x9450
PointerToRawData 0x7c50
Referenced File C:\Users\Layn Void\Desktop\hookloader\output\hookloader.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jun-10 20:48:39
Version 0.0
SizeofData 20
AddressOfRawData 0x94a4
PointerToRawData 0x7ca4

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jun-10 20:48:39
Version 0.0
SizeofData 720
AddressOfRawData 0x94b8
PointerToRawData 0x7cb8

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Jun-10 20:48:39
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x14000c000

RICH Header

XOR Key 0x122546b9
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 14
ASM objects (35721) 3
C objects (35721) 10
C++ objects (35721) 27
Imports (35721) 6
Imports (33145) 9
Total imports 162
C++ objects (LTCG) (36247) 1
Resource objects (36247) 1
Linker (36247) 1

Errors

Leave a comment

No comments yet.