Architecture |
IMAGE_FILE_MACHINE_AMD64
|
---|---|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
Compilation Date | 2020-Feb-20 23:09:43 |
Detected languages |
English - United States
|
Debug artifacts |
C:\Users\Suzie89\Documents\github\this-repo-contains-the-flag\ProbablyDisastrousBetrayal\x64\Release\ProbablyDisastrousBetrayal.pdb
|
CompanyName | TODO: <Company name> |
FileDescription | TODO: <File description> |
FileVersion | 1.0.0.1 |
InternalName | sample.exe |
LegalCopyright | Copyright (C) 2020 |
OriginalFilename | an_original_bonus_flag_in_the_original_filename.exe |
ProductName | TODO: <Product name> |
ProductVersion | 1.0.0.1 |
Safe | VirusTotal score: 0/73 (Scanned on 2020-03-20 00:28:53) | All the AVs think this file is safe. |
e_magic | MZ |
---|---|
e_cblp | 0x90 |
e_cp | 0x3 |
e_crlc | 0 |
e_cparhdr | 0x4 |
e_minalloc | 0 |
e_maxalloc | 0xffff |
e_ss | 0 |
e_sp | 0xb8 |
e_csum | 0 |
e_ip | 0 |
e_cs | 0 |
e_ovno | 0 |
e_oemid | 0 |
e_oeminfo | 0 |
e_lfanew | 0xf0 |
Signature | PE |
---|---|
Machine |
IMAGE_FILE_MACHINE_AMD64
|
NumberofSections | 6 |
TimeDateStamp | 2020-Feb-20 23:09:43 |
PointerToSymbolTable | 0 |
NumberOfSymbols | 0 |
SizeOfOptionalHeader | 0xf0 |
Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Magic | PE32+ |
---|---|
LinkerVersion | 14.0 |
SizeOfCode | 0x2a00 |
SizeOfInitializedData | 0x3a00 |
SizeOfUninitializedData | 0 |
AddressOfEntryPoint | 0x0000000000002CA4 (Section: .text) |
BaseOfCode | 0x1000 |
ImageBase | 0x140000000 |
SectionAlignment | 0x1000 |
FileAlignment | 0x200 |
OperatingSystemVersion | 6.0 |
ImageVersion | 0.0 |
SubsystemVersion | 6.0 |
Win32VersionValue | 0 |
SizeOfImage | 0xb000 |
SizeOfHeaders | 0x400 |
Checksum | 0 |
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
SizeofStackReserve | 0x100000 |
SizeofStackCommit | 0x1000 |
SizeofHeapReserve | 0x100000 |
SizeofHeapCommit | 0x1000 |
LoaderFlags | 0 |
NumberOfRvaAndSizes | 16 |
MSVCP140.dll |
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ??Bid@locale@std@@QEAA_KXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?uncaught_exception@std@@YA_NXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ |
---|---|
VCRUNTIME140_1.dll |
__CxxFrameHandler4
|
VCRUNTIME140.dll |
__current_exception_context
__current_exception _CxxThrowException memset __std_terminate __std_exception_copy __std_exception_destroy memcpy __C_specific_handler memmove |
api-ms-win-crt-stdio-l1-1-0.dll |
fread
fsetpos ungetc setvbuf fgetpos fwrite _get_stream_buffer_pointers _fseeki64 fgetc fclose fflush _set_fmode __p__commode fputc |
api-ms-win-crt-filesystem-l1-1-0.dll |
_unlock_file
_lock_file |
api-ms-win-crt-runtime-l1-1-0.dll |
_c_exit
_register_thread_local_exe_atexit_callback __p___argc exit _set_app_type _cexit _seh_filter_exe _crt_atexit _initterm_e terminate _initialize_onexit_table _initterm _configure_narrow_argv _exit __p___argv _register_onexit_function _get_initial_narrow_environment _initialize_narrow_environment _invalid_parameter_noinfo_noreturn |
api-ms-win-crt-heap-l1-1-0.dll |
_callnewh
malloc free _set_new_mode |
api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
|
api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
KERNEL32.dll |
RtlCaptureContext
InitializeSListHead GetModuleHandleW GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry IsDebuggerPresent |
Signature | 0xfeef04bd |
---|---|
StructVersion | 0x10000 |
FileVersion | 1.0.0.1 |
ProductVersion | 1.0.0.1 |
FileFlags | (EMPTY) |
FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
FileType |
VFT_UNKNOWN
|
Language | English - United States |
CompanyName | TODO: <Company name> |
FileDescription | TODO: <File description> |
FileVersion (#2) | 1.0.0.1 |
InternalName | sample.exe |
LegalCopyright | Copyright (C) 2020 |
OriginalFilename | an_original_bonus_flag_in_the_original_filename.exe |
ProductName | TODO: <Product name> |
ProductVersion (#2) | 1.0.0.1 |
Resource LangID | English - United States |
---|
Characteristics |
0
|
---|---|
TimeDateStamp | 2020-Feb-20 23:09:43 |
Version | 0.0 |
SizeofData | 156 |
AddressOfRawData | 0x4d54 |
PointerToRawData | 0x3b54 |
Referenced File | C:\Users\Suzie89\Documents\github\this-repo-contains-the-flag\ProbablyDisastrousBetrayal\x64\Release\ProbablyDisastrousBetrayal.pdb |
Characteristics |
0
|
---|---|
TimeDateStamp | 2020-Feb-20 23:09:43 |
Version | 0.0 |
SizeofData | 20 |
AddressOfRawData | 0x4df0 |
PointerToRawData | 0x3bf0 |
Characteristics |
0
|
---|---|
TimeDateStamp | 2020-Feb-20 23:09:43 |
Version | 0.0 |
SizeofData | 736 |
AddressOfRawData | 0x4e04 |
PointerToRawData | 0x3c04 |
Characteristics |
0
|
---|---|
TimeDateStamp | 2020-Feb-20 23:09:43 |
Version | 0.0 |
SizeofData | 0 |
AddressOfRawData | 0 |
PointerToRawData | 0 |
Size | 0x108 |
---|---|
TimeDateStamp | 1970-Jan-01 00:00:00 |
Version | 0.0 |
GlobalFlagsClear | (EMPTY) |
GlobalFlagsSet | (EMPTY) |
CriticalSectionDefaultTimeout | 0 |
DeCommitFreeBlockThreshold | 0 |
DeCommitTotalFreeThreshold | 0 |
LockPrefixTable | 0 |
MaximumAllocationSize | 0 |
VirtualMemoryThreshold | 0 |
ProcessAffinityMask | 0 |
ProcessHeapFlags | (EMPTY) |
CSDVersion | 0 |
Reserved1 | 0 |
EditList | 0 |
SecurityCookie | 0x140007010 |
XOR Key | 0xa6a7df1 |
---|---|
Unmarked objects | 0 |
Imports (VS2008 SP1 build 30729) | 12 |
C objects (VS 2015/2017/2019 runtime 28117) | 10 |
ASM objects (VS 2015/2017/2019 runtime 28117) | 2 |
C++ objects (VS 2015/2017/2019 runtime 28117) | 25 |
Imports (VS 2015/2017/2019 runtime 28117) | 7 |
Imports (26715) | 2 |
Total imports | 127 |
265 (VS2019 Update 4 (16.4.4-5) compiler 28316) | 1 |
Resource objects (VS2019 Update 4 (16.4.4-5) compiler 28316) | 1 |
Linker (VS2019 Update 4 (16.4.4-5) compiler 28316) | 1 |