Manalyze report for b05ba2c3debeabdeb3778c200ba7f212fd0c1a6bb6bfe411b501c227bbdf04de

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2026-Sep-25 05:38:22
TLS Callbacks	2 callback(s) detected.

Plugin Output

Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`90624282d9a201df4ec7365ec7fd0087` 🔍
SHA1	`425d447d1f2676c42735aa2ed40228a752e1224a` 🔍
SHA256	`b05ba2c3debeabdeb3778c200ba7f212fd0c1a6bb6bfe411b501c227bbdf04de` 🔍
SHA3	`8ccc195abd959f83f8486213297a35d7148b2574b3242e1ef1c0664abd1bad8d` 🔍
SSDeep	`12288:y8MpGSuI/3vjm6GPkpPkJJj14w+e6NswphGpshSMXlTw3p6:y8G/3KHPJR6NlhGpshSMXlTw3` 🔍
Imports Hash	`9492187b980f3552d06fe51ad0e2d962` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x78`
e_cp	`0x1`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0`
e_ss	`0`
e_sp	`0`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x78`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2026-Sep-25 05:38:22
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x69200`
SizeOfInitializedData	`0x34e00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000001350 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0xa3000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`91ddb5a038ffdead09df4e1ad8a7d8c1 🔍`
SHA1	`54dd008529e9418cc6d8cb45f1dbdbfb888053df 🔍`
SHA256	`33475ac9dd1c51d8786952891df94f67e63d532acaecd8408775eedb331e00b6 🔍`
SHA3	`d0c2ff23766eb68573451618bd643d46ec6770be1d5aacdf2ad19f9dc9bc5f0d 🔍`
VirtualSize	`0x691a6`
VirtualAddress	`0x1000`
SizeOfRawData	`0x69200`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.39951`

.rdata

MD5	`f518582bc41e067228e9063ff0061dbe 🔍`
SHA1	`59f3d1654bb57fa5f8838feb6bd3d636d40b80b2 🔍`
SHA256	`b6918b7c326d1f74a9c2b464915e2f5039b86ba1a9ac5062ca8363077152a964 🔍`
SHA3	`8a3996fa6fa708168122963d55187f9824d38ee37987f5bc830712693122eaae 🔍`
VirtualSize	`0x30f20`
VirtualAddress	`0x6b000`
SizeOfRawData	`0x31000`
PointerToRawData	`0x69600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.71141`

.data

MD5	`99889e38daad515160bcafd5b420e31f 🔍`
SHA1	`053a5659fc5f962098c9a3f645aeadf326d7bc4f 🔍`
SHA256	`92f219dac1ef73420c9d3c27c469b9abf45cded11d7c7c8e85847940e1cd0c21 🔍`
SHA3	`c548db472be82e5f87f36e6127ef8dcd525d52b6a2901108aeb0c1748d479bd4 🔍`
VirtualSize	`0x1d88`
VirtualAddress	`0x9c000`
SizeOfRawData	`0x400`
PointerToRawData	`0x9a600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.3003`

.pdata

MD5	`fe8dafe3bbdb5e1c22ded7a996e21ef7 🔍`
SHA1	`6294bb25f95741ce867936bf3bdbc4cf3b6bf78b 🔍`
SHA256	`5e1293a0877084bff11dcda40da9d6151100aaece2fd3047059a851d6ea1dab8 🔍`
SHA3	`4b72f1879c31914c67fb6d79a2b63381371db5d3d76953916377b8d602f7e3ba 🔍`
VirtualSize	`0x2790`
VirtualAddress	`0x9e000`
SizeOfRawData	`0x2800`
PointerToRawData	`0x9aa00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.72555`

.tls

MD5	`bf619eac0cdf3f68d496ea9344137e8b 🔍`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍`
VirtualSize	`0x20`
VirtualAddress	`0xa1000`
SizeOfRawData	`0x200`
PointerToRawData	`0x9d200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.reloc

MD5	`4f82e150c7c9b7767055f8b748ecaaf6 🔍`
SHA1	`1a8bc334f64e150f617b3e7769c87b0dcf118277 🔍`
SHA256	`ed234e971b0f08c3f574ca56759aa89358f0bbebcf58a2fb8aaff3ff9cae1620 🔍`
SHA3	`80ef74c9e10eea69dbe0e5a8f196d913d1fb3afef48bcb7d578fce5dddeab9bb 🔍`
VirtualSize	`0xf60`
VirtualAddress	`0xa2000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x9d400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.39233`

Imports

SDL3.dll	`SDL_CreateWindow`
KERNEL32.dll	`AcquireSRWLockExclusive` `DeleteCriticalSection` `EnterCriticalSection` `GetConsoleMode` `GetCurrentProcess` `GetLastError` `GetModuleHandleW` `GetProcAddress` `GetSystemTimeAsFileTime` `InitializeCriticalSection` `IsProcessorFeaturePresent` `LeaveCriticalSection` `MultiByteToWideChar` `RaiseException` `ReleaseSRWLockExclusive` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlRestoreContext` `RtlUnwindEx` `RtlVirtualUnwind` `SetUnhandledExceptionFilter` `Sleep` `SleepConditionVariableSRW` `TerminateProcess` `TlsGetValue` `VirtualProtect` `VirtualQuery` `WakeAllConditionVariable` `WideCharToMultiByte` `WriteConsoleW` `__C_specific_handler`
api-ms-win-crt-stdio-l1-1-0.dll	`__acrt_iob_func` `__p__commode` `__p__fmode` `__stdio_common_vfprintf` `__stdio_common_vfwprintf` `__stdio_common_vsscanf` `_fileno` `_get_osfhandle` `_write` `feof` `ferror` `fflush` `fputc` `fputwc` `fwrite` `getc` `ungetc`
api-ms-win-crt-runtime-l1-1-0.dll	`__p___argc` `__p___argv` `__sys_nerr` `_assert` `_cexit` `_configure_narrow_argv` `_crt_atexit` `_errno` `_exit` `_initialize_narrow_environment` `_initterm` `_set_app_type` `_set_invalid_parameter_handler` `abort` `exit` `signal` `strerror` `strerror_s`
api-ms-win-crt-heap-l1-1-0.dll	`_aligned_free` `_aligned_malloc` `_set_new_mode` `calloc` `free` `malloc` `realloc`
api-ms-win-crt-private-l1-1-0.dll	`memchr` `memcmp` `memcpy` `memmove`
api-ms-win-crt-string-l1-1-0.dll	`_isctype_l` `_iswlower_l` `_strdup` `isspace` `isxdigit` `mbrlen` `memset` `strcmp` `strlen` `strncmp` `strnlen` `tolower` `toupper` `wcslen` `wcsnlen`
api-ms-win-crt-locale-l1-1-0.dll	`___lc_codepage_func` `___mb_cur_max_func` `__pctype_func` `_configthreadlocale` `_create_locale` `_free_locale` `localeconv` `setlocale`
api-ms-win-crt-time-l1-1-0.dll	`_strftime_l`
api-ms-win-crt-multibyte-l1-1-0.dll	`_mbtowc_l`
api-ms-win-crt-convert-l1-1-0.dll	`_strtod_l` `_strtoi64_l` `_strtoui64_l` `mbrtowc` `mbsrtowcs` `strtof` `strtol` `strtoll` `strtoul` `strtoull` `wcrtomb` `wcrtomb_s`
api-ms-win-crt-math-l1-1-0.dll	`__setusermatherr`
api-ms-win-crt-environment-l1-1-0.dll	`__p__environ` `getenv`
api-ms-win-crt-utility-l1-1-0.dll	`rand_s`
api-ms-win-crt-filesystem-l1-1-0.dll	`_lock_file` `_unlock_file`

Delayed Imports

Version Info

TLS Callbacks

StartAddressOfRawData	`0x1400a1000`
EndAddressOfRawData	`0x1400a1018`
AddressOfIndex	`0x14009c348`
AddressOfCallbacks	`0x140095a30`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`0x0000000140038760` `0x00000001400387E0`

Load Configuration

Size	`0x138`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0`

RICH Header

Errors

Leave a comment

No comments yet.