| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2020-Sep-27 18:20:51 |
| Detected languages |
English - United States
|
| Debug artifacts |
C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb
|
| CompanyName | GitHub, Inc. |
| FileDescription | 1min AI |
| FileVersion | 1.1.48 |
| InternalName | 1min AI |
| LegalCopyright | Copyright (C) 2015 GitHub, Inc. All rights reserved. |
| OriginalFilename | 1min AI.exe |
| ProductName | 1min AI |
| ProductVersion | 1.1.48 |
| SquirrelAwareVersion | 1 |
| Info | Matching compiler(s): | Microsoft Visual C++ 6.0 - 8.0 |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Suspicious | VirusTotal score: 2/66 (Scanned on 2026-06-01 02:19:08) |
Malwarebytes:
MachineLearning/Anomalous.100%
Trapmine: suspicious.low.ml.score |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x110 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
| Magic | PE32 |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x1bc00 |
| SizeOfInitializedData | 0x22600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000882B (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x1d000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x43000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| KERNEL32.dll |
GetModuleFileNameW
GetModuleHandleW FindFirstFileW FindNextFileW FindClose CreateProcessW CreateFileW CloseHandle WideCharToMultiByte GetLastError MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW |
|---|---|
| USER32.dll |
AllowSetForegroundWindow
WaitForInputIdle |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.1.48.0 |
| ProductVersion | 1.1.48.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | GitHub, Inc. |
| FileDescription | 1min AI |
| FileVersion (#2) | 1.1.48 |
| InternalName | 1min AI |
| LegalCopyright | Copyright (C) 2015 GitHub, Inc. All rights reserved. |
| OriginalFilename | 1min AI.exe |
| ProductName | 1min AI |
| ProductVersion (#2) | 1.1.48 |
| SquirrelAwareVersion | 1 |
| Resource LangID | English - United States |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 107 |
| AddressOfRawData | 0x2aab8 |
| PointerToRawData | 0x29ab8 |
| Referenced File | C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x2ab24 |
| PointerToRawData | 0x29b24 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 808 |
| AddressOfRawData | 0x2ab38 |
| PointerToRawData | 0x29b38 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 0 |
| AddressOfRawData | 0 |
| PointerToRawData | 0 |
| Size | 0xa0 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x42d068 |
| SEHandlerTable | 0x42a9d0 |
| SEHandlerCount | 58 |
| XOR Key | 0x530b4f95 |
|---|---|
| Unmarked objects | 0 |
| ASM objects (26213) | 13 |
| C++ objects (26213) | 155 |
| C objects (26213) | 22 |
| ASM objects (VS 2015/2017 runtime 26706) | 19 |
| C++ objects (VS 2015/2017 runtime 26706) | 60 |
| C objects (VS 2015/2017 runtime 26706) | 34 |
| Imports (26213) | 5 |
| Total imports | 89 |
| C++ objects (LTCG) (27040) | 4 |
| Resource objects (27040) | 1 |
| 151 | 1 |
| Linker (27040) | 1 |
No comments yet.