c434ce8620057d9dd9073b4af8382bf27e85729d152164909f1052775e7ddc70

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Apr-29 15:20:43
Debug artifacts D:\a\defold\defold\share\ext\luajit\tmp_win32\LuaJIT-3e223cb8a41cff3b92931acb846af7b67a5d2537\src\luajit.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Suspicious Strings found in the binary may indicate undesirable behavior: Miscellaneous malware strings:
  • cmd.exe
Contains domain names:
  • https://luajit.org
  • luajit.org
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExA
  • LoadLibraryExW
Possibly launches other programs:
  • CreateProcessW
Can create temporary files:
  • GetTempPathW
  • CreateFileW
Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
Has Internet access capabilities:
  • InternetOpenUrlA
  • InternetCloseHandle
Malicious VirusTotal score: 7/59 (Scanned on 2026-09-21 09:56:53) DeepInstinct: MALICIOUS
Elastic: malicious (moderate confidence)
Gridinsoft: Trojan.Win32.Wacatac.cl
Malwarebytes: RiskWare.LuaJIT.Abused
MaxSecure: Trojan.Malware.8328611.susgen
Microsoft: Trojan:Win32/Wacatac.B!ml
VBA32: BScope.Trojan.Matanbuchus

Hashes

MD5 e18a0f07a55738e880b46d4a22deca5d 🔍
SHA1 e73ee451f2e97e0802b2ab00115539ecf24fd76d 🔍
SHA256 c434ce8620057d9dd9073b4af8382bf27e85729d152164909f1052775e7ddc70 🔍
SHA3 46c56c20c751ba5d742c0c426601e67746ca629ff470ba6961941e4e50914d08 🔍
SSDeep 12288:qFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:qFs4FZnKsrLdiCUMs/KiesyYA 🔍
Imports Hash 204c20f9b1e6725cce76f6e26eb4806f 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2026-Apr-29 15:20:43
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x9b000
SizeOfInitializedData 0x1f000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0005D951 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x9c000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xbd000
SizeOfHeaders 0x400
Checksum 0xc8a63
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 f6d015017f9ff621248e52d89339b4d6 🔍
SHA1 1b8167f3587b76494af55b481b41243aac84ae59 🔍
SHA256 932f2535456e3632f04d631bbd7f8a182ff368e0f692b471851625bb86b39dad 🔍
SHA3 cc3c9ea058d405bcc0169ed660b3720ecef751ce8e9c98cd63fb3e89565af2f0 🔍
VirtualSize 0x9afd3
VirtualAddress 0x1000
SizeOfRawData 0x9b000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.69994

.rdata

MD5 d8b195f4584969bc0f50d4e3432f0164 🔍
SHA1 1edc64d4fafb9ca0fcdecee52779baf0339837ea 🔍
SHA256 28a2baf2ef22d3d3c4b9d2f16d95933b7a8bd319a63faf7b7373973f9040b497 🔍
SHA3 5dd4f3108b364ee394e4ca195ecca9df64ab5719e547e01ff163fb1ca42fed51 🔍
VirtualSize 0x19bae
VirtualAddress 0x9c000
SizeOfRawData 0x19c00
PointerToRawData 0x9b400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.13629

.data

MD5 b4883c4dd9a3dd2d079d6132574f52ea 🔍
SHA1 ccd6b7bb85933d6ff21af4fd3f0cdd92370ba640 🔍
SHA256 934240c1bd92fb3b3259ae40db62955d821c8520f0adf8f51d2517720623f3e8 🔍
SHA3 3a4a32e430ee17f0dae3ab3788844250cfd611567cdf9a4723df561ba9f6fa44 🔍
VirtualSize 0x1854
VirtualAddress 0xb6000
SizeOfRawData 0xe00
PointerToRawData 0xb5000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.4112

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x80
VirtualAddress 0xb8000
SizeOfRawData 0x200
PointerToRawData 0xb5e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.reloc

MD5 bf3ef3cea7bba038985e4bf33b4b4877 🔍
SHA1 9406178528971ad726f772b495ac90f190e4011c 🔍
SHA256 619a6c67a9c8c8ec01302262b8b4a166fede1f5e593393cf20a0a27eb33d235e 🔍
SHA3 eb26a9e796b2a05992f2a4ff6f25bc7663c3adbee6244d58eb6d93859cb9edaa 🔍
VirtualSize 0x38f0
VirtualAddress 0xb9000
SizeOfRawData 0x3a00
PointerToRawData 0xb6000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.52272

Imports

wininet.dll InternetOpenUrlA
InternetCloseHandle
KERNEL32.dll RaiseException
GetLastError
SetLastError
RtlUnwind
GetProcAddress
LoadLibraryExA
VirtualAlloc
VirtualFree
VirtualQuery
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
Sleep
CreateThread
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
FormatMessageA
VirtualProtect
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
SetEndOfFile
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
ReadFile
CloseHandle
DuplicateHandle
CreateProcessW
QueryPerformanceFrequency
GetStdHandle
WriteFile
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
DecodePointer
GetExitCodeProcess
GetFileAttributesExW
CreatePipe
CreateFileW
GetTimeZoneInformation
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
MoveFileExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
WriteConsoleW
user32.dll ShowWindow
GetDlgItem
GetMessageW

Delayed Imports

__swprintf_l

Ordinal 1
Address 0x47e0

__vswprintf_l

Ordinal 2
Address 0x4810

_fprintf_l

Ordinal 3
Address 0x4840

_fprintf_p

Ordinal 4
Address 0x4870

_fprintf_p_l

Ordinal 5
Address 0x48a0

_fprintf_s_l

Ordinal 6
Address 0x48d0

_fscanf_l

Ordinal 7
Address 0x4900

_fscanf_s_l

Ordinal 8
Address 0x4930

_fwprintf_l

Ordinal 9
Address 0x4960

_fwprintf_p

Ordinal 10
Address 0x4990

_fwprintf_p_l

Ordinal 11
Address 0x49c0

_fwprintf_s_l

Ordinal 12
Address 0x49f0

_fwscanf_l

Ordinal 13
Address 0x4a20

_fwscanf_s_l

Ordinal 14
Address 0x4a50

_printf_l

Ordinal 15
Address 0x4a80

_printf_p

Ordinal 16
Address 0x4ab0

_printf_p_l

Ordinal 17
Address 0x4ae0

_printf_s_l

Ordinal 18
Address 0x4b10

_scanf_l

Ordinal 19
Address 0x4b40

_scanf_s_l

Ordinal 20
Address 0x4b70

_scprintf

Ordinal 21
Address 0x4bb0

_scprintf_l

Ordinal 22
Address 0x4be0

_scprintf_p

Ordinal 23
Address 0x4c10

_scprintf_p_l

Ordinal 24
Address 0x4c40

_scwprintf

Ordinal 25
Address 0x4c70

_scwprintf_l

Ordinal 26
Address 0x4ca0

_scwprintf_p

Ordinal 27
Address 0x4cd0

_scwprintf_p_l

Ordinal 28
Address 0x4d00

_snprintf

Ordinal 29
Address 0x4d30

_snprintf_c

Ordinal 30
Address 0x4d70

_snprintf_c_l

Ordinal 31
Address 0x4da0

_snprintf_l

Ordinal 32
Address 0x4dd0

_snprintf_s

Ordinal 33
Address 0x4e10

_snprintf_s_l

Ordinal 34
Address 0x4e50

_snscanf

Ordinal 35
Address 0x4e90

_snscanf_l

Ordinal 36
Address 0x4ec0

_snscanf_s

Ordinal 37
Address 0x4ef0

_snscanf_s_l

Ordinal 38
Address 0x4f20

_snwprintf

Ordinal 39
Address 0x4f50

_snwprintf_l

Ordinal 40
Address 0x4f90

_snwprintf_s

Ordinal 41
Address 0x4fd0

_snwprintf_s_l

Ordinal 42
Address 0x5010

_snwscanf

Ordinal 43
Address 0x5050

_snwscanf_l

Ordinal 44
Address 0x5080

_snwscanf_s

Ordinal 45
Address 0x50b0

_snwscanf_s_l

Ordinal 46
Address 0x50e0

_sprintf_l

Ordinal 47
Address 0x5110

_sprintf_p

Ordinal 48
Address 0x5150

_sprintf_p_l

Ordinal 49
Address 0x5180

_sprintf_s_l

Ordinal 50
Address 0x51b0

_sscanf_l

Ordinal 51
Address 0x51e0

_sscanf_s_l

Ordinal 52
Address 0x5210

_swprintf

Ordinal 53
Address 0x5240

_swprintf_c

Ordinal 54
Address 0x5270

_swprintf_c_l

Ordinal 55
Address 0x52a0

_swprintf_l

Ordinal 56
Address 0x52a0

_swprintf_p

Ordinal 57
Address 0x52d0

_swprintf_p_l

Ordinal 58
Address 0x5300

_swprintf_s_l

Ordinal 59
Address 0x5330

_swscanf_l

Ordinal 60
Address 0x5360

_swscanf_s_l

Ordinal 61
Address 0x5390

_vfprintf_l

Ordinal 62
Address 0x53c0

_vfprintf_p

Ordinal 63
Address 0x53f0

_vfprintf_p_l

Ordinal 64
Address 0x5420

_vfprintf_s_l

Ordinal 65
Address 0x5450

_vfscanf_l

Ordinal 66
Address 0x5480

_vfscanf_s_l

Ordinal 67
Address 0x54b0

_vfwprintf_l

Ordinal 68
Address 0x54e0

_vfwprintf_p

Ordinal 69
Address 0x5510

_vfwprintf_p_l

Ordinal 70
Address 0x5540

_vfwprintf_s_l

Ordinal 71
Address 0x5570

_vfwscanf_l

Ordinal 72
Address 0x55a0

_vfwscanf_s_l

Ordinal 73
Address 0x55d0

_vprintf_l

Ordinal 74
Address 0x5600

_vprintf_p

Ordinal 75
Address 0x5630

_vprintf_p_l

Ordinal 76
Address 0x5660

_vprintf_s_l

Ordinal 77
Address 0x5690

_vscanf_l

Ordinal 78
Address 0x56c0

_vscanf_s_l

Ordinal 79
Address 0x56f0

_vscprintf

Ordinal 80
Address 0x5720

_vscprintf_l

Ordinal 81
Address 0x5750

_vscprintf_p

Ordinal 82
Address 0x5780

_vscprintf_p_l

Ordinal 83
Address 0x57b0

_vscwprintf

Ordinal 84
Address 0x57e0

_vscwprintf_l

Ordinal 85
Address 0x5810

_vscwprintf_p

Ordinal 86
Address 0x5840

_vscwprintf_p_l

Ordinal 87
Address 0x5870

_vsnprintf

Ordinal 88
Address 0x58a0

_vsnprintf_c

Ordinal 89
Address 0x58e0

_vsnprintf_c_l

Ordinal 90
Address 0x5910

_vsnprintf_l

Ordinal 91
Address 0x5940

_vsnprintf_s

Ordinal 92
Address 0x5980

_vsnprintf_s_l

Ordinal 93
Address 0x59c0

_vsnwprintf

Ordinal 94
Address 0x5a00

_vsnwprintf_l

Ordinal 95
Address 0x5a40

_vsnwprintf_s

Ordinal 96
Address 0x5a80

_vsnwprintf_s_l

Ordinal 97
Address 0x5ac0

_vsnwscanf_l

Ordinal 98
Address 0x5b00

_vsnwscanf_s_l

Ordinal 99
Address 0x5b30

_vsprintf_l

Ordinal 100
Address 0x5b60

_vsprintf_p

Ordinal 101
Address 0x5ba0

_vsprintf_p_l

Ordinal 102
Address 0x5bd0

_vsprintf_s_l

Ordinal 103
Address 0x5c00

_vsscanf_l

Ordinal 104
Address 0x5c30

_vsscanf_s_l

Ordinal 105
Address 0x5c60

_vswprintf

Ordinal 106
Address 0x5c90

_vswprintf_c

Ordinal 107
Address 0x5cc0

_vswprintf_c_l

Ordinal 108
Address 0x5cf0

_vswprintf_l

Ordinal 109
Address 0x5cf0

_vswprintf_p

Ordinal 110
Address 0x5d20

_vswprintf_p_l

Ordinal 111
Address 0x5d50

_vswprintf_s_l

Ordinal 112
Address 0x5d80

_vswscanf_l

Ordinal 113
Address 0x5db0

_vswscanf_s_l

Ordinal 114
Address 0x5de0

_vwprintf_l

Ordinal 115
Address 0x5e10

_vwprintf_p

Ordinal 116
Address 0x5e40

_vwprintf_p_l

Ordinal 117
Address 0x5e70

_vwprintf_s_l

Ordinal 118
Address 0x5ea0

_vwscanf_l

Ordinal 119
Address 0x5ed0

_vwscanf_s_l

Ordinal 120
Address 0x5f00

_wprintf_l

Ordinal 121
Address 0x5f30

_wprintf_p

Ordinal 122
Address 0x5f60

_wprintf_p_l

Ordinal 123
Address 0x5f90

_wprintf_s_l

Ordinal 124
Address 0x5fc0

_wscanf_l

Ordinal 125
Address 0x5ff0

_wscanf_s_l

Ordinal 126
Address 0x6020

fprintf

Ordinal 127
Address 0x6420

fprintf_s

Ordinal 128
Address 0x6450

fscanf

Ordinal 129
Address 0x6480

fscanf_s

Ordinal 130
Address 0x64b0

fwprintf

Ordinal 131
Address 0x64e0

fwprintf_s

Ordinal 132
Address 0x6510

fwscanf

Ordinal 133
Address 0x6540

fwscanf_s

Ordinal 134
Address 0x6570

printf

Ordinal 135
Address 0x6e30

printf_s

Ordinal 136
Address 0x6e60

scanf

Ordinal 137
Address 0x7410

scanf_s

Ordinal 138
Address 0x7440

snprintf

Ordinal 139
Address 0x7470

sprintf

Ordinal 140
Address 0x74b0

sprintf_s

Ordinal 141
Address 0x74e0

sscanf

Ordinal 142
Address 0x7510

sscanf_s

Ordinal 143
Address 0x7540

swprintf

Ordinal 144
Address 0x5270

swprintf_s

Ordinal 145
Address 0x7570

swscanf

Ordinal 146
Address 0x75a0

swscanf_s

Ordinal 147
Address 0x75d0

vfprintf

Ordinal 148
Address 0x7680

vfprintf_s

Ordinal 149
Address 0x76b0

vfscanf

Ordinal 150
Address 0x76e0

vfscanf_s

Ordinal 151
Address 0x7710

vfwprintf

Ordinal 152
Address 0x7740

vfwprintf_s

Ordinal 153
Address 0x7770

vfwscanf

Ordinal 154
Address 0x77a0

vfwscanf_s

Ordinal 155
Address 0x77d0

vprintf

Ordinal 156
Address 0x7800

vprintf_s

Ordinal 157
Address 0x7830

vscanf

Ordinal 158
Address 0x7860

vscanf_s

Ordinal 159
Address 0x7890

vsnprintf

Ordinal 160
Address 0x78c0

vsnprintf_s

Ordinal 161
Address 0x5980

vsprintf

Ordinal 162
Address 0x7900

vsprintf_s

Ordinal 163
Address 0x7930

vsscanf

Ordinal 164
Address 0x7960

vsscanf_s

Ordinal 165
Address 0x7990

vswprintf

Ordinal 166
Address 0x5cc0

vswprintf_s

Ordinal 167
Address 0x79c0

vswscanf

Ordinal 168
Address 0x79f0

vswscanf_s

Ordinal 169
Address 0x7a20

vwprintf

Ordinal 170
Address 0x7a50

vwprintf_s

Ordinal 171
Address 0x7a80

vwscanf

Ordinal 172
Address 0x7ab0

vwscanf_s

Ordinal 173
Address 0x7ae0

wprintf

Ordinal 174
Address 0x7b10

wprintf_s

Ordinal 175
Address 0x7b40

wscanf

Ordinal 176
Address 0x7b70

wscanf_s

Ordinal 177
Address 0x7ba0

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Apr-29 15:20:43
Version 0.0
SizeofData 133
AddressOfRawData 0xb33d0
PointerToRawData 0xb27d0
Referenced File D:\a\defold\defold\share\ext\luajit\tmp_win32\LuaJIT-3e223cb8a41cff3b92931acb846af7b67a5d2537\src\luajit.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Apr-29 15:20:43
Version 0.0
SizeofData 20
AddressOfRawData 0xb3458
PointerToRawData 0xb2858

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Apr-29 15:20:43
Version 0.0
SizeofData 784
AddressOfRawData 0xb346c
PointerToRawData 0xb286c

TLS Callbacks

Load Configuration

Size 0xc0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x4b6200
SEHandlerTable 0x4b326c
SEHandlerCount 16

RICH Header

XOR Key 0xb8e027ba
Unmarked objects 0
ASM objects (33145) 55
C++ objects (33145) 205
C objects (33145) 26
Imports (33145) 3
Total imports 110
ASM objects (35207) 26
C objects (35207) 18
C++ objects (35207) 38
Unmarked objects (#2) 1
C objects (35225) 68
Exports (35225) 1
Linker (35225) 1

Errors

Leave a comment

No comments yet.