d3ffb8c5df24e7d18faaa16b1ad028159165380534592dcc2c1b42c050dd8526

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Jul-28 18:38:47
Detected languages English - United States
Korean - Korea

Plugin Output

Suspicious The PE is possibly packed. Unusual section name found: \x00
Section \x00 is both writable and executable.
Unusual section name found: .idata
Unusual section name found: wnkyludi
Section wnkyludi is both writable and executable.
Unusual section name found: jdlovuen
Section jdlovuen is both writable and executable.
The PE only has 2 import(s).
Info The PE's resources present abnormal characteristics. Resource 161 is possibly compressed or encrypted.
Resource 171 is possibly compressed or encrypted.
Resource 180 is possibly compressed or encrypted.
Resource 182 is possibly compressed or encrypted.
Resource 188 is possibly compressed or encrypted.
Resource 190 is possibly compressed or encrypted.
Resource 192 is possibly compressed or encrypted.
Resource 196 is possibly compressed or encrypted.
Resource 197 is possibly compressed or encrypted.
Resource 198 is possibly compressed or encrypted.
Resource 209 is possibly compressed or encrypted.
Resource 210 is possibly compressed or encrypted.
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 978d57161d78794a6ca7db333cea43f9
SHA1 f97aa5f435895836153a694cf12aea5c01cdfc76
SHA256 d3ffb8c5df24e7d18faaa16b1ad028159165380534592dcc2c1b42c050dd8526
SHA3 30d184114f415ad88af4c0cd4bf7a0edeb035a2fa5f08018a5adec8ece643829
SSDeep 98304:OOKIt7Y/bCPZ8p9aPoUSYCRvHdxb84tSk9D4B14:mykb88p3USYwxY4tSk+I
Imports Hash baa93d47220682c04d92f7797d9224ce

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x148

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2026-Jul-28 18:38:47
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x34ee00
SizeOfInitializedData 0x2b9a00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x009C0000 (Section: jdlovuen)
BaseOfCode 0x1000
BaseOfData 0x350000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x9c1000
SizeOfHeaders 0x400
Checksum 0x5a383f
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x200000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

\x00

MD5 8a30771b2451eaf3c81f116e2d203008
SHA1 3093788db59374186a5360d1ae4b6fb0f35cc2e6
SHA256 c937b06fa4b828ce7f2cb1f9a00aecd11ec890ede3720a9eddb5923467161768
SHA3 26c2fc66035064925eaf48a4265ce7cf210a91761fa693cd71fcc3f42c4469b8
VirtualSize 0x57a000
VirtualAddress 0x1000
SizeOfRawData 0x19e800
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.98877

.rsrc

MD5 7817f1c14d5c5bf3d61ce29a478d7715
SHA1 d9043d193e8a05547c3a1298deb86b374e5b60cd
SHA256 c3a727680620d48de8162495cc337c72c4cf4f1bf3e9d9d76406926cebcbce86
SHA3 7f147d64b0e569b68004f38cc5dfe67e699bea893c5c04c7451f1b85091302bc
VirtualSize 0x68638
VirtualAddress 0x57b000
SizeOfRawData 0x22c00
PointerToRawData 0x19f800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.98173

.idata

MD5 05281cff22ad8f8598d7ceb89a9712b8
SHA1 4b20449396bcf6304140c1ce8849fc05a2e8916b
SHA256 3bb0eb4a1b92a3b6cf4bced9bbfeb0cec9c6ef7be8a8ea77639870c05154ac25
SHA3 32863716fed5b325536c125bd315d4e747f8154513604afcadb95f6b280f95da
VirtualSize 0x1000
VirtualAddress 0x5e4000
SizeOfRawData 0x200
PointerToRawData 0x1c2400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.30872

wnkyludi

MD5 e688a3fd76d7220912ad264cbfdd9393
SHA1 cc43be933559d072e41b7b7c854bb2a0f010c054
SHA256 70f4ecb3bb051bd08096a8fb18d8718e75219f92980ecaab428232c634b4353f
SHA3 cb19d1f4536b6892f30247fb63e1a1b72ba3eb8db9b830300732b836c7c35685
VirtualSize 0x3db000
VirtualAddress 0x5e5000
SizeOfRawData 0x3da400
PointerToRawData 0x1c2600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.05085

jdlovuen

MD5 8ce2f6c9ef69a67871294497da537d3b
SHA1 ff8af37b6b07a83cc5bdb8c06b38c4ccca1b50bd
SHA256 4e60e343fc42863eba16d1ef46a4660422ef62fb4c4db06e576b36cfdb327eca
SHA3 8a3cb6ba680f22b129644589baec1694bd356c2accac55b69bf8b53cc8462763
VirtualSize 0x1000
VirtualAddress 0x9c0000
SizeOfRawData 0x200
PointerToRawData 0x59ca00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.66384

Imports

kernel32.dll lstrcpy
comctl32.dll InitCommonControls

Delayed Imports

1

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.90358
MD5 bc2eafd14e70833a21269f2fc2a67dc1
SHA1 6f0e68eb15f2cb0e5c46db0e1a2e8c277707a2eb
SHA256 433a90814f24390ea959b4c452b4c441e3f85eeb76d603860da11d3937541973
SHA3 6c29d48ace9e47b954cfdfd29f6437df4ad5946481b4da481a546a9655b4fba0

2

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.59607
MD5 8c466f36c28202b6717c02640d4c2cdb
SHA1 760e4d5418872e4e205e7dfd6260058d11744f3b
SHA256 78647a393e4c0c78bb3a2dbdf3a30b78d7878ffca74e850b67dc065fd192f426
SHA3 8b0ce47485362d59b6c823a7a0f122f1e4f703e6cfa9fb6f9070ee34c343db88

3

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.72231
MD5 89eea72c0f917d5214f498400e112809
SHA1 10fec1672661635c8547b9fab4c6adbdb16a3eb4
SHA256 73a846f586f22760a76b938d70dc94276389e0c08eb6d97abf74d4bfbf2977a5
SHA3 6595b1c77953d075ab514b10b337fc18f8fc3d9cbc09929ef7b7323872b2541e

4

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.63429
MD5 04c6d0fa49fb343e0f9ce44854104222
SHA1 8e4c4c8c1351827f49f4f1d1be050b7bb7096575
SHA256 f62c6426dc92617fe70dcfab7ebc29fd7289a1efa8cdbea3e564c7d49721f615
SHA3 a70283dc2e9aead9ab459c56987e1650b750924e7e236696836236e5634f9ef5

5

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.13624
MD5 3f1d89a3fb23e1f350bec475fba5fa14
SHA1 6896e54dd8fdfaf2ce0863a0d29383fbb54fdf0c
SHA256 9b4d89ba12b8b0603a08c26a9a013dc363a5f49f4b95e6abb590dc2d5e1f2221
SHA3 3c093569e8409aafe465ef0dafc0a3a6ec6028db502bd949018dc22ad6e50381

6

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.7595
MD5 a353c9c27b9611ce70ea910630991ee7
SHA1 1094fc306ad6672aad05511d8cedc41cc7a8394d
SHA256 c4178271fb8a9e6ed8de22b9b6450da248fe13f92f5687e1913da0ef79578499
SHA3 03f7f877f0243a88ec8f0ad09c752013bccad1177be74a2c0b76576482f5ff23

7

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.64037
MD5 3cdebb8484cd6f2f473e47bd52094e8b
SHA1 9d1f247dcec8d2fc341e5997de9fe880145ddee8
SHA256 943cd7ea645f0eee421faaf2ccde4811dd5134a455ffd6d4d58928090ece4ceb
SHA3 629a73906d796f088c4aa87ee923a5740630ca4d7d106bf18c230b3fce439b0c

8

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x162c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.10642
MD5 6986371bf646fbdfc922e433e7fa8e9a
SHA1 42775cb06ed5a69828b1fd50bcb69e7e1366266f
SHA256 86467e6711813339d1c63c90eda56fcef4c03efb9ebc3a051ead541f210c4c57
SHA3 77525cf27eea4ecd8427ac7636177aa13f7e78632a0384f6ca3bea21443fbf2d

219

Type RT_BITMAP
Language Korean - Korea
Codepage UNKNOWN
Size 0x535b4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.8117
MD5 0b49faf3c1c59bd12a0b0c94324a6155
SHA1 c1c56c537b335dd7e6ecc86bfdb1a233e8b73cb5
SHA256 a5cbac1587fe5f02ec00fb2f54bf05ce39b2161608c843f1a8614a060764e570
SHA3 f0456f9a6543c789fe0ad75bb9b689bc85f9870f94e6413217152eca6dd86b81
Preview

220

Type RT_BITMAP
Language Korean - Korea
Codepage UNKNOWN
Size 0x1468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.72544
MD5 7456758a00281c7f8e9c213319d951e3
SHA1 1cd602a992f3c41c614a3138b3780ec596263464
SHA256 31144884e5bef330346491d2e4afc9009bd50697890252d7b8e2efb83ea0f454
SHA3 0afaa70683bdfc9f85c50f2323ca67790566b844d54951f4ef00b78632cb3bd5
Preview

221

Type RT_BITMAP
Language Korean - Korea
Codepage UNKNOWN
Size 0x1468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.63262
MD5 e6ac1723c9d620e37d6381a8aa6bcf55
SHA1 2b41770bdf8ebac56fb397394f73b8f30555bdc7
SHA256 b0deca0f37d87bf945f6629294563366eb606d6f69c542a9758aaa7a2bff235f
SHA3 3712ed5d3d997deb3079165466fb5a69ff4ee5bcf66bcd027a1ee889c65391b9
Preview

222

Type RT_BITMAP
Language Korean - Korea
Codepage UNKNOWN
Size 0x2c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.27579
MD5 995ec1011b5a36dd6f0020296c55a462
SHA1 2ceb7e8722c150273ed34b2370917b0f16317252
SHA256 32c110a57fa96b21ef8670f104245fda801aed69d5e3b9f5cf7de4db2272c8e7
SHA3 958e4d4be3de94be927048b545b62bf1b4b23cb828d0a8606ec117aa59133be5
Preview

223

Type RT_BITMAP
Language Korean - Korea
Codepage UNKNOWN
Size 0x2c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.42612
MD5 a7e956b89a81852bed38eeb88c2f2664
SHA1 d8b64fd9645d06256dfe42deb029a39e17c56f2a
SHA256 e3aeb1a29dcb171e03f102d53512c18fab175bedfa3abced8db0566cba8a3bb5
SHA3 7ac42525b413727cd4e6353324d3f611d6f2e0fe69563e1c6a9f8d591963fff7
Preview

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.60141
MD5 feaccd18a36f5678a8e23aab80d3441f
SHA1 16950616c8143c276e94fef236011b92dd204ab5
SHA256 1106319224a0acaabc9f01a45959eeb64b5f9963f89341d929cbe071887c7236
SHA3 dc49852759dd6c64aa9c2c7c1513f519bdacb9d121b35fd6e716bb00604bfd67

144

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x648
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.44419
MD5 df1d2888ea97f29bab4abae812c2c0e9
SHA1 e8ae2ffc61cd997b6bec5ffd2bff1cd9a093a2b4
SHA256 14335f6cb8865849103feb354769fc3ae4ffe58dcfc3a4c2fec517c6b63e22b6
SHA3 3c181ff734c8875075c4343ec16c27ece6f6c8bbab2779e02ed77cf6a8c7d8b7

161

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x74a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91048
MD5 7a1c6a0aef662bc7b2c30bde38d99a29
SHA1 ccfb82a5ad9c414c896573f79521857ac517076b
SHA256 856444080d9d9427c41913c2743a2598e0b993f848f225386e6b5d2e68f3ae32
SHA3 bc49729ecf002181fe7903993aefbf3435ea21f25744c23b8954a661ccff17c9

162

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x37c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.75618
MD5 d9b98dfb1a084f66882a4fe8a9a38aec
SHA1 711df1abc83679f9381683b02930e79b8c83dd38
SHA256 c40a0c1a5054efcba2921f93eba2df976887571a68479bc33619164a87d6c865
SHA3 6c015155ea55da45a649b051fc06287cf1fb674590d072eacdf0407f7c9561d2

171

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x1e56
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.97498
MD5 5e12704e55c127bfaaaa8501293072ec
SHA1 95475520b1e5685071b0095f4e6077a6d1e14bb4
SHA256 a71812f53515a068e3423add6b9158909d0e13c8168ce44ee7393f0c6ba0f8d5
SHA3 842187a592ac2ee0845ad031e211d87f0a504380d33c4355c98ad1586466066d

180

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x18c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.47875
MD5 1afc1a7b30b50c54ba53a9d2788b2986
SHA1 a7d5fbca3cea81a80c753dd78491800013c41cd4
SHA256 06153453e47e0c962ed665330f35ddfae87791b90a5ebfa8be328a312851f6b4
SHA3 8e75b15ab601584505dd9fcf069862f596df709e624227a8320728a0299c74e9

182

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x6c6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.88427
MD5 cdfe3e2695dcdfe417d4075af338143d
SHA1 2124a30a4ad9dce122e9189870170fa0691203b1
SHA256 8ff9c5967f0a063b37b958ed664e8e5e380ad8206b28ea9366ba996ce3cc591d
SHA3 002a00c7a99c9f5f4081454ea8b7bf8104f27f59b5709a063720c4c319a121c9

188

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x180
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.42418
MD5 cc1566a6e397f4067ea68d17211324d6
SHA1 eb1fb4e08a0fda8292aa47d01fddc30f87f9a63d
SHA256 466dc1b28da66e61e8ce56256193b7ed9e6420d39f3053f4bbb9789810f98842
SHA3 3a8833fedf1379527131458b5a0a478ac02873868073abeb4d33fc99c429dfeb

190

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x8ee
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91556
MD5 522363eca48c1353b1fe953a7c88b025
SHA1 ecb539b88659e04a7ead5e0e6b83a27a5884e8b3
SHA256 6ddcd995b6d3a1c4e3437e5b4027b651ff34da2ca43244d172bb592ca17d7656
SHA3 147ddd10aa0ed0a447fc6665d996e411877b1c99c931eb88bf2d4d37a27dd157

192

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x18c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.44371
MD5 34c68c2d0b9fa6d0b3592ad07f8368fe
SHA1 d1fdb915402221126dec5f4c12416b1a623247ce
SHA256 8435b75f1299d3372df0f53dfef87e5a23f8e026d4b08127fd00e2153af0de1a
SHA3 7cef2ac67f513eb841c58be186343af8912cff17c663fc94d0a9ed3d03f35dd1

196

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x142
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.30071
MD5 3fc7b7f2036c931c30f9a42da8947b43
SHA1 dd274f3a24604b5b1ea49b69e84a8c102c5789bc
SHA256 5c7ec5e65308d2610feae76cb0c65a903d9b48489057e5d7fdc925931f68e17d
SHA3 01418bd2b8b97f06d5a8f6900370d49e9790bde8caef2327d0859da804043c56

197

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x124
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.19903
MD5 20ef0fb64587a2326b9bbe9c905d228f
SHA1 c7f64f390700b5f64b369ca7fab4c718206d9a62
SHA256 0e67a24632346ab0c90e131518a6ea3f0ad3ba8bf06f5e414c3600f1f062054b
SHA3 7977c7aa9754e039aa572df79f91f35196e436c372de37a655956898166339bd

198

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x4e0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.84047
MD5 1ec138340a6928acab64b1bbb825d58e
SHA1 36fea004ffd4d24515442bce27821e5107f17a2e
SHA256 7646aa40e53d58488986354013a52536779ca72ddd34fe8147a7e469b5ae86b4
SHA3 7af04a7b99c40bcfa2085da2bb76aabb617952a5a5b94dae7032ff6861432f0e

209

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x498
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.85118
MD5 0cf71b7d44db1bad7da3a6db1f02d67f
SHA1 c7b8777e98fcbc3f6591cc9d158e8cef743c440e
SHA256 d62c72a996840a438f4973da169577297cec2041bb7368ad158fb1d6ec572057
SHA3 e66782ac40d7ccf54b7df3e9a7009892cdcbb47febc2ccebe91e1cc308c2a7da

210

Type RT_DIALOG
Language Korean - Korea
Codepage UNKNOWN
Size 0x14a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.31397
MD5 0e08bf53070f4df05fec0fc084ecc77e
SHA1 33dac85d7037dd48b56679493940b7deb73d1ddf
SHA256 a10d6369da18d6d50fa4e0a1ad7dcd890484c6bc201500c700d81a54e032dd24
SHA3 16644095d4b7f21ef06f511fdcdc69acd88aaa6c392f36e8c0895bb914224701

218

Type RT_DIALOG
Language English - United States
Codepage UNKNOWN
Size 0x3cc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.04514
MD5 0c2773d83aa5a834781d4571e455b980
SHA1 eff323832f40e6e7e643dc7be67ca1e7c4df27de
SHA256 922f54a8520f40a7814a82767e0bf3232f4fc88a676729e25f3b628fdf700191
SHA3 1e8d6d8d4bb6cbb242e20ca2ba03a2d3d555caaea5a05ed9baf7b54df92558ad

11

Type RT_STRING
Language English - United States
Codepage UNKNOWN
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.13072
MD5 bbcccff06f9c031e35e50b9ed20afcaf
SHA1 c099335aa6bb9b331565f8b917cd8897a24bcda7
SHA256 46baa7718ecdb21b1313c52059402ade50680502b6fa1230f2512a74eaffc3c6
SHA3 f58fbf880719a9372650002b02902962eaa5d5ba751eb17270d2e2a5f56667e5

11 (#2)

Type RT_STRING
Language Korean - Korea
Codepage UNKNOWN
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.58574
MD5 c740400fdd335c5a9f052d6f97905877
SHA1 916ea5f94598395d786bae50ec427990cf0d45b5
SHA256 bd9f05adc4e6f8c7b563c1fa78a1f4d2dcafdfe3736c7e97a4550c081f1622d1
SHA3 04a2f102f692f06bfb9b56473f8749436d66e2bc1a253f9ff45549ee537f8d19

200

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82193
MD5 ecdbb0d299915b9075e5cb7d45849921
SHA1 889a0f1537b37afbc1d74ee4a73cc64f2a124c94
SHA256 e69a0700ca0e4792b4ddd218af2def077fcb8de67bb9f2cc05d57aecad2d2838
SHA3 a6d76914447529e474de9026550d8f4c2f2705c56fdc6814f00327ca322246c5

201

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92193
MD5 b11b674bfc0fb9914ca657cd0faf792d
SHA1 930d03c555dee7146d65e9c7d1a1f77e2b5e08fa
SHA256 2905779e20877a74caac7cb5969bbd5ed472ba8ea7032f51f5e689800e86108b
SHA3 88c0eaa9e90df8d7e0b4796f65919a18f29c0271672a495e4b24603a63cb3fea
Preview

202

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30869
MD5 fa1a71df02dcdd951475af725efbdcf7
SHA1 6e0d8d1985968a3375ab54aa590d0153f397281c
SHA256 6d9476383666c2ec636386f570f57a207a4aea1a23521a7d1233971b2edf95bd
SHA3 416d525efdb700a5deb576c8cf21cea33a032d58aaea10dd9b4de3892560657e
Preview

203

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92193
MD5 f688b0015d13f13ad52a7f6fccd01b0a
SHA1 ce147a29496a620da7d0b4fd6a9ecd0c9ab3e8e5
SHA256 d49fa2ba40b3691cb8ddbe8bbaaf925b3770b1ed7a81264b4da2a5a062fced1b
SHA3 f250321bb86ec05bae6f0f74425d2d0f7a752a7f8f21ddd053eed036f1bf53d5

204

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.12193
MD5 cd9a77b8b43316442722ea71af72b978
SHA1 94c6409773e2476a74a96c3375179a3d6dc5c907
SHA256 49c716c27abd1c28495b5003c50d46698e9cb242492ac1ad87388d7b8b3cf8ca
SHA3 4f77fd614c902df812695fe6419cb649362e4d96f8c1b187493d5603b181334c

205

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54644
MD5 df0a614ede096a9374eab2e3b3e7b92c
SHA1 3e7a0442358f9125e10eb7c8fbde240140344a23
SHA256 c742ede19dc63579ff64eaeb26040dc332f907f8dbef0be9db09f1e3cfdc9f09
SHA3 44712e21a82c7f8d4d12ad146dc1f919f655a1a346b8bf48983ee8fdcc2378c0

206

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.00161
MD5 14e109144ff07c20407a948e9a65d07a
SHA1 3195c302728657cc5f11f0348a302b3f6777907a
SHA256 472500fe1569fe87bca5fef9b4f0cc3ddd1914d8b380247490c8a4286840392d
SHA3 dd4fa990499e131e79ce645e600ae3fccdaad454fc58ffb910efad90a29ae9f3

207

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.46096
MD5 416aa14d19884ef63aa32d9b005f9c75
SHA1 dab400ab8f4cb65379f9826e420d1b17a50f586a
SHA256 6cf69e1130c9393eba071860c1338420e4c44eb2acbe4f9d7c40d073efb003c3
SHA3 ea10001c6f1e4a5bb3457d114d717f87e4977d4ad93e8ce511f5762594f5f7b2

IDI_ICON1

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.94375
Detected Filetype Icon file
MD5 2d61e89d68c590b34cab4d3c4075af00
SHA1 cbe8b09c25c67807f924351c6fbda66e3e1f5324
SHA256 8269816308e00a23014b2122c69b5d620eb760d517c2bfc20a582b4743c9aaff
SHA3 a133a3b26b7e31fb8ec4e0aec38e099e75a259e85bfea9018e04193f797ebc88

1 (#2)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

String Table contents

쎁￿翿ኋ슁혱욁耀쎁캁耀뜏븺¹褀臋ã覀觨뫻
伅脀NJ脀dzऀ⯊褸⇨৛믻Ѐ者℀ϛ⤸⇎뻊઺脀促脀᳦褀臰胦먀
㬩쎁C－ÿ먀ºऀ臆쀳끚뭄
캁ࠀ쨱펉혡꜅脀ῆ℀Ǿ臊Ǫ褀諆耈瓹蘏卹䜚$耀ƹ褀⇩Nj뻎Ѐ솁°⥦

Version Info

TLS Callbacks

StartAddressOfRawData 0x8181c0
EndAddressOfRawData 0x8181e4
AddressOfIndex 0xdbe168
AddressOfCallbacks 0xdbe170
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_32BYTES
Callbacks (EMPTY)

Load Configuration

RICH Header

XOR Key 0x756a04c0
Unmarked objects 0
ASM objects (33145) 51
C++ objects (33145) 205
C objects (33145) 31
C objects (VS2003 (.NET) SP1 build 6030) 23
253 (35207) 5
ASM objects (35207) 29
C objects (35207) 22
C++ objects (35207) 93
C++ objects (33134) 5
C objects (35227) 2
C++ objects (VS2003 (.NET) build 4035) 1
Imports (VS2003 (.NET) build 4035) 6
Imports (33145) 31
Total imports 460
18 (8444) 9
Unmarked objects (#2) 31
C++ objects (35227) 237
Resource objects (35227) 1
151 1
Linker (35227) 1

Errors

[*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [!] Error: Could not locate RT_ICON with ID 0! [*] Warning: Resource 200 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 203 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 204 is empty! [!] Error: Could not locate RT_ICON with ID 0! [*] Warning: Resource 205 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 206 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 207 is empty!
Leave a comment

No comments yet.