Manalyze report for dbeeab472f8d640a23aed41f8501b007

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2016-Jul-10 16:42:09
Detected languages	English - United States Process Default Language
CompanyName	xs-Sol
FileDescription	iMacros to Java Script converter
FileVersion	`1.0.1.0`
InternalName	iMacros to Java Script converter
LegalCopyright	Copyright (C) 2016 xs-Sol
OriginalFilename	iim-to-js-converter.exe
ProductName	iim-to-js-converter
ProductVersion	`1.0.1.0`

Plugin Output

Info	The PE contains common functions which appear in legitimate applications.	`Can access the registry: RegCloseKey RegEnumKeyExA RegOpenKeyExA RegQueryValueExA` `Possibly launches other programs: CreateProcessA ShellExecuteA`
Suspicious	The PE is possibly a dropper.	`Resources amount for 85.0459% of the executable.`
Malicious	The file contains overlay data.	`33584 bytes of data starting at offset 0x62600.` `The file contains a Zip Compressed Archive after the PE data.`
Safe	VirusTotal score: 0/57 (Scanned on 2016-11-27 07:23:39)	`All the AVs think this file is safe.`

Hashes

MD5	`dbeeab472f8d640a23aed41f8501b007`
SHA1	`e0f80c3877459afb76a934c14b45bca4f7eccf04`
SHA256	`c9cf55736c3e67467e8398784f05211afcd128091f2371da6ef9a7cfe6e1355c`
SHA3	`a8ecc9fe2b66008eeaea7d4a963689665365a6468093d9416f40e2fa70ed89c4`
SSDeep	`3072:8uJFS5Aqu+WwjxwK/vB3Auu8u/CqNVqFHlVpAD9Rbub4y:hJM0RKnB3uPBO4y`
Imports Hash	`6011984d7c1f1b97a34d7517a498bff8`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`6`
TimeDateStamp	2016-Jul-10 16:42:09
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_DEBUG_STRIPPED` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED` `IMAGE_FILE_RELOCS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`2.0`
SizeOfCode	`0x5e00`
SizeOfInitializedData	`0x5c400`
SizeOfUninitializedData	`0x8e00`
AddressOfEntryPoint	`0x00001290 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x7000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`1.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x6e000`
SizeOfHeaders	`0x400`
Checksum	`0x68c2c`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NO_SEH` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`fc6ec8fa32daba1a13b2c5d98c4ef55d`
SHA1	`a3398ed645ebbb9c18982e087255222814adaee0`
SHA256	`e56e5294c62032263d37d92b0b4bb92cb73437cdb821981fdba920db35748fc6`
SHA3	`7d37e5a35c77eb4619a106d5fb48ccba237b1c7930e53d93a06ae3a6c07ff718`
VirtualSize	`0x5d70`
VirtualAddress	`0x1000`
SizeOfRawData	`0x5e00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.99288`

.data

MD5	`df6c8045e36e60690935026f3b984b7c`
SHA1	`3b0f5300c67cdc31c047ddcc480f7472deb445c3`
SHA256	`da56ee0569599d618ed8f4c04f5c6ab7d64bc3b7731177e064d038e2527f2377`
SHA3	`167e480380c0cdc4ea6070bb083799bd98a092fd39aec3a2baded7ca488007ed`
VirtualSize	`0x40`
VirtualAddress	`0x7000`
SizeOfRawData	`0x200`
PointerToRawData	`0x6200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.163808`

.rdata

MD5	`15d02e4eabd3bd53908e8b2eed3b9ac7`
SHA1	`23386597402d05c353d2cbb3f94bc2bf37b1d9fd`
SHA256	`9c7e79c04b671cf0ebc78260cf8f77d99e67ae47def5200cdc8e216f8e792ced`
SHA3	`1cafc20b8dd21162558a75a4d2c6a87eac416cd8f9362813881ed50c5ccb6d2d`
VirtualSize	`0x510`
VirtualAddress	`0x8000`
SizeOfRawData	`0x600`
PointerToRawData	`0x6400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.01224`

.bss

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x8c30`
VirtualAddress	`0x9000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.idata

MD5	`8d4f9f7717534cfac580e0ec0968d657`
SHA1	`4ebd454ef45c71dc2dcb2d56a4b935ae76b5c209`
SHA256	`373add59fbe96e311d5e8caf5970c3c7e89761445f6493b8accd794db608b171`
SHA3	`7feb084ac568d8c762e045a734e2f0f7872a50e18e31484f73b80b583e7eb0b5`
VirtualSize	`0xaa8`
VirtualAddress	`0x12000`
SizeOfRawData	`0xc00`
PointerToRawData	`0x6a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.64392`

.rsrc

MD5	`14b4138fb6958bc3da424332ecc84968`
SHA1	`982095eef58de02f46710dfdc354e2e4b33b97af`
SHA256	`7daa253b9cc27bb9933645e416dff3e7de92399b5fd571c8808a311478958179`
SHA3	`5b81204539f0536157384807994a77ca4d084c872f0cc5504842b1da14990a10`
VirtualSize	`0x5ae48`
VirtualAddress	`0x13000`
SizeOfRawData	`0x5b000`
PointerToRawData	`0x7600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.5`

Imports

ADVAPI32.DLL	`RegCloseKey` `RegEnumKeyExA` `RegOpenKeyExA` `RegQueryValueExA`
KERNEL32.dll	`CloseHandle` `CreateMutexA` `CreateProcessA` `ExitProcess` `FindResourceExA` `FormatMessageA` `GetCommandLineA` `GetCurrentDirectoryA` `GetCurrentProcess` `GetEnvironmentVariableA` `GetExitCodeProcess` `GetLastError` `GetModuleFileNameA` `GetModuleHandleA` `GetProcAddress` `GetStartupInfoA` `GlobalMemoryStatusEx` `LoadResource` `LocalFree` `LockResource` `SetEnvironmentVariableA` `SetLastError` `SetUnhandledExceptionFilter` `WaitForSingleObject`
msvcrt.dll	`__getmainargs` `__p__environ` `__p__fmode` `__set_app_type` `_cexit` `_chdir` `_close` `_findclose` `_findfirst` `_findnext` `_iob` `_itoa` `_onexit` `_open` `_read` `_setmode` `_stat` `atexit` `atoi` `fclose` `fopen` `fprintf` `fwrite` `memset` `printf` `puts` `signal` `strcat` `strchr` `strcmp` `strcpy` `strlen` `strncat` `strncpy` `strpbrk` `strrchr` `strstr` `strtok`
SHELL32.DLL	`ShellExecuteA`
USER32.dll	`CreateWindowExA` `DispatchMessageA` `EnumWindows` `FindWindowExA` `GetMessageA` `GetSystemMetrics` `GetWindowLongA` `GetWindowRect` `GetWindowTextA` `GetWindowThreadProcessId` `KillTimer` `LoadImageA` `MessageBoxA` `PostQuitMessage` `SendMessageA` `SetForegroundWindow` `SetTimer` `SetWindowPos` `ShowWindow` `TranslateMessage` `UpdateWindow`

Delayed Imports

1

Type	`RT_ICON`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`3.66545`
MD5	`a87f5d504dbe09cb7d14106747735f6f`
SHA1	`d2bcf77c9c05b40fd8c5b7cbb61bf81a3fdc2e72`
SHA256	`90227093a0b57b3785d401b4fa84afa6423698da6313ed837c486f90bb24b667`
SHA3	`14737a8b9dfc429626cff67fe91a415392e272d70ee9842c4c7fbee92c3bca50`

2

Type	`RT_ICON`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`3.17374`
MD5	`4e26ae9d27dd33f0dadbf5c2f73ddf42`
SHA1	`a446b620f3bbd439cf31bc130eb17bec4cda762b`
SHA256	`9db5fb17f522b94ebc9b0ac5649f64c4b4c65ee7d3a85b87188e86d98716bcde`
SHA3	`d7f26416f2124fc49a0a53abd83eee22a3ab39eaf6ee0c5b8428709312a2e6c1`

3

Type	`RT_ICON`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`3.1585`
MD5	`34fc59ea698e9f04f2a55db97cc45b61`
SHA1	`ba452bbd983a50488e640654dfd66aeeec3ff480`
SHA256	`e6bf33ea44d00066a6aa7eabd8a0c85ada1be72b9a3982ba5011bd5003de3eda`
SHA3	`9de41ef5d511fc99b91cf3621ce2349f6699fe27beebf90f883774996f1a19d8`

4

Type	`RT_ICON`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`2.76607`
MD5	`86613cfcc48d7ce302a65e0c10210a43`
SHA1	`d672b6ec4ac84c8336c7229ccd792ded5027c209`
SHA256	`06d63cf4a9a46f2100013544cdede638422be5ffdcf01e5dd9fcfd262e987db1`
SHA3	`f67f8f39f5eadf64a7d5900df0255ba3a6ac7f745a0a7fea074f30d55b55628c`

5

Type	`RT_ICON`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x10828`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`2.51174`
MD5	`ef43595a60266912d887712edc841e76`
SHA1	`4c9a12d625d93a8086a9f14b3630534d05083e73`
SHA256	`185bf962963ec142f44a6f1ad078662babc97894360907349d60b7cceab128af`
SHA3	`2f1475243271191346d9ac2d2cc77e2dfa380f80afe37bca86d907e003a29072`

6

Type	`RT_ICON`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x42028`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`2.35449`
MD5	`c5294dac84dd8dd261b775ecffcf0685`
SHA1	`416dc6c5c401d2d2f1d52d2a7262ffd6a10d62d8`
SHA256	`a064d885de3b23709cc8508c2ce928f71230ad41780c37b3743fea5ce9044ae3`
SHA3	`3c821883fdc602617c114111a44e413c13dc266423c491ca213576861a96b12d`

2 (#2)

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x6`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`2.25163`
MD5	`5e0743f2e0224a91fc29c860f0055373`
SHA1	`5c5bedde274dbd1e49b33c7866e8a9d3e39f3500`
SHA256	`182983328bc8fda35496780d017a5c8048db72bcf3e0c7a34c002473def448ad`
SHA3	`3f8b5de56add7a2967b4f1cf903c7c959fe919d7aa4f6f61df717a2009c79503`

8

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`1`
MD5	`5d0b26628424c6194136ac39aec25e55`
SHA1	`f3e84b722399601ad7e281754e917478aa9ad48d`
SHA256	`075d3ddf5a3a826e13a92288e853bc4b2cb17fb05367ae865f401a4bb11f05ce`
SHA3	`edd9a75065afa5bb8908de22e7dfa82223ae1d6c8bbb66aca0162116d631ac33`

17

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x5`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`2.32193`
MD5	`cc04a27b7e4921cad6340357dea87002`
SHA1	`6327dc7237d67e8099089dad4c84c2cca4992e06`
SHA256	`debc2f07db78d52d2def07b7bc620d7042367501d9439a62ba09b559a98e0957`
SHA3	`2dbccc2e90fcda82baad7a2059c60bb370e6c2e41815ec714c412cb32a3c61e8`

18

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`1`
MD5	`06d49632c9dc9bcb62aeaef99612ba6b`
SHA1	`e91fe173f59b063d620a934ce1a010f2b114c1f3`
SHA256	`e79e418e48623569d75e2a7b09ae88ed9b77b126a445b9ff9dc6989a08efa079`
SHA3	`7152cdb440cd72bbd4745d106c162de0c3d783a2b06a571256ee4ad66f1593f7`

20

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x3`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`1.58496`
MD5	`00ccbaa75e32b1a555509ae4aa03970d`
SHA1	`b8d2d275b8e18b128218e64a4d6494a97189c8ed`
SHA256	`91c2a5652b88665d5de623e946a59451f7527d2c704c30a5650cc10bb225ff02`
SHA3	`c624bb3c48d93e0c92d7168ea049495ea4f8f3917334ee727feb661a39811f48`

21

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x19`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`3.91327`
MD5	`40828d3ff7217c7a65861dc59f48eca9`
SHA1	`a470be8b8d8b3930cef57d07be5b6ccc158652e3`
SHA256	`2ef475f4ca5d04abd8ffcab4dab7afb4c6fad4b5a9e81956d3df612f34829841`
SHA3	`403b412d02be21161a191d0185c371377a597e0cab01375f50009a2694e19616`

30

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`1`
MD5	`6d5ababb65e9ff214b73e891b4afe6e8`
SHA1	`21ed4c7af50d987589a9029fc0422151be3a0fc2`
SHA256	`913da1f8df6f8fd47593840d533ba0458cc9873996bf310460abb495b34c232a`
SHA3	`61e11a19c7042bb4f5acbce11a6a1540fde023ffcfe584d31dfa2ae51b782e10`

101

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x32`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`4.04307`
MD5	`5543dda0068cad802d1a66943873faf3`
SHA1	`927138fcb8945141429e999e92f5cfbe50082cd8`
SHA256	`4ef9e51eb916d15bf8901e8ae324390cdedf728297a729d0fb823964730801fe`
SHA3	`b06418d850e2e0fcc623d3d85e663444a69583ac633d3fe67e836b2ac2390da5`

102

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x73`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`4.26779`
MD5	`4157a3879e12b81974d71bfe806af19c`
SHA1	`60db79ba441b6900047412fc68a0c543f19210ec`
SHA256	`42acb5929f9230609c7492b908b1e2651edc62eb762246f96c89a24da68aafe4`
SHA3	`7cd2c223212e273e120389f395e9c49c39174ae3a153456ddd693fc62f13459d`

103

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x35`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`4.14776`
MD5	`de13262b91fa9ac1a9a1119dcfa949af`
SHA1	`52b6eda6148a9802ccb4c7d8e35cd2a32c01aad3`
SHA256	`0bf65805e92c10fa89fbeaf313dedeaaf166f8f8cee5827f7478f2a7d4c3bd9d`
SHA3	`50cc4ec50a982a8afc58491e28132f174f86399f71f563d6857394e5632718e6`

104

Type	`RT_RCDATA`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x68`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`4.11008`
MD5	`0098ee1e5282941a123051f1d9056aae`
SHA1	`253ae65f8a2a8d7e3a4135985cc8814739204897`
SHA256	`a9c88a2082dfa1f26c8ee0d9f6f58ad42142baa0f111d239011830a847fea5c5`
SHA3	`6a7e8eefdc45dad04fa11e5ea59b3b0dfbeeda27c6b3d93d8bd862091949881b`

1 (#2)

Type	`RT_GROUP_ICON`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x5a`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`2.76511`
Detected Filetype	Icon file
MD5	`61e58469fe660c213ebc6e2cc66cbafc`
SHA1	`c47479da87d8390f935b337e91bdbedcc739b3eb`
SHA256	`c369bebe3271775e43301281caa7efcd03938e3bc1f620212d6c5617edaad403`
SHA3	`7c04647ad931cbf1b5c005cebc686d11b461a50e14ba9aa560e6cc1749adcb2f`

1 (#3)

Type	`RT_VERSION`
Language	Process Default Language
Codepage	UNKNOWN
Size	`0x338`
TimeDateStamp	2016-Jul-10 16:42:08
Entropy	`3.34379`
MD5	`fe2db4ece187890fe0947abdde19184e`
SHA1	`e84b4805ce14529cc9d293a9f7924976c5c18844`
SHA256	`97dd5132828f5c48fa0a034f24bd5a466c0ca0e82c16ad01ba3479baa9e4ad39`
SHA3	`fd6e7fc5fb78f2063e5e34cf71c166577f42d0e5b60eeb17b443d840360814f3`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.1.0
ProductVersion	1.0.1.0
FileFlags	`(EMPTY)`
FileOs	`VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE`
FileType	`VFT_APP`
Language	English - United States
CompanyName	xs-Sol
FileDescription	iMacros to Java Script converter
FileVersion (#2)	1.0.1.0
InternalName	iMacros to Java Script converter
LegalCopyright	Copyright (C) 2016 xs-Sol
OriginalFilename	iim-to-js-converter.exe
ProductName	iim-to-js-converter
ProductVersion (#2)	1.0.1.0

Resource LangID	Process Default Language

TLS Callbacks

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0!