ee66c9c3f7d721efe057bbb6d0f9d3457a1a35b47444004ba9e0acdfd0c01a4d
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Dec-09 19:32:28 |
| Detected languages |
English - United States
|
| Comments | HTTP Downloader is made free under the GPLv3 license. |
| FileDescription | HTTP Downloader |
| FileVersion | 1, 0, 6, 9 |
| InternalName | HTTP Downloader |
| LegalCopyright | Copyright © 2015-2025 Eric Kutcher |
| OriginalFilename | HTTP_Downloader.exe |
| ProductName | HTTP Downloader |
| ProductVersion | 1, 0, 6, 9 |
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Suspicious | VirusTotal score: 1/69 (Scanned on 2026-06-29 17:05:52) | APEX: Malicious |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xd0 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 6 |
| TimeDateStamp | 2025-Dec-09 19:32:28 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 9.0 |
| SizeOfCode | 0x8b600 |
| SizeOfInitializedData | 0x13000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000002F108 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.2 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.2 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xa7000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0xa59da |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rdata
.data
.pdata
.rsrc
.reloc
Imports
| KERNEL32.dll |
GlobalAlloc
GlobalFree lstrcmpW CloseHandle UnlockFileEx SetEndOfFile WriteFile lstrlenW LockFileEx CreateFileW Sleep GetLastError ExitThread LeaveCriticalSection ReleaseSemaphore EnterCriticalSection SetFilePointer CreateDirectoryW GetFileAttributesW GetProcAddress GetFileSize ReadFile MulDiv CreateThread PostQueuedCompletionStatus TryEnterCriticalSection WaitForSingleObject WideCharToMultiByte CreateSemaphoreW InitializeCriticalSection CreateIoCompletionPort MultiByteToWideChar lstrcmpiW GlobalReAlloc DeleteCriticalSection lstrlenA GetSystemTimeAsFileTime SystemTimeToFileTime GetLocalTime MoveFileWithProgressW DeleteFileW DeviceIoControl GetQueuedCompletionStatus WaitForMultipleObjects SetThreadPriority GlobalUnlock GlobalSize GlobalLock FileTimeToSystemTime lstrcmpiA SetFileValidData SetFilePointerEx SetFileTime MoveFileW SetLastError FreeLibrary LoadLibraryW SetErrorMode lstrcpynW ExitProcess ReleaseMutex GetCurrentProcess CreateMutexW GetSystemInfo LocalFree GetCommandLineW GetModuleFileNameW GetModuleHandleW lstrcmpA GetTickCount VerifyVersionInfoW VerSetConditionMask SetThreadExecutionState |
|---|---|
| USER32.dll |
ReleaseDC
GetSysColor GetWindowDC GetWindowRect DefWindowProcW SetFocus TrackPopupMenu GetParent ClientToScreen TrackMouseEvent GetClientRect GetKeyState CallWindowProcW SendMessageW InsertMenuItemW CreatePopupMenu SetWindowLongPtrW GetWindowLongPtrW CreateWindowExW GetDlgCtrlID IsWindowVisible SendNotifyMessageW EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DestroyWindow SetWindowPos GetMonitorInfoW MonitorFromWindow EnumChildWindows SetForegroundWindow ShowWindow SendMessageA EnableWindow DestroyIcon ScreenToClient SetLayeredWindowAttributes GetCursorPos CloseClipboard SetClipboardData EmptyClipboard OpenClipboard GetDC SystemParametersInfoW GetSystemMetrics ExitWindowsEx MessageBoxW GetMessageW DispatchMessageW TranslateMessage IsDialogMessageW RegisterClassExW LoadCursorW FindWindowW RegisterClipboardFormatW LoadImageW DestroyMenu SetMenuItemInfoW EnableMenuItem CreateMenu CheckMenuItem FlashWindow IsIconic InvalidateRect CreateIconIndirect FillRect GetIconInfo ReleaseCapture KillTimer SetScrollInfo GetScrollInfo SetTimer SetCapture EndPaint DrawIconEx BeginPaint GetDoubleClickTime DrawTextW GetClipboardData IsClipboardFormatAvailable GetSysColorBrush MapWindowPoints IsZoomed GetWindow GetFocus PostMessageW LockWorkStation OffsetRect MonitorFromRect RegisterWindowMessageW SetMenu PostQuitMessage SetCursor ScrollWindow SetScrollPos DrawFocusRect |
Delayed Imports
102
103
1
2
3
101
104
1 (#2)
1 (#3)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.6.9 |
| ProductVersion | 1.0.6.9 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| Comments | HTTP Downloader is made free under the GPLv3 license. |
| FileDescription | HTTP Downloader |
| FileVersion (#2) | 1, 0, 6, 9 |
| InternalName | HTTP Downloader |
| LegalCopyright | Copyright © 2015-2025 Eric Kutcher |
| OriginalFilename | HTTP_Downloader.exe |
| ProductName | HTTP Downloader |
| ProductVersion (#2) | 1, 0, 6, 9 |
| Resource LangID | English - United States |
|---|
TLS Callbacks
Load Configuration
RICH Header
| XOR Key | 0x9c980558 |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2012 build 50727 / VS2005 build 50727) | 5 |
| Total imports | 169 |
| C++ objects (VS2008 SP1 build 30729) | 64 |
| Linker (VS2008 build 21022) | 1 |
| Resource objects (VS2008 SP1 build 30729) | 1 |
Errors
Leave a comment
No comments yet.