f0e521edce4c0c7e6efca0ba269cf3e31ad0b485347bafbf7085cfc75c4cbdb8

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2046-Oct-30 22:11:33
Debug artifacts D:\a\StoreFixer\StoreFixer\StoreFixer\obj\Release\net48\StoreFixer.pdb
CompanyName StoreFixer
FileDescription StoreFixer
FileVersion 1.0.0.0
InternalName StoreFixer.exe
LegalCopyright
OriginalFilename StoreFixer.exe
ProductName StoreFixer
ProductVersion 1.0.0+772ac66be4efea389e48c7e15365423ad742d336
Assembly Version 1.0.0.0

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • regedit.exe
 May have dropper capabilities:
  • CurrentControlSet\Services
 Contains domain names:
  • github.com
  • https://github.com
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 d61fa7a497f6d74145bf60eb43ea1585
SHA1 7404c55134fe69da76e169b768b28513e8ff7861
SHA256 f0e521edce4c0c7e6efca0ba269cf3e31ad0b485347bafbf7085cfc75c4cbdb8
SHA3 1b1b3e06f88d5e0a0d7c1eca3978f1b3dbc6c3a4cbb3af88588fcbf184eb422b
SSDeep 384:RYVH4SDqkpxFdNhFedkFg9Q13SrfIiApAVyrh9YOr6VwiSo3rHEH+ot6D:RS+kpxfrFskFiRrfITAMWVwQrHEJW
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2046-Oct-30 22:11:33
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0x8200
SizeOfInitializedData 0x800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000A1F2 (Section: .text)
BaseOfCode 0x2000
BaseOfData 0xc000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x10000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 a7add4370735a84160b9bfa55ea0adf6
SHA1 c0f05f66e841a8699af0ab981277fd8533d7b91e
SHA256 88dc325058f9d2075da65196809bdf5b5e50c453a9c7f676c91b2d7a7c45a441
SHA3 7ba13bcdedf769221b8b6d3431e3c87d700a04a1d35cf977838373ea77611c9c
VirtualSize 0x81f8
VirtualAddress 0x2000
SizeOfRawData 0x8200
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.32421

.rsrc

MD5 843f6b39ac28d2aac1e516f5d8fc14ff
SHA1 a32e2cd89caef3b5bfe4974e3ef33c0272db3f62
SHA256 c20d0f49c86623e397d9023d0a18071b574e19699585c9805c655cd1dd1165d0
SHA3 e7701b4b47e86af587f7098acf12816e546bacabc54e68026a9fea3e3b0736b6
VirtualSize 0x5b8
VirtualAddress 0xc000
SizeOfRawData 0x600
PointerToRawData 0x8400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.12408

.reloc

MD5 55391ae7c6cbf6a2ed4c2a44f4aca7e4
SHA1 b73c800dd8a24c662f8b6318a86d0aa34ef787b5
SHA256 597fdddec4b92f28bda84167058e3aa33254e0c41146121276d247fc610f9796
SHA3 5afafc7b80c02895adf356a3a44a6faba182e490d1cbd60a936ce39e8450c5aa
VirtualSize 0xc
VirtualAddress 0xe000
SizeOfRawData 0x200
PointerToRawData 0x8a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.0815394

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.29893
MD5 3baf457e9bdb0c0431bdc140b4f2cfdd
SHA1 4812336ce28f055869cd3d9d4be67febb449a841
SHA256 6a25edea3fbd37984a750a49d4e08e0ecbd13b162e9dd757532bbf487ddcc146
SHA3 d8e029d975ad0f33abe61a6805b3474c2b1e08b9b2f71d5427db1c8deabbf25e

1 (#2)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.00112
MD5 b7db84991f23a680df8e95af8946f9c9
SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734
SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a
SHA3 4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
CompanyName StoreFixer
FileDescription StoreFixer
FileVersion (#2) 1.0.0.0
InternalName StoreFixer.exe
LegalCopyright
OriginalFilename StoreFixer.exe
ProductName StoreFixer
ProductVersion (#2) 1.0.0+772ac66be4efea389e48c7e15365423ad742d336
Assembly Version 1.0.0.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2069-Feb-11 07:24:36
Version 256.20557
SizeofData 95
AddressOfRawData 0xa118
PointerToRawData 0x8318
Referenced File D:\a\StoreFixer\StoreFixer\StoreFixer\obj\Release\net48\StoreFixer.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0xa177
PointerToRawData 0x8377

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.