Architecture |
IMAGE_FILE_MACHINE_I386
|
---|---|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
Compilation Date | 2024-Dec-04 09:16:30 |
Detected languages |
English - United States
|
FileDescription | PSCOPE MFC Application |
FileVersion | 1.0.001 |
InternalName | PSCOPE |
OriginalFilename | PSCOPE.EXE |
ProductName | PSCOPE |
ProductVersion | 1.0.001 |
Info | Matching compiler(s): |
Microsoft Visual C++ v6.0 DLL
Microsoft Visual C++ 6.0 - 8.0 Microsoft Visual C++ Microsoft Visual C++ v6.0 Microsoft Visual C++ v5.0/v6.0 (MFC) |
Suspicious | Strings found in the binary may indicate undesirable behavior: |
Miscellaneous malware strings:
|
Suspicious | The PE is packed or was manually edited. | The number of imports reported in the RICH header is inconsistent. |
Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
Suspicious | The PE is possibly a dropper. |
Resource 110 is possibly compressed or encrypted.
Resources amount for 77.3648% of the executable. |
Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
e_magic | MZ |
---|---|
e_cblp | 0x90 |
e_cp | 0x3 |
e_crlc | 0 |
e_cparhdr | 0x4 |
e_minalloc | 0 |
e_maxalloc | 0xffff |
e_ss | 0 |
e_sp | 0xb8 |
e_csum | 0 |
e_ip | 0 |
e_cs | 0 |
e_ovno | 0 |
e_oemid | 0 |
e_oeminfo | 0 |
e_lfanew | 0xf8 |
Signature | PE |
---|---|
Machine |
IMAGE_FILE_MACHINE_I386
|
NumberofSections | 6 |
TimeDateStamp | 2024-Dec-04 09:16:30 |
PointerToSymbolTable | 0 |
NumberOfSymbols | 0 |
SizeOfOptionalHeader | 0xe0 |
Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
Magic | PE32 |
---|---|
LinkerVersion | 6.0 |
SizeOfCode | 0x131000 |
SizeOfInitializedData | 0x23a5000 |
SizeOfUninitializedData | 0 |
AddressOfEntryPoint | 0x000BA2F8 (Section: .text) |
BaseOfCode | 0x1000 |
BaseOfData | 0x132000 |
ImageBase | 0x400000 |
SectionAlignment | 0x1000 |
FileAlignment | 0x1000 |
OperatingSystemVersion | 4.0 |
ImageVersion | 0.0 |
SubsystemVersion | 4.0 |
Win32VersionValue | 0 |
SizeOfImage | 0x24d7000 |
SizeOfHeaders | 0x1000 |
Checksum | 0 |
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
SizeofStackReserve | 0xc0000 |
SizeofStackCommit | 0x1000 |
SizeofHeapReserve | 0x1000 |
SizeofHeapCommit | 0x1000 |
LoaderFlags | 0 |
NumberOfRvaAndSizes | 16 |
WSOCK32.dll |
sendto
listen WSAAsyncSelect bind setsockopt ioctlsocket socket WSAGetLastError accept recvfrom connect WSAStartup htons WSACleanup closesocket send |
---|---|
WINMM.dll |
waveOutPause
waveInPrepareHeader waveInGetErrorTextA mmioClose waveOutReset waveInClose waveInGetDevCapsA waveInGetNumDevs waveInAddBuffer mmioWrite mmioAscend mmioCreateChunk mmioOpenA waveOutUnprepareHeader waveOutRestart waveOutPrepareHeader waveOutWrite waveOutClose waveOutOpen mciSendCommandA waveInStart waveInStop waveInUnprepareHeader waveInOpen |
KERNEL32.dll |
GlobalHandle
TlsFree GlobalReAlloc TlsSetValue LocalReAlloc TlsGetValue GetProcessVersion GetCPInfo GetOEMCP GlobalSize CopyFileA LocalUnlock LocalLock SetErrorMode FindNextFileA GetPrivateProfileIntA GetPrivateProfileStringA WritePrivateProfileStringA GetCurrentDirectoryA RtlUnwind RaiseException CreateDirectoryA SetEnvironmentVariableA SetCurrentDirectoryA GetDriveTypeA GetTimeZoneInformation GetSystemTime GetLocalTime HeapReAlloc GetStartupInfoA GetCommandLineA ExitProcess GetACP ExitThread TerminateProcess HeapSize TlsAlloc GetFileType SetHandleCount GetStdHandle FatalAppExitA LCMapStringA LCMapStringW SetUnhandledExceptionFilter HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID GetVersionExA GetExitCodeProcess CreateProcessA SetConsoleCtrlHandler CompareStringA CompareStringW GetLocaleInfoW SizeofResource GlobalFlags GetShortPathNameA GetThreadLocale GetStringTypeExA GetVolumeInformationA DeleteFileA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetCurrentProcess EscapeCommFunction SetCommTimeouts SetCommState CreateFileA BuildCommDCBA DuplicateHandle GetTickCount GetCurrentThread lstrcmpA GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetProfileIntA LocalAlloc lstrlenW SetFileAttributesA SetFileTime SystemTimeToFileTime LocalFileTimeToFileTime FindFirstFileA FindClose GetFileTime GetFileSize GetFileAttributesA VirtualProtect FormatMessageA LocalFree GetModuleFileNameA CreateEventA SetEvent WaitForSingleObject FileTimeToLocalFileTime FileTimeToSystemTime MulDiv SetLastError MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedDecrement InterlockedIncrement LoadLibraryA FreeLibrary GetVersion lstrcatA GetCurrentThreadId GlobalGetAtomNameA lstrcmpiA CloseHandle GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcpyA GetProcAddress LockResource FindResourceA LoadResource SetThreadPriority EnterCriticalSection GetModuleHandleA lstrcpynA CreateFileMappingA MapViewOfFile UnmapViewOfFile SetThreadExecutionState InitializeCriticalSection SuspendThread ResumeThread DeleteCriticalSection QueryDosDeviceA Sleep HeapFree GetProcessHeap HeapAlloc CreateThread SleepEx QueryPerformanceFrequency TryEnterCriticalSection LeaveCriticalSection GetLastError QueryPerformanceCounter GlobalAlloc GlobalLock GlobalUnlock GlobalFree WinExec ReadFile WriteFile SetStdHandle |
USER32.dll |
CharToOemA
OemToCharA wvsprintfA GetDC ReleaseDC GetWindowDC TabbedTextOutA GrayStringA SetRectEmpty IsZoomed GetMessageA GetAsyncKeyState MapDialogRect LoadAcceleratorsA TranslateAcceleratorA DestroyMenu ReuseDDElParam UnpackDDElParam InflateRect GetDCEx WindowFromPoint PostQuitMessage ShowOwnedPopups SetWindowContextHelpId RegisterClipboardFormatA DestroyCursor CharUpperA GetClassNameA GetDialogBaseUnits GetSysColorBrush InsertMenuA GetMenuStringA GetTabbedTextExtentA IsClipboardFormatAvailable LockWindowUpdate DeleteMenu DestroyIcon CharNextA CopyAcceleratorTableA GetNextDlgGroupItem PostThreadMessageA FindWindowA IsRectEmpty SetParent InvertRect GetMenuCheckMarkDimensions GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem ShowWindow MoveWindow SetWindowTextA IsDialogMessageA ScrollWindowEx IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton UnregisterClassA PostMessageA SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos BeginDeferWindowPos EndDeferWindowPos ScrollWindow GetScrollInfo SetScrollInfo ShowScrollBar GetScrollRange GetScrollPos MessageBoxA IsChild GetCapture wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID TrackPopupMenu SetWindowPlacement GetWindowTextLengthA GetWindowTextA GetKeyState DefWindowProcA CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow SetForegroundWindow GetWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetNextDlgTabItem EndDialog GetActiveWindow IsWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetParent GetWindowLongA GetDlgItem SetRect SetScrollRange SetScrollPos ReleaseCapture SetCapture ValidateRect LoadMenuA SetMenu CreateMenu CopyRect PtInRect DlgDirListA DlgDirListComboBoxA DrawEdge GetSystemMenu RemoveMenu AppendMenuA DrawMenuBar SetCursor LoadCursorA BringWindowToTop LoadImageA GetTopWindow GetDlgCtrlID LoadStringA SetWindowPos SetActiveWindow SetCursorPos GetCursorPos LoadBitmapA BeginPaint DrawStateA EndPaint DdeUninitialize DdeFreeStringHandle DdeInitializeA DdeCreateStringHandleA DdeNameService DdePostAdvise DdeCreateDataHandle DdeGetData DdeQueryStringA GetDesktopWindow WinHelpA GetFocus KillTimer SendMessageA PeekMessageA TranslateMessage DispatchMessageA MessageBeep DrawTextA FillRect GetWindowRect InvalidateRect UpdateWindow EnableWindow IsWindowVisible ClientToScreen GetClientRect SetTimer IsWindowEnabled LoadIconA |
GDI32.dll |
SetDIBits
GetDIBits CreateCompatibleBitmap SetPixel GetPixel CreateBitmap SetTextColor SetBkColor CreatePatternBrush CreateRectRgn LineTo CreatePenIndirect CreateBrushIndirect Ellipse MoveToEx CreateBitmapIndirect GetDCOrgEx GetClipBox SaveDC RestoreDC GetStockObject SelectPalette SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx SelectClipRgn ExcludeClipRect IntersectClipRect OffsetClipRgn SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags CreatePen ArcTo SetArcDirection PolyDraw PolylineTo SetColorAdjustment PolyBezierTo GetClipRgn SelectClipPath ExtSelectClipRgn PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetViewportExtEx GetWindowExtEx ExtCreatePen CreateHatchBrush CreateDIBPatternBrushPt PtVisible RectVisible ExtTextOutA Escape CreateDCA GetTextMetricsA PatBlt GetCharWidthA UnrealizeObject DPtoLP GetViewportOrgEx AbortDoc SetAbortProc GetMapMode SetRectRgn CombineRgn CopyMetaFileA GetTextColor GetBkColor LPtoDP GetNearestColor GetStretchBltMode GetPolyFillMode GetTextAlign GetBkMode GetROP2 GetTextFaceA GetWindowOrgEx CreateCompatibleDC BitBlt StretchBlt FloodFill GetObjectA TextOutA StretchDIBits RealizePalette CreatePalette SetDIBitsToDevice CreateFontA SelectObject DeleteObject StartDocA GetDeviceCaps EndDoc DeleteDC EndPage StartPage CreateRectRgnIndirect CreateSolidBrush Rectangle CreateFontIndirectA GetCurrentPositionEx GetTextExtentPoint32A |
comdlg32.dll |
GetSaveFileNameA
GetOpenFileNameA CommDlgExtendedError GetFileTitleA ChooseFontA ChooseColorA PrintDlgA PageSetupDlgA FindTextA ReplaceTextA |
WINSPOOL.DRV |
OpenPrinterA
DocumentPropertiesA ClosePrinter |
ADVAPI32.dll |
RegDeleteValueA
RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueA RegQueryValueExA RegDeleteKeyA RegOpenKeyA RegEnumKeyA RegCloseKey RegQueryValueA GetFileSecurityA SetFileSecurityA RegCreateKeyA |
SHELL32.dll |
DragQueryFileA
SHGetFileInfoA ExtractIconA DragAcceptFiles DragFinish |
COMCTL32.dll |
#17
#14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge ImageList_Read ImageList_Write PropertySheetA #13 DestroyPropertySheetPage CreatePropertySheetPageA |
oledlg.dll |
#8
|
ole32.dll |
StringFromCLSID
ReadClassStg CoTreatAsClass OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CreateBindCtx OleDuplicateData CoTaskMemAlloc CoTaskMemFree CoDisconnectObject CoFreeUnusedLibraries OleUninitialize OleInitialize CoRevokeClassObject CoRegisterClassObject CoCreateInstance OleRun CLSIDFromString CLSIDFromProgID ReleaseStgMedium CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoRegisterMessageFilter OleSetClipboard OleFlushClipboard OleIsCurrentClipboard CreateStreamOnHGlobal ReadFmtUserTypeStg |
OLEPRO32.DLL |
#253
|
OLEAUT32.dll |
LoadTypeLib
VariantTimeToSystemTime SysReAllocStringLen SysStringLen SysAllocStringLen SafeArrayDestroyDescriptor VariantClear VariantChangeType SysFreeString SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SysAllocStringByteLen SysStringByteLen VarCyFromStr VarBstrFromCy VarDateFromStr VarBstrFromDate SafeArrayCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData |
WININET.dll |
InternetWriteFile
InternetCanonicalizeUrlA InternetQueryOptionA InternetOpenA InternetGetLastResponseInfoA GopherFindFirstFileA InternetFindNextFileA FtpFindFirstFileA HttpQueryInfoA HttpSendRequestExA HttpEndRequestA HttpSendRequestA HttpAddRequestHeadersA InternetErrorDlg InternetCloseHandle InternetOpenUrlA InternetSetOptionExA HttpOpenRequestA GopherOpenFileA GopherGetAttributeA GopherCreateLocatorA FtpGetFileA FtpPutFileA FtpOpenFileA FtpGetCurrentDirectoryA FtpSetCurrentDirectoryA FtpRemoveDirectoryA FtpCreateDirectoryA FtpRenameFileA FtpDeleteFileA InternetConnectA InternetQueryDataAvailable InternetReadFile InternetSetStatusCallback InternetSetFilePointer InternetGetCookieA InternetSetCookieA InternetCrackUrlA |
Type |
RT_STRING
|
---|---|
Language | UNKNOWN |
Codepage | UNKNOWN |
Size | 0xde |
TimeDateStamp |