| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Jun-11 04:12:13 |
| Debug artifacts |
mod_uploader.pdb
|
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Miscellaneous malware strings:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to SHA256 Uses constants related to SHA512 Uses constants related to RC5 or RC6 |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x108 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 5 |
| TimeDateStamp | 2026-Jun-11 04:12:13 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x388e00 |
| SizeOfInitializedData | 0x2d3e00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000036ECA8 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x660000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x1000000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| api-ms-win-core-synch-l1-2-0.dll |
WaitOnAddress
WakeByAddressSingle WakeByAddressAll |
|---|---|
| bcryptprimitives.dll |
ProcessPrng
|
| bcrypt.dll |
BCryptGenRandom
|
| ADVAPI32.dll |
RevertToSelf
SystemFunction036 ImpersonateAnonymousToken |
| steam_api64.dll |
SteamAPI_SteamUser_v023
SteamAPI_ISteamUser_GetSteamID SteamAPI_GetHSteamPipe SteamAPI_SteamUGC_v018 SteamAPI_ISteamUGC_StartItemUpdate SteamAPI_ISteamUGC_GetItemUpdateProgress SteamAPI_ISteamUGC_CreateItem SteamAPI_ISteamUGC_SetItemTags SteamAPI_ISteamUGC_SetItemVisibility SteamAPI_ISteamUGC_SetItemDescription SteamAPI_ISteamUGC_SetItemContent SteamAPI_ISteamUGC_SetItemPreview SteamAPI_ISteamUGC_AddItemKeyValueTag SteamAPI_ISteamUGC_RemoveAllItemKeyValueTags SteamAPI_ISteamUGC_SetItemTitle SteamAPI_ISteamUGC_SetItemMetadata SteamInternal_SteamAPI_Init SteamAPI_ManualDispatch_RunFrame SteamAPI_ManualDispatch_GetNextCallback SteamAPI_ManualDispatch_Init SteamAPI_ManualDispatch_GetAPICallResult SteamAPI_ISteamUGC_GetQueryUGCResult SteamAPI_ISteamUGC_SubmitItemUpdate SteamAPI_ISteamNetworkingSockets_CloseConnection SteamAPI_ISteamNetworkingSockets_CloseListenSocket SteamAPI_ManualDispatch_FreeLastCallback SteamAPI_ISteamUGC_ReleaseQueryUGCRequest SteamAPI_ISteamUGC_CreateQueryUGCDetailsRequest SteamAPI_Shutdown SteamAPI_ISteamUGC_SendQueryUGCRequest |
| OPENGL32.dll |
wglDeleteContext
wglGetCurrentContext wglShareLists wglMakeCurrent wglGetCurrentDC wglGetProcAddress wglCreateContext |
| kernel32.dll |
FlsAlloc
FlsFree GetFileAttributesW FlsSetValue IsThreadAFiber SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP GetConsoleMode WriteConsoleW SetEnvironmentVariableW GetEnvironmentVariableW DeleteFileW ReleaseMutex CreateMutexA GetCurrentThreadId WaitForSingleObjectEx SwitchToThread ExitProcess FindClose FindFirstFileExW CopyFileExW lstrlenW GetCurrentDirectoryW SetThreadStackGuarantee CloseHandle AddVectoredExceptionHandler SetFilePointerEx GetSystemTimeAsFileTime InitializeSListHead GetProcAddress LoadLibraryExW GetLastError LoadLibraryW FreeLibrary SetThreadErrorMode GetModuleFileNameW CreateDirectoryW GetStdHandle GetEnvironmentStringsW GetExitCodeProcess GlobalLock GlobalAlloc SetLastError GetFinalPathNameByHandleW IsDebuggerPresent GlobalUnlock CreateProcessW UnhandledExceptionFilter SetUnhandledExceptionFilter GlobalSize WideCharToMultiByte GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GlobalFree MultiByteToWideChar GetFileInformationByHandle CancelIo GetSystemTimePreciseAsFileTime GetCurrentThread RtlLookupFunctionEntry FormatMessageW RtlCaptureContext DuplicateHandle GetCurrentProcess GetOverlappedResult ReadFile ReadFileEx GetCurrentProcessId SetHandleInformation CreateThread GetProcessHeap HeapFree LoadLibraryA QueryPerformanceCounter HeapReAlloc SetFileTime HeapAlloc CreateFileW SetFileInformationByHandle CreateEventW WaitForSingleObject GetFullPathNameW SleepEx WriteFileEx FreeEnvironmentStringsW CompareStringOrdinal GetModuleHandleA Sleep GetModuleHandleW WaitForMultipleObjects GetTempPathW QueryPerformanceFrequency FindNextFileW TerminateProcess IsProcessorFeaturePresent RtlVirtualUnwind |
| ole32.dll |
CoInitializeEx
OleInitialize CoCreateInstance RegisterDragDrop RevokeDragDrop CoTaskMemFree CoUninitialize |
| user32.dll |
GetTouchInputInfo
MonitorFromRect ScreenToClient GetMenu GetClassInfoExW ValidateRect DispatchMessageW TranslateMessage SetWindowPlacement GetWindowPlacement ClientToScreen PeekMessageW ChangeDisplaySettingsExW DefWindowProcW SetWindowLongPtrW GetWindowLongPtrW ReleaseDC RedrawWindow InvalidateRgn SetWindowPos GetClientRect SetWindowDisplayAffinity SetCursorPos GetForegroundWindow TrackMouseEvent CreateWindowExW RegisterClassExW DestroyWindow PostMessageW FlashWindowEx EmptyClipboard CreateIconFromResourceEx SendMessageW GetSystemMetrics OpenClipboard GetActiveWindow IsClipboardFormatAvailable GetClipboardData SetClipboardData RegisterClipboardFormatW CloseClipboard SetCursor SetPropW CloseTouchInputHandle GetPropW GetCursorPos CallWindowProcW RemovePropW MonitorFromWindow GetClassNameW GetMonitorInfoW GetDC RegisterTouchWindow ReleaseCapture GetWindowRect RegisterWindowMessageA SetCapture IsIconic GetClipCursor ClipCursor GetAsyncKeyState GetKeyboardState MapVirtualKeyExW ToUnicodeEx GetKeyState GetKeyboardLayout ShowCursor RegisterRawInputDevices GetRawInputData SetTimer GetMessageW KillTimer DestroyIcon AdjustWindowRectEx GetWindowLongW SetWindowLongW ShowWindow SystemParametersInfoA SetForegroundWindow SendInput MapVirtualKeyW CreateIcon EnumDisplayMonitors MonitorFromPoint SetWindowTextW GetWindowTextLengthW EnableMenuItem GetSystemMenu LoadCursorW IsProcessDPIAware GetWindowTextW |
| shell32.dll |
DragFinish
DragQueryFileW SHCreateItemFromParsingName |
| ws2_32.dll |
WSAStartup
WSACleanup freeaddrinfo listen bind getsockname WSADuplicateSocketW accept closesocket select connect WSASend WSARecv getpeername send recv ioctlsocket getsockopt setsockopt WSAGetLastError getaddrinfo WSASocketW |
| gdi32.dll |
SetPixelFormat
DescribePixelFormat DeleteObject ChoosePixelFormat CreateRectRgn SwapBuffers GetDeviceCaps |
| dwmapi.dll |
DwmEnableBlurBehindWindow
|
| shlwapi.dll |
AssocQueryStringW
|
| uiautomationcore.dll |
UiaLookupId
UiaHostProviderFromHwnd UiaRaiseAutomationPropertyChangedEvent UiaRaiseAutomationEvent UiaReturnRawElementProvider UiaGetReservedNotSupportedValue |
| oleaut32.dll |
SysStringLen
SetErrorInfo SafeArrayPutElement SysAllocStringLen SysFreeString SafeArrayCreateVector GetErrorInfo |
| uxtheme.dll |
SetWindowTheme
|
| imm32.dll |
ImmGetCompositionStringW
ImmGetContext ImmReleaseContext ImmAssociateContextEx ImmSetCandidateWindow ImmSetCompositionWindow |
| ntdll.dll |
NtCreateNamedPipeFile
NtOpenFile NtReadFile RtlNtStatusToDosError NtWriteFile |
| VCRUNTIME140.dll |
memcpy
_CxxThrowException memset memcmp memmove __current_exception_context __current_exception __CxxFrameHandler3 __C_specific_handler |
| api-ms-win-crt-string-l1-1-0.dll |
wcslen
strlen |
| api-ms-win-crt-math-l1-1-0.dll |
round
roundf floorf ceilf expf sinf floor trunc cos sin ceil powf __setusermatherr _hypotf atan2f cbrtf acosf exp2f cosf |
| api-ms-win-crt-runtime-l1-1-0.dll |
_configure_narrow_argv
_initialize_narrow_environment _set_app_type _seh_filter_exe strerror _get_initial_narrow_environment _initterm _initterm_e exit _exit terminate __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _initialize_onexit_table _register_onexit_function |
| api-ms-win-crt-stdio-l1-1-0.dll |
_set_fmode
__p__commode |
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
| api-ms-win-crt-heap-l1-1-0.dll |
_set_new_mode
free |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Jun-11 04:12:13 |
| Version | 0.0 |
| SizeofData | 41 |
| AddressOfRawData | 0x5ba290 |
| PointerToRawData | 0x5b9490 |
| Referenced File | mod_uploader.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Jun-11 04:12:13 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x5ba2bc |
| PointerToRawData | 0x5b94bc |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Jun-11 04:12:13 |
| Version | 0.0 |
| SizeofData | 816 |
| AddressOfRawData | 0x5ba2d0 |
| PointerToRawData | 0x5b94d0 |
| StartAddressOfRawData | 0x1405ba620 |
|---|---|
| EndAddressOfRawData | 0x1405ba791 |
| AddressOfIndex | 0x140636e68 |
| AddressOfCallbacks | 0x14038ac60 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
| Callbacks | (EMPTY) |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x140636c00 |
| XOR Key | 0x3caafb19 |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2008 SP1 build 30729) | 12 |
| Imports (35207) | 2 |
| ASM objects (35207) | 4 |
| C objects (35207) | 10 |
| C++ objects (35207) | 24 |
| Imports (30148) | 2 |
| Imports (33145) | 7 |
| Total imports | 452 |
| C objects (35227) | 12 |
| Unmarked objects (#2) | 390 |
| Linker (35227) | 1 |
No comments yet.