288c31cbdb0dd340b1b6d7f3ed03b50cf1a2559b7847818fefbe7a9b0835397d

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Jul-09 21:45:42
Detected languages English - United States

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Info Interesting strings found in the binary: Contains domain names:
  • github.com
  • houseindustries.com
  • http://www.houseindustries.com
  • http://www.houseindustries.com/license
  • http://www.houseindustries.com/licenseBurbank
  • http://www.houseindustries.comhttp
  • http://www.talleming.comHouse
  • https://files.catbox.moe
  • https://files.catbox.moe/x7ic4m.sys
  • https://github.com
  • www.houseindustries.com
Info Cryptographic algorithms detected in the binary: Uses known Mersenne Twister constants
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
  • CheckRemoteDebuggerPresent
  • FindWindowA
 Code injection capabilities (PowerLoader):
  • GetWindowLongA
  • FindWindowA
 Possibly launches other programs:
  • CreateProcessA
  • ShellExecuteA
  • system
 Uses functions commonly found in keyloggers:
  • GetAsyncKeyState
  • GetForegroundWindow
 Manipulates other processes:
  • Process32Next
  • Process32First
 Reads the contents of the clipboard:
  • GetClipboardData
Malicious VirusTotal score: 9/69 (Scanned on 2026-07-12 00:51:52) CrowdStrike: win/malicious_confidence_70% (D)
ESET-NOD32: Win64/GameHack_AGen.BYV potentially unsafe application
Elastic: malicious (high confidence)
Kaspersky: UDS:HackTool.Win32.DriverLoader.gen
Rising: Trojan.Kryptik@AI.86 (RDML:99rCuvW3hbrXqwBwY/XI6Q)
SentinelOne: Static AI - Suspicious PE
Sophos: Generic Reputation PUA (PUA)
Symantec: ML.Attribute.HighConfidence
TrellixENS: Artemis!ED77CA1F4208

Hashes

MD5 ed77ca1f4208771d795533359331c139
SHA1 acbab936b2c06c82424761d43ce250e196880611
SHA256 288c31cbdb0dd340b1b6d7f3ed03b50cf1a2559b7847818fefbe7a9b0835397d
SHA3 257290449e5a7cbab35330ae4be25708034319907d439507e00bbd15e5f8dda2
SSDeep 24576:42zfCUuZuPmsTzmeRJSuPxni3nfOcdh+YW28:42zEiXzmWB5i3nf1h+z2
Imports Hash b2b439eb10120435f95e45bf3c227bd3

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Jul-09 21:45:42
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x99600
SizeOfInitializedData 0x5ac00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000097B60 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xf9000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 06a1b8e8122d6fe4c5f4cf3a48bf7198
SHA1 113f402dd76aa055c281b8f12f11471d3f4bd66b
SHA256 fdc23197d70b7582d75a7b1778c70af752352eb08946d1301caa75d3662ac182
SHA3 761497d2ba3d6de13504d8ef141a296459a8c7fcbb1995d126421c85083c6e39
VirtualSize 0x994e1
VirtualAddress 0x1000
SizeOfRawData 0x99600
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.49821

.rdata

MD5 3a9afc60c03ef14530e99391719b4c84
SHA1 09a9f3d8ec0a584eacc947b9bad8106ba7d10bcf
SHA256 f65f5424016489150acf0296f595c859cacd18f3cc13d911a3086cd767d36cab
SHA3 9cee1283a4c311b37f2e142642cdb868ab109757f32b003ffe18b834d56337d1
VirtualSize 0x1d24c
VirtualAddress 0x9b000
SizeOfRawData 0x1d400
PointerToRawData 0x99a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.98317

.data

MD5 e0cf2f4c37e6bfbcbc847ae37ba541aa
SHA1 d6dbe6b2ec4f6dee85aca81cce8cabfede8cb835
SHA256 37405537310d4e4a3cc8416f1fd7a5e2a84dcffeb62e3420f69bc14f2ab018da
SHA3 8253692df757d59d2e738abbbf3b46ced51e2e1a2ed2a3789f52f28b4e897555
VirtualSize 0x370b0
VirtualAddress 0xb9000
SizeOfRawData 0x35800
PointerToRawData 0xb6e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.85641

.pdata

MD5 b94ed8bd7ca60fa3b3bd06e31a26544e
SHA1 e6500bb133b89a5432bd41fc421dac02f280e063
SHA256 4565c45c4812f752f812775a3497f501b18f2d9163a083e3803ffc4ca71c0c55
SHA3 263d584669f93606e5952883c2c12392514a7cb52d6c6d2283421048e3df9f5d
VirtualSize 0x5f04
VirtualAddress 0xf1000
SizeOfRawData 0x6000
PointerToRawData 0xec600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.01845

.rsrc

MD5 8adb307977b138701c9c5052ac7579c3
SHA1 40f3c9b4dc89288b3800f6179c7c580bc7aa8a5f
SHA256 ed5db44fd1f4d5029de58ed9fbae7a95ba2e587c26cbbefe7a21e4a8ac1d577c
SHA3 c681cee369c719bf11429aff6b81fcb19e50bfeda20ba92ca8eadc71f432f98d
VirtualSize 0x1e0
VirtualAddress 0xf7000
SizeOfRawData 0x200
PointerToRawData 0xf2600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.71768

.reloc

MD5 51cca995c8d21aebbde8291877be26f5
SHA1 bff2a9e95515cb909eda5f1e28acca0e1955ac03
SHA256 da231660464e1e605928c1a2852536a9b7d6eca4390e783f83bf95a949c8212a
SHA3 61abd4fce73c482b4d5a0731d7979181d1ad6a52359fd0bcbefc89c7146dcf61
VirtualSize 0x34c
VirtualAddress 0xf8000
SizeOfRawData 0x400
PointerToRawData 0xf2800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.76637

Imports

d3d11.dll D3D11CreateDeviceAndSwapChain
dwmapi.dll DwmExtendFrameIntoClientArea
KERNEL32.dll SetConsoleTitleA
GetStdHandle
DeviceIoControl
GetConsoleScreenBufferInfoEx
WaitForSingleObject
CreateFileW
CreateToolhelp32Snapshot
Sleep
SetConsoleScreenBufferInfoEx
Process32Next
CloseHandle
Beep
lstrcmpiA
CreateProcessA
GetCurrentProcess
Module32Next
Module32First
GetCurrentThread
QueryPerformanceFrequency
GetThreadContext
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
IsDebuggerPresent
CheckRemoteDebuggerPresent
GetModuleHandleA
GetModuleHandleW
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
WakeAllConditionVariable
FreeLibrary
Process32First
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFileInformationByHandleEx
GetLastError
AreFileApisANSI
CreateFile2
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
GetSystemTimeAsFileTime
SetConsoleTextAttribute
SleepConditionVariableSRW
GetCurrentThreadId
SetUnhandledExceptionFilter
InitializeSListHead
GetProcAddress
USER32.dll OpenClipboard
CloseClipboard
SetWindowPos
GetKeyState
LoadCursorA
ScreenToClient
GetSystemMetrics
DispatchMessageA
SetClipboardData
ShowWindow
GetAsyncKeyState
SetWindowLongA
GetWindowLongA
SetWindowDisplayAffinity
MessageBoxA
GetClipboardData
SetMenu
SetLayeredWindowAttributes
TranslateMessage
mouse_event
PeekMessageA
EmptyClipboard
FindWindowA
UpdateWindow
GetCursorPos
SetCursorPos
GetClientRect
SetCursor
ClientToScreen
GetForegroundWindow
GetKeyboardLayout
SHELL32.dll ShellExecuteA
ole32.dll CoInitialize
MSVCP140.dll _Thrd_detach
_Cnd_do_broadcast_at_thread_exit
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_lock
_Query_perf_counter
_Mtx_unlock
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
IMM32.dll ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
D3DCOMPILER_47.dll D3DCompile
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll __C_specific_handler
memcmp
memchr
strstr
memcpy
memmove
_CxxThrowException
__std_exception_destroy
__std_exception_copy
strchr
__std_terminate
__current_exception_context
__current_exception
memset
api-ms-win-crt-stdio-l1-1-0.dll ftell
__p__commode
_set_fmode
__stdio_common_vsscanf
_wfopen
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
setvbuf
fgetpos
__stdio_common_vsprintf
fwrite
__stdio_common_vfprintf
fgetc
__stdio_common_vsprintf_s
fputc
fseek
__acrt_iob_func
fflush
fclose
api-ms-win-crt-heap-l1-1-0.dll _set_new_mode
free
malloc
realloc
_callnewh
api-ms-win-crt-string-l1-1-0.dll strlen
strcmp
toupper
strncpy_s
tolower
strncmp
strncpy
wcslen
api-ms-win-crt-math-l1-1-0.dll acosf
acos
_dsign
tanf
atan2
sqrt
__setusermatherr
sinf
logf
asin
cosf
powf
log
fmodf
sqrtf
ldexp
pow
ceilf
api-ms-win-crt-convert-l1-1-0.dll strtoll
strtoull
strtod
strtol
atof
api-ms-win-crt-filesystem-l1-1-0.dll _lock_file
_unlock_file
remove
api-ms-win-crt-utility-l1-1-0.dll qsort
rand
api-ms-win-crt-runtime-l1-1-0.dll _c_exit
__p___argv
__p___argc
_beginthreadex
_register_thread_local_exe_atexit_callback
_errno
_exit
exit
system
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
abort
api-ms-win-crt-locale-l1-1-0.dll ___lc_codepage_func
localeconv
_configthreadlocale

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jul-09 21:45:42
Version 0.0
SizeofData 944
AddressOfRawData 0xaa6f8
PointerToRawData 0xa90f8

TLS Callbacks

StartAddressOfRawData 0x1400aaac8
EndAddressOfRawData 0x1400aaaf8
AddressOfIndex 0x1400ee7a0
AddressOfCallbacks 0x14009b970
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1400b9040
GuardCFCheckFunctionPointer 5369346192
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0x5385bd94
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 18
ASM objects (35721) 4
C objects (35721) 10
C++ objects (35721) 37
Imports (35721) 6
Imports (35215) 21
Total imports 343
C++ objects (LTCG) (36248) 13
Resource objects (36248) 1
Linker (36248) 1

Errors

Leave a comment

No comments yet.