| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Apr-19 14:48:13 |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xf8 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 4 |
| TimeDateStamp | 2026-Apr-19 14:48:13 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x91800 |
| SizeOfInitializedData | 0x5e00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000008F144 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x9a000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| USER32.dll |
SetWindowRgn
PostMessageA MonitorFromWindow AdjustWindowRectEx GetSystemMetrics ShowWindow SetWindowPos GetDC LoadCursorA GetWindowRect DispatchMessageA BeginPaint GetIconInfo GetWindowThreadProcessId UnregisterHotKey GetMessageA MonitorFromPoint LoadImageA ScreenToClient SetTimer EmptyClipboard GetWindowLongA TrackMouseEvent SetWindowTextA GetMonitorInfoA DefWindowProcA CreateWindowExA SetLayeredWindowAttributes TranslateMessage SendMessageA SetCursor LoadIconA SystemParametersInfoA GetClientRect IsZoomed UpdateLayeredWindow PostQuitMessage RegisterClassExA UpdateWindow ReleaseCapture InvalidateRect RegisterClipboardFormatA ReleaseDC GetCursorPos EndPaint |
|---|---|
| GDI32.dll |
DeleteObject
GetObjectA SwapBuffers ChoosePixelFormat DeleteDC GetDeviceCaps GetDIBits CreateRoundRectRgn CreateDIBSection SelectObject SetPixelFormat |
| OPENGL32.dll |
wglGetProcAddress
wglMakeCurrent wglCreateContext |
| SHELL32.dll |
DragAcceptFiles
DragFinish DragQueryFileA |
| MSVCP140.dll |
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ |
| KERNEL32.dll |
RtlVirtualUnwind
RtlLookupFunctionEntry RtlCaptureContext SetUnhandledExceptionFilter GlobalUnlock SetProcessWorkingSetSize GlobalLock UnhandledExceptionFilter CloseHandle GlobalAlloc GlobalSize GetTickCount64 OutputDebugStringA GetCurrentProcess GetModuleFileNameA IsDebuggerPresent GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime TerminateProcess InitializeSListHead GetWindowsDirectoryA |
| VCRUNTIME140.dll |
__C_specific_handler
__std_exception_destroy memmove memcpy __std_exception_copy memset strstr memcmp _CxxThrowException __current_exception __current_exception_context |
| VCRUNTIME140_1.dll |
__CxxFrameHandler4
|
| api-ms-win-crt-stdio-l1-1-0.dll |
fread
__acrt_iob_func feof fopen_s _set_fmode fwrite __p__commode __stdio_common_vfprintf __stdio_common_vsscanf fseek ftell fclose fopen __stdio_common_vsprintf |
| api-ms-win-crt-math-l1-1-0.dll |
cosf
_dtest __setusermatherr nan sinf atan2f sqrt pow sin round cos ldexp fabs acosf floorf floor fmod tan ceilf expf sqrtf trunc log ceil |
| api-ms-win-crt-runtime-l1-1-0.dll |
_c_exit
_register_onexit_function _initialize_onexit_table _errno _initialize_narrow_environment _get_narrow_winmain_command_line _exit _crt_atexit terminate abort _configure_narrow_argv exit _initterm_e _cexit _seh_filter_exe _set_app_type _initterm _invoke_watson _register_thread_local_exe_atexit_callback _wassert |
| api-ms-win-crt-convert-l1-1-0.dll |
strtoul
strtol strtod strtof |
| api-ms-win-crt-utility-l1-1-0.dll |
abs
_lrotl rand |
| api-ms-win-crt-string-l1-1-0.dll |
toupper
wcslen tolower strlen strncmp isalnum isxdigit strncpy strcmp isalpha isdigit strcpy isspace |
| api-ms-win-crt-heap-l1-1-0.dll |
_set_new_mode
malloc free _callnewh realloc |
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Apr-19 14:48:13 |
| Version | 0.0 |
| SizeofData | 740 |
| AddressOfRawData | 0x14958 |
| PointerToRawData | 0x13d58 |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x140093040 |
| XOR Key | 0x338e9bb5 |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2008 SP1 build 30729) | 16 |
| ASM objects (35207) | 4 |
| C objects (35207) | 10 |
| C++ objects (35207) | 30 |
| Imports (35207) | 6 |
| Imports (33145) | 11 |
| Total imports | 196 |
| C++ objects (LTCG) (35225) | 1 |
| Linker (35225) | 1 |
No comments yet.