457053179b5ff9223bf9abb534509d4e93ec5f2e8f6a061be755e23c7164f54a

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-May-08 14:48:14
Detected languages English - United States
Debug artifacts D:\cash tools\HWIDSpoofer SRC\x64\Release\SpooferDLL.pdb

Plugin Output

Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Malicious VirusTotal score: 24/65 (Scanned on 2026-05-23 01:14:35) ALYac: Trojan.GenericKD.80146380
Antiy-AVL: Trojan/Win32.Agent
Arcabit: Trojan.Generic.D4C6EFCC
Avira: TR/W64.Agent
BitDefender: Trojan.GenericKD.80146380
CTX: dll.trojan.generic
Cynet: Malicious (score: 100)
DeepInstinct: MALICIOUS
Emsisoft: Trojan.GenericKD.80146380 (B)
F-Secure: Trojan.TR/W64.Agent
GData: Trojan.GenericKD.80146380
Google: Detected
Lionic: Trojan.Win32.Generic.4!c
McAfeeD: ti!457053179B5F
MicroWorld-eScan: Trojan.GenericKD.80146380
Microsoft: Trojan:Win32/Wacatac.B!ml
Rising: Trojan.Kryptik!8.8 (RDMK:cmRtazoOsYimp3MNQVL6UldyeNl9)
Sangfor: Trojan.Win32.Agent.Vtva
Symantec: ML.Attribute.HighConfidence
TrendMicro: Trojan.Win32.ZYX.USBLEM26
TrendMicro-HouseCall: Trojan.Win32.ZYX.USBLEM26
VIPRE: Trojan.GenericKD.80146380
Varist: W64/ABTrojan.VBJX-1346
alibabacloud: Suspicious

Hashes

MD5 3830d099ea999ada8481541bb661f858 🔍
SHA1 4e77a31abe78a0dfa766c07557d57c104ed99af3 🔍
SHA256 457053179b5ff9223bf9abb534509d4e93ec5f2e8f6a061be755e23c7164f54a 🔍
SHA3 4c7c53739a5972a878b0cbb74081197468b63001c63e34e8601b79951ea5efcb 🔍
SSDeep 1536:iYkTqpEa9yS+NwvuTHzSnALPJiKLLCMebg9ZE8vsWfudZ9dlwTA0qjUSz5:if/xevGTQALPpL2Mebg7VB0RqA0qjPF 🔍
Imports Hash 886cfe38b5037b1af2c6cd915d149e8f 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-May-08 14:48:14
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xc800
SizeOfInitializedData 0xca00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001404 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x1e000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 48bd810581dd9130a18485d8f7c24d2f 🔍
SHA1 4a49e036874996b84eed1cab02c277f7391a99c7 🔍
SHA256 e656cb581735cf4b18f3730873fccc254858021be584247873773683378fcd8d 🔍
SHA3 e52d466abb35fe17d05acab68c6b375333706d14e79650a6768ee21427c3df2b 🔍
VirtualSize 0xc7d0
VirtualAddress 0x1000
SizeOfRawData 0xc800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.43309

.rdata

MD5 d182af979bb002d942cdd861ec57476a 🔍
SHA1 e1059ce21d559bf9fc144f792e831c015879ce42 🔍
SHA256 6a7f650836b2a8a2fe38868b93bfaef7659123bf219e3556a3735c512587c9ad 🔍
SHA3 933839dd9d95bd80dc73249a10ec06fa86218f2d75f5ed8571a57f65ed5806f6 🔍
VirtualSize 0x9754
VirtualAddress 0xe000
SizeOfRawData 0x9800
PointerToRawData 0xcc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.67906

.data

MD5 11bea27c165fd385758c9bf00dbbc94f 🔍
SHA1 44c633cdfc59a17d6431c62fcf00ba86bcaeb91f 🔍
SHA256 9f46e921b4ffcf6c133135de39dba7fb63941682596b29ea9aad6661dc09028c 🔍
SHA3 0c39b41981aa138bf9bca1ec7070735fa1e809f74f2f0879f4c58e2472d2f365 🔍
VirtualSize 0x1588
VirtualAddress 0x18000
SizeOfRawData 0xc00
PointerToRawData 0x16400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.92279

.pdata

MD5 d2d820b9dedbc2182704bb1740aa9094 🔍
SHA1 cc37eac6eedba0e87b4cd9bf85dffa24c18665c8 🔍
SHA256 63e40d60d1f74b8d21a68a0bffa0285860e7e999475f0c226779c95832f97d9d 🔍
SHA3 01595b123f66ca7f016def8a0e12d8082e4f558b73f6a81c053490e91d0b488b 🔍
VirtualSize 0xea0
VirtualAddress 0x1a000
SizeOfRawData 0x1000
PointerToRawData 0x17000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.56149

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x100
VirtualAddress 0x1b000
SizeOfRawData 0x200
PointerToRawData 0x18000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 8a48e252156d2953f01762ba42c44c88 🔍
SHA1 a4cc63ded31eb1e586a1b2b1c1377ad719b00b6e 🔍
SHA256 2f8a5f5575b80fb450d9fa2ea915c50d4a7cc4dd52cec6b0dadd8fda0de1a690 🔍
SHA3 c71641eabdf1e889dcd592c6e239e23321cc554bc484e5a5050ed004afcf81a0 🔍
VirtualSize 0xf8
VirtualAddress 0x1c000
SizeOfRawData 0x200
PointerToRawData 0x18200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.52496

.reloc

MD5 00cf690401cfd00fdeba3f964bf318ad 🔍
SHA1 07fb8dceb237e62a2b54bb76d8bc1793f9b255ae 🔍
SHA256 2913e95631078c04351f16395fb35c9ed3c648d502b32f2c11b8e60391a7cbd7 🔍
SHA3 96eda42f2b1aed7b8ca6d67f0732b69d6952ca10d635fbfd6503522c53ceb36a 🔍
VirtualSize 0x64c
VirtualAddress 0x1d000
SizeOfRawData 0x800
PointerToRawData 0x18400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.86588

Imports

KERNEL32.dll GetModuleHandleA
Sleep
DisableThreadLibraryCalls
CloseHandle
CreateThread
GetProcAddress
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetModuleFileNameW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
VirtualProtect
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Delayed Imports

2

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x91
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.8858
MD5 f7ad1eab748bc07570a57ec87787cf90 🔍
SHA1 0b1608da9fef218386e825db575c65616826d9f4 🔍
SHA256 d2952e57023848a37fb0f21f0dfb38c9000f610ac2b00c2f128511dfd68bde04 🔍
SHA3 6c9541b36948c19ae507d74223621875b3af4064f7cd8200bdb97e15a047e96a 🔍

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-May-08 14:48:14
Version 0.0
SizeofData 81
AddressOfRawData 0x15db4
PointerToRawData 0x149b4
Referenced File D:\cash tools\HWIDSpoofer SRC\x64\Release\SpooferDLL.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-May-08 14:48:14
Version 0.0
SizeofData 20
AddressOfRawData 0x15e08
PointerToRawData 0x14a08

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-May-08 14:48:14
Version 0.0
SizeofData 780
AddressOfRawData 0x15e1c
PointerToRawData 0x14a1c

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-May-08 14:48:14
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x180018000

RICH Header

XOR Key 0xd6aaa033
Unmarked objects 0
C++ objects (33145) 137
C objects (33145) 12
ASM objects (33145) 6
ASM objects (35403) 9
C objects (35403) 14
C++ objects (35403) 31
Imports (33145) 3
Total imports 91
C++ objects (LTCG) (35730) 2
Resource objects (35730) 1
Linker (35730) 1

Errors

Leave a comment
💰 ONE MESSAGE for you #D0668 OPEN ->> graph.org/Cloud-Mining-08- 19 minutes ago
💰 ONE MESSAGE for you #D0668 OPEN ->> graph.org/Cloud-Mining-08-27?hs=11f4c7838a1f6cfd11cf5ba2bd79857e& 💰