593d616d5d2e778973e4615ed714b3b7c4c385114909ebe4f20b6e9fa3419441

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2102-Sep-14 23:47:59
Detected languages English - United States
Debug artifacts BootstrapPackagedGame-Win64-Shipping.pdb
FileVersion UE5-CL-0
CompanyName Annapurna Games, LLC
LegalCopyright Copyright Beethoven & Dinosaur. All Rights Reserved.
ProductName Mixtape
ProductVersion UE5-CL-0
FileDescription Mixtape
InternalName UnrealEngine
OriginalFilename BootstrapPackagedGame-Win64-Shipping.exe

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • adobe.com
  • http://ns.adobe.com
  • http://ns.adobe.com/photoshop/1.0/
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
  • http://purl.org
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • ns.adobe.com
  • www.w3.org
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryExW
 Can access the registry:
  • RegOpenKeyExW
  • RegCloseKey
  • RegQueryValueExW
 Possibly launches other programs:
  • CreateProcessW
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 19ddcbf96e3351b350874c0d829a90e2 🔍
SHA1 43276585c32b964c5670b2171c61b0d002696344 🔍
SHA256 593d616d5d2e778973e4615ed714b3b7c4c385114909ebe4f20b6e9fa3419441 🔍
SHA3 f476556dd73047be7088c02c6fa2278379a6a9d86bd4bbc79eb2541552009987 🔍
SSDeep 6144:x6vuddkya9DIWyXnqVcVyKYAxwWcSqFxB+yEbMxrC:QvudayaKWyXnJ4HlrB+yyMxrC 🔍
Imports Hash 7205babffedede39c778ba91c40d887b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 8
TimeDateStamp 2102-Sep-14 23:47:59
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x14c00
SizeOfInitializedData 0x2a000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000000023A8 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x45000
SizeOfHeaders 0x400
Checksum 0x2e7a6
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0xb71b00
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 6fc176811fd7269a1d5061f404d497e6 🔍
SHA1 6ec58690972b8be583fb515429d122d966447291 🔍
SHA256 daace96b78f8ae7fbae39ad22af06be21d521436bc47252ccfbe4656a4a7ac04 🔍
SHA3 d848d6077690bd7a302e87ec28772bc9676f82823b3a59cfc2356f59cd048621 🔍
VirtualSize 0x14b40
VirtualAddress 0x1000
SizeOfRawData 0x14c00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.49106

.rdata

MD5 548f317926b9af82be7f802f3d7c7404 🔍
SHA1 6aacbf0b3179296066e0851b33cdd38924c97b28 🔍
SHA256 34accb8cce1a328be227d97f21bc9a6210b205f715d392fc26fe6843520c2fae 🔍
SHA3 7bc2e446dba5b3e67803cdbd495a57620f8b827e52861b89e37ab38743826454 🔍
VirtualSize 0xb606
VirtualAddress 0x16000
SizeOfRawData 0xb800
PointerToRawData 0x15000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.92187

.data

MD5 91dfec846482e97543a1668c483d7d1b 🔍
SHA1 4ec21784dd52204f7a6322d4b7c258e6adc6fab4 🔍
SHA256 749a1ed000b65e7c90827a82bcc03103afe6f013360475b56d9a71f98e909d8d 🔍
SHA3 d33d2bc37fce40cff9a6bec681ab0b703c49f37a0e6bea86031c2cbaeb3e962b 🔍
VirtualSize 0x1d48
VirtualAddress 0x22000
SizeOfRawData 0xc00
PointerToRawData 0x20800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.06701

.pdata

MD5 ef8a77ac48460c0c9c2ea45d75fa969d 🔍
SHA1 0cde1ebf678edfa21878ded3837f82608496de06 🔍
SHA256 97f335c01ee19f609f17875b33169533331a1633463085dd51de8628d7d3c25d 🔍
SHA3 efe65bf8eede40d0ef37b7210516b3e300ac672f86bce3f56134825ed4c1b2bb 🔍
VirtualSize 0x1338
VirtualAddress 0x24000
SizeOfRawData 0x1400
PointerToRawData 0x21400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.92284

_RDATA

MD5 f445a292d6e54ae5c5d81e08ee42752e 🔍
SHA1 0a2372426822a2994a59b33ee5097a5ccfb0ca03 🔍
SHA256 a44e793c03000987b44697a5a2d62de85f58208b6b0ce6ac403c0cde851c0ea8 🔍
SHA3 8c92e1790bf015df80e1b1fb4bf6d4ed888fa4122e4a1bfc1fcdabfae2cbceb8 🔍
VirtualSize 0x1f4
VirtualAddress 0x26000
SizeOfRawData 0x200
PointerToRawData 0x22800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.71282

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x100
VirtualAddress 0x27000
SizeOfRawData 0x200
PointerToRawData 0x22a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 d72ab2bd60b1d717c340f4f1c2e68d16 🔍
SHA1 14ca7a2b0e5bc38999c0a0f120c199521fe4f44a 🔍
SHA256 ee4a16901bf4675b4e23142328293735ad49fa60b5fe6ad12c623a241a549334 🔍
SHA3 b8766a155d37659ecbc80814f50a6ddd1f5c9e110ec57169dc6e534becc13ba6 🔍
VirtualSize 0x1bacc
VirtualAddress 0x28000
SizeOfRawData 0x1bc00
PointerToRawData 0x22c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.7193

.reloc

MD5 dbe9555eb3c0ec3026a5a7387b8b74a6 🔍
SHA1 7175e43bc957f502e83573c7adb51ebef22cd950 🔍
SHA256 d18984dfd77da118d60a83c65e4e370f2aaed0ecc513c4b46ccd01616302dfac 🔍
SHA3 94f8bf232e374785bc82968e8f6eedc097b5ca36a0ecb4756eec1bd26e6d9494 🔍
VirtualSize 0x6a0
VirtualAddress 0x44000
SizeOfRawData 0x800
PointerToRawData 0x3e800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.97571

Imports

KERNEL32.dll WaitForSingleObject
GetCurrentProcess
GetExitCodeProcess
CreateProcessW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetLastError
LockResource
SizeofResource
FindResourceW
LoadLibraryW
WriteConsoleW
CreateFileW
CloseHandle
GetFileAttributesW
LoadResource
GetEnvironmentVariableW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetProcessHeap
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
USER32.dll MessageBoxW
wsprintfW
ADVAPI32.dll RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SHELL32.dll ShellExecuteExW
SHLWAPI.dll PathCanonicalizeW
PathRemoveFileSpecW
PathCombineW
VERSION.dll GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.27555
MD5 fc1079cdb4c6da5df8736cf7cb8a468a 🔍
SHA1 d9ec35f88979bbdf97d728ad357e8b8fa1715648 🔍
SHA256 23743999c22eceaa0b83577e577598047332826082e4f1ca0ecc7ff1891df3e2 🔍
SHA3 19f449ebaaaba8b51420b5da495e4045c5e11b13dc55d200941624e9e593ebc4 🔍

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.57334
MD5 d1e7eb073d1c2cfc97ff25ea725aed63 🔍
SHA1 cb4e070133c3dcccbead63fb9358f3c5fe4c8e71 🔍
SHA256 09c710f69cdce8d36b29519b578d0a81cad356548d4405cbe6f761b2dac6da1d 🔍
SHA3 60cec624c36723331815e3766b4f3efe2e2be1c1a8dae71b4585242770542e0d 🔍

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.58449
MD5 05245373fd47348d3a8bf76b0c0b500b 🔍
SHA1 277224c2e7a6b18b52d52b3f5cefe9c8049c5d8f 🔍
SHA256 40c1fbca3ea86f721846b3897bb024fb5df9c42c5ad4cde6854212fc60057d7d 🔍
SHA3 5a9fe2b555a3a04c4bfbd807d29d0bbc5ce73123e23703b64cbc6dcf983980fb 🔍

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.60439
MD5 c4d50c86b338db95fc6b0a32c47ed7a2 🔍
SHA1 59fb76843f694d31ced94d00ccebe17de5f48b22 🔍
SHA256 da2aeb0369b657ff69aabdf6432a95f61dfb677c190c4d40c251ee20493d7f4b 🔍
SHA3 262b91c08f5448d41f5c0f5d173716656ec17792405218db9766538f541935b1 🔍

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.51441
MD5 563988eb949be8db583f7a55d04059d0 🔍
SHA1 91869e2228b3a48fd397ba76eb2cdacdfaf29393 🔍
SHA256 ca2e40c667559b17cfe423028961047b3b9cad8d9a1a3f907ed5b801dcfdc11b 🔍
SHA3 fd6b5bf6b0250a092d4d7849cfb4c0bf38e11db16c6328b82aa176a4ab504a80 🔍

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xdcb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.41581
Detected Filetype PNG graphic file
MD5 7bf36c29bcb6b5839d85c9c836216593 🔍
SHA1 86e7a55cacd17d1bda55a1a1de5a03adcba06c2b 🔍
SHA256 7a96ab7db1fa191a6bd087497c2f55239d7cda01dcc226e742daa80c5bc37de2 🔍
SHA3 72655fed7cd84d2c2de3957446a52a6a22dff86ca62a37d4e8586e86a1e613f0 🔍

7

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x1b13
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.73886
Detected Filetype PNG graphic file
MD5 1f48923337871ba25cf266bba17429cc 🔍
SHA1 279f47235e20eedee5daa535ea611e0aed1157d0 🔍
SHA256 2399dfb472a6c753447b847fbb144235145ca6507a60941b5295389c6fc45639 🔍
SHA3 06825c34eb7fe14d622735aa986a3e26247e95d5493a5b22eb3884f51b155493 🔍

201

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x64
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.06711
MD5 47ac5ce8232fa37d870fe93a6437d98f 🔍
SHA1 eaae7a0f2d0ac5c3f036f6a32f3401277904346a 🔍
SHA256 e64418806f322a59cbafcb36fd16d4d7243b92e2afe11516a5600bb38beaa92e 🔍
SHA3 d8eaae70d94ba2d68dd8e77f31f48198cc1fa3c3d072da281848de0c68a4c42a 🔍

202

Type RT_RCDATA
Language English - United States
Codepage Latin 1 / Western European
Size 0x10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.09192
MD5 a1fae82fa4e89aa081530e1fada00edb 🔍
SHA1 74a469fe39be2befe6bb41fc5c206d3fde8095e7 🔍
SHA256 d4dd8952af1041496ef886ded9ddd3360636610fcfa885fc41474aac316d2e7d 🔍
SHA3 35b43eec341d0bf2a79992636f114bd303b0e08d6506862b8bd2ee570113820a 🔍

101

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x4c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.80283
Detected Filetype Icon file
MD5 da9b70665374e3394540c51191a2dfd6 🔍
SHA1 c91b3f6407149e322850f6a257923abb260adeb5 🔍
SHA256 9595be7d246f12c7356d15b8facc45ea482de63d316af484c99156170b9d7362 🔍
SHA3 d75e51b150e9bb574412de784a1ecf652c36717a52f920f529a2c01e2dfce6af 🔍

123

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.93324
Detected Filetype Icon file
MD5 26e4bbdda9f8e58b060feaa53c3083e2 🔍
SHA1 bd724469fc43a9a58679a7016c303a5693fe9f94 🔍
SHA256 74c73b469e08909c1b539a80c66cb442d04b3c29cd03e8a533a3c349c5cc84c4 🔍
SHA3 49df4b8afdcf81a2097c2608740540f7e25ce3aa86c892702db1183998142c1b 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x344
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45113
MD5 57224d759997969f0677d1fc5c58cb75 🔍
SHA1 797702a76c977f8dc461a6e5a18f62d1dd074051 🔍
SHA256 3c1170b7d223b8f91260a3bb80cc9f9740ceece7614d4098aadb0ffe4666e07d 🔍
SHA3 19c0938a9740831c7950f75e719abe4a5232bda4c0e0448afca8147eca31fb9a 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x580
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.29956
MD5 c61240657e13443faa673941f5309de2 🔍
SHA1 c0fbe2a825d7b0526747bf774f0924ded81b7462 🔍
SHA256 527ba3511f5e6271211343cd03168ec681b1afc356ed87eeece038bbd480731b 🔍
SHA3 e61279125dbdfd1216bc206250bdaf599743f063b1fb74df33968dee1f3c874d 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.6.1.0
ProductVersion 5.6.1.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
FileVersion (#2) UE5-CL-0
CompanyName Annapurna Games, LLC
LegalCopyright Copyright Beethoven & Dinosaur. All Rights Reserved.
ProductName Mixtape
ProductVersion (#2) UE5-CL-0
FileDescription Mixtape
InternalName UnrealEngine
OriginalFilename BootstrapPackagedGame-Win64-Shipping.exe
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2102-Sep-14 23:47:59
Version 0.0
SizeofData 65
AddressOfRawData 0x1f414
PointerToRawData 0x1e414
Referenced File BootstrapPackagedGame-Win64-Shipping.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2102-Sep-14 23:47:59
Version 0.0
SizeofData 20
AddressOfRawData 0x1f458
PointerToRawData 0x1e458

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2102-Sep-14 23:47:59
Version 0.0
SizeofData 856
AddressOfRawData 0x1f46c
PointerToRawData 0x1e46c

UNKNOWN

Characteristics 0
TimeDateStamp 2102-Sep-14 23:47:59
Version 0.0
SizeofData 36
AddressOfRawData 0x1f7ec
PointerToRawData 0x1e7ec

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140022040

RICH Header

XOR Key 0x3a978c26
Unmarked objects 0
C objects (33145) 12
ASM objects (33145) 6
Unmarked objects (#2) 2
C objects (VS 2015-2022 runtime 33030) 16
ASM objects (VS 2015-2022 runtime 33030) 17
C++ objects (VS 2015-2022 runtime 33030) 45
Imports (33145) 13
Total imports 114
C++ objects (33145) 143
Resource objects (33145) 1
151 1
Linker (33145) 1

Errors

Leave a comment

No comments yet.