61756d206b5ccd2274b5c27490f345ad45cd791fe7c2962dbdc6da8dbabb503b

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Jul-09 19:12:23
Detected languages English - United States
Debug artifacts C:\Users\dogu1\source\repos\ConsoleApplication2\x64\Release\ConsoleApplication2.pdb

Plugin Output

Suspicious The PE is possibly packed. Unusual section name found: .fptable
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 95221d474dcddd1f6fa1fb6f0e8d2f31
SHA1 3c2e7187669e4b0c18c187b99208d9615840db2b
SHA256 61756d206b5ccd2274b5c27490f345ad45cd791fe7c2962dbdc6da8dbabb503b
SHA3 34269b9eec31f06c973500aad71c0c6412e00824229e77e2a62b2bdf1ac5fee6
SSDeep 3072:bnmQeBps2lhLvFnhq8V1Tcb5grtPD1cdFD7MQu1sRd1/MWKK:/2vFnhqQcyJChP4WKK
Imports Hash 6b039cd50fc7974d90205d741aa96a48

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Jul-09 19:12:23
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x1f400
SizeOfInitializedData 0x16400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000005850 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x3b000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ab118bb8373794661cbf35ac478fea19
SHA1 659b8215b8266bf04b26bb8c73f80dc848e57376
SHA256 39121b0d3dd9e6079393144f1e82c4448bbd57d9474b73f1a81422885dd9ac0e
SHA3 0a315a11631a10ac30d16b519734f366e6b3d34b69f417f32325f9b4a446685d
VirtualSize 0x1f22c
VirtualAddress 0x1000
SizeOfRawData 0x1f400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.42601

.rdata

MD5 69a1abfbebad2e867e11fd2bfec75db9
SHA1 3347d68c3aa01b0c45bd1b723253c752f676ea35
SHA256 a19be80ee7d092e7245b5e2b9b1d1feceb85807f0ec4a34b735d746fa6ac25da
SHA3 3b3da9ec98f125865aae694353ecfe19316db80754352e8bc5aabf1d953bd3cd
VirtualSize 0x10d96
VirtualAddress 0x21000
SizeOfRawData 0x10e00
PointerToRawData 0x1f800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.92565

.data

MD5 afc0f1995022259ffc4aa3be4537bc0a
SHA1 2da95752d2ef625082c355063d0b2dc63a5b537b
SHA256 26517ac059b69281b8eea2fc362b8fafa3ca60e1902a9ec157b9b155fbffd1f9
SHA3 ba2340459029bf51ab463ca16ac58e56b90c89375b644923641fa7911667b03e
VirtualSize 0x22d8
VirtualAddress 0x32000
SizeOfRawData 0x1400
PointerToRawData 0x30600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.60704

.pdata

MD5 90ef1df5de6773de9ff208e36739c554
SHA1 c221e6f66bd65e0e2600b142a9074ee3ec91faad
SHA256 efd1ae79ab5606d6b6576716827f297bb144e00aacc86e97baea6b9747057735
SHA3 a3534e7910b278c3c59c0ed34d2a1a418196b2a711ce4c9f9a77d9bfa26b3383
VirtualSize 0x2004
VirtualAddress 0x35000
SizeOfRawData 0x2200
PointerToRawData 0x31a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.10234

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
VirtualSize 0x100
VirtualAddress 0x38000
SizeOfRawData 0x200
PointerToRawData 0x33c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 911a6388d1481d6138f9faf89bc2fb96
SHA1 02f089c5fa4509b6a475099c8d5f4194e2bd3c8a
SHA256 1abbb3d1383a2e6972d8c540c2acc61a9d1e85702b23d9a2a3853e31222f953f
SHA3 404ba31e5937f31d1d4d3a686daf882cc52a7142e051676c6d6c85fb7c8f4ef1
VirtualSize 0x2b0
VirtualAddress 0x39000
SizeOfRawData 0x400
PointerToRawData 0x33e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.02475

.reloc

MD5 0b53b144477b9e383c0a5d85f359a374
SHA1 417c7a6ce20879156b8e8a9a62ca2c9470823e94
SHA256 da7e9f89d360343fc97b872d869c8bf89913d4fc135c2e417dde7fb8e7280b48
SHA3 27c7135ec0e005a2dadf9d48cf8866ff15e59bea648f1974ae371db5ac07109d
VirtualSize 0x91c
VirtualAddress 0x3a000
SizeOfRawData 0xa00
PointerToRawData 0x34200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.25134

Imports

KERNEL32.dll EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetCommandLineA
GetCommandLineW
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
VirtualProtect
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
HeapSize
CreateFileW
WriteConsoleW
RtlUnwind

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x249
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06044
MD5 f7e7c81035fc42015d50fadd75b9300f
SHA1 df759518191bad6608c336186b31c120b3dadb34
SHA256 72ae19a66b5d012088d762d3e2de6498a9b3b8fc153352ca6c76cf045d1fe96e
SHA3 1038ef4fa889f000231ecd6b7f2eb0759548ed2a8e5da6ca3e19b38062e60dbd

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jul-09 19:12:23
Version 0.0
SizeofData 108
AddressOfRawData 0x2e9a8
PointerToRawData 0x2d1a8
Referenced File C:\Users\dogu1\source\repos\ConsoleApplication2\x64\Release\ConsoleApplication2.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jul-09 19:12:23
Version 0.0
SizeofData 20
AddressOfRawData 0x2ea14
PointerToRawData 0x2d214

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jul-09 19:12:23
Version 0.0
SizeofData 920
AddressOfRawData 0x2ea28
PointerToRawData 0x2d228

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Jul-09 19:12:23
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1400320c0

RICH Header

XOR Key 0xfd61f20c
Unmarked objects 0
C++ objects (33145) 167
C objects (33145) 17
ASM objects (33145) 7
ASM objects (35721) 10
C objects (35721) 16
C++ objects (35721) 79
Imports (33145) 3
Total imports 94
C++ objects (LTCG) (36248) 1
Resource objects (36248) 1
Linker (36248) 1

Errors

Leave a comment

No comments yet.