| Architecture |
IMAGE_FILE_MACHINE_I386
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date |
1970-Jan-01 00:00:00
|
|
Suspicious
|
The PE is possibly packed. |
The PE only has 0 import(s).
|
|
Suspicious
|
No VirusTotal score. |
This file has never been scanned on VirusTotal.
|
| MD5 |
9ee39bacd8e785abe7863a698c8833d2
🔍
|
| SHA1 |
ce6e10d441dd6da956de3fa51eca7983957dfbf7
🔍
|
| SHA256 |
930f72f31bdc04c692999fd51f290f96e502b4a42141558fa4bfa0b5927c53c0
🔍
|
| SHA3 |
f5cbd91b27d7bbd441211ef024c46cc312df54e7a8b42fb074c861462f3d0838
🔍
|
| SSDeep |
96:HckncoW3oKTI2XooIqz3oVkncoW3oKTI2XooIqz3o:HnioWXoooCioWXooo
🔍
|
| Imports Hash |
d41d8cd98f00b204e9800998ecf8427e
🔍
|
| e_magic |
MZ
|
| e_cblp |
0
|
| e_cp |
0
|
| e_crlc |
0
|
| e_cparhdr |
0
|
| e_minalloc |
0
|
| e_maxalloc |
0
|
| e_ss |
0
|
| e_sp |
0
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x40
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections |
1
|
| TimeDateStamp |
1970-Jan-01 00:00:00
|
| PointerToSymbolTable |
0
|
| NumberOfSymbols |
0
|
| SizeOfOptionalHeader |
0xe0
|
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
| Magic |
PE32
|
| LinkerVersion |
1.0
|
| SizeOfCode |
0x2200
|
| SizeOfInitializedData |
0
|
| SizeOfUninitializedData |
0
|
| AddressOfEntryPoint |
0x00001000 (Section: .rsrc)
|
| BaseOfCode |
0x1000
|
| BaseOfData |
0
|
| ImageBase |
0x400000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
4.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
4.0
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x4000
|
| SizeOfHeaders |
0x200
|
| Checksum |
0
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| SizeofStackReserve |
0x100000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
a05c163bedd808383227a420b1f01511
🔍
|
| SHA1 |
199555610763373be62ae66f3edc6e73179dcc63
🔍
|
| SHA256 |
3a4564324f72a9ce484cc84c9ece9a4b1164c91503173faf162e0a8d5c0893b8
🔍
|
| SHA3 |
52854639a245fc64eb2d169676be06fb0f1fa39b8c4286e6d46b4d75439f2865
🔍
|
| VirtualSize |
0x2200
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x2200
|
| PointerToRawData |
0x200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
2.90342
|
[!] Error: The PE's resource section exceeds the parsing limits. Resources will not be parsed.