99085243c510fe5a76f2b84618027bb7d26c686f45f055b451651c65b0d0b2ad

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Aug-30 00:01:11
Detected languages English - United States

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to system / monitoring tools:
  • wireshark.exe
 Contains references to debugging or reversing tools:
  • ida.exe
  • ida64.exe
  • x32dbg.exe
  • x64dbg.exe
 Contains domain names:
  • https://discord.gg
  • https://keyauth.win
Info Cryptographic algorithms detected in the binary: Uses constants related to RC5 or RC6
Suspicious The PE is possibly packed. Unusual section name found: .rcal
Malicious The PE contains functions mostly used by malware. Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
  • FindWindowA
 Code injection capabilities:
  • OpenProcess
  • VirtualAlloc
  • WriteProcessMemory
 Code injection capabilities (PowerLoader):
  • FindWindowA
  • GetWindowLongA
 Can access the registry:
  • RegCloseKey
  • RegSetValueExA
  • RegOpenKeyExA
 Possibly launches other programs:
  • WinExec
  • system
 Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • GetAsyncKeyState
 Has Internet access capabilities:
  • WinHttpOpenRequest
  • WinHttpReceiveResponse
  • WinHttpReadData
  • WinHttpConnect
  • WinHttpCloseHandle
  • WinHttpOpen
  • WinHttpQueryDataAvailable
  • WinHttpSendRequest
 Enumerates local disk drives:
  • GetVolumeInformationA
 Manipulates other processes:
  • OpenProcess
  • ReadProcessMemory
  • WriteProcessMemory
  • Process32First
  • Process32Next
 Reads the contents of the clipboard:
  • GetClipboardData
Malicious VirusTotal score: 26/69 (Scanned on 2026-11-04 17:56:23) APEX: Malicious
AVG: FileRepMalware [Misc]
AhnLab-V3: Trojan/Win.Tedy.C5938134
Avast: FileRepMalware [Misc]
Bkav: W32.Malware.CFD1DD0C
CAT-QuickHeal: Trojan.Agent
CrowdStrike: win/malicious_confidence_90% (W)
Cylance: Unsafe
DeepInstinct: MALICIOUS
ESET-NOD32: Win64/GameHack_AGen.CGF potentially unsafe application
Elastic: malicious (high confidence)
Fortinet: Adware/GameHack_AGen
Google: Detected
Lionic: Trojan.Win32.GameHack.4!c
McAfeeD: ti!99085243C510
Microsoft: Trojan:Win32/Wacatac.B!ml
Paloalto: generic.ml
Panda: Trj/GdSda.A
Rising: Trojan.Kryptik@AI.91 (RDML:5iOxnb8LWo3ltSxLYLUS7A)
SentinelOne: Static AI - Malicious PE
Symantec: ML.Attribute.HighConfidence
TrellixENS: Artemis!50D358BAA733
TrendMicro: TROJ_FRS.VSNTIG26
TrendMicro-HouseCall: TROJ_FRS.VSNTIG26
Varist: W64/ABApplication.LNRI-8799
ViRobot: Trojan.Win.Z.Gamehack_Agen.1648640

Hashes

MD5 50d358baa7339509ab37ddb2f5a3ee32 🔍
SHA1 8584c621b5d2fff5bf7f9c467e120ac4c1ee12eb 🔍
SHA256 99085243c510fe5a76f2b84618027bb7d26c686f45f055b451651c65b0d0b2ad 🔍
SHA3 1fb2c2d12daeb5cd659e42fe85e991aa3456f888fabeb464e0b055bf21a7ce01 🔍
SSDeep 24576:9T/lUIuRgjbnaarkGbXvoQ+ex/nQvPXQUzg:ZeIuRQaw8elnQHXQUz 🔍
Imports Hash 2063d6651991b10585d413ffdde8b162 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Aug-30 00:01:11
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xb7a00
SizeOfInitializedData 0xef000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000000B4D28 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x1ab000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 8e58e41191f2731f189596bcfd9327ca 🔍
SHA1 00a470b2745f7391a0e7cb499734c596542e9369 🔍
SHA256 c14bcb7b2277272126be4f3f29f7dfee7dbfac56d368ad81bf800e8f8304ef5b 🔍
SHA3 7d32b26b28d4c9826a78acc64a1f2bbbfda1a36f894b2f5bb235e2417d3a6345 🔍
VirtualSize 0xb79ff
VirtualAddress 0x1000
SizeOfRawData 0xb7a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.01237

.rdata

MD5 a49b278a9a4bb24c3ba32aca86f12ae7 🔍
SHA1 89ed2e608bf0273538aeea8fb28227545c4e57b8 🔍
SHA256 56355b7de06e48b2f614094aed6f1a18484a483d12bf31899f36effac22eb04c 🔍
SHA3 3ff229eaeb5a47df2aa715bb8e98ce9f401a5c0e630c5829b6e8111f299f3f0a 🔍
VirtualSize 0xcf7e2
VirtualAddress 0xb9000
SizeOfRawData 0xcf800
PointerToRawData 0xb7e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.22727

.data

MD5 dd41fb5cbb88385437e54d79ba39aec7 🔍
SHA1 a8e131ba6a20a88e3a37ffe8810ac2ba3bee3b26 🔍
SHA256 b2432e58276e13a74751356271088bea063c2149a52836553ac32c92690aab3c 🔍
SHA3 5fe6c99b3e121f82a6830b6941cbd4bf23d12e62cebbc42d67fea0b75c1502ef 🔍
VirtualSize 0x16870
VirtualAddress 0x189000
SizeOfRawData 0x2400
PointerToRawData 0x187600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.13443

.pdata

MD5 438118cec3ab9f4571dc6331bc693d16 🔍
SHA1 687085a2913f7e885c5869c9d3923de03108bcba 🔍
SHA256 8fa994afd5905201c7dcc4e93b607d18b4a7803ad1ade80d450c4932b70a485b 🔍
SHA3 0292e6a8fb6cd830ad60400001f332d5bd0bc24a38c71d96c0d8f3b025d612f6 🔍
VirtualSize 0x7e0c
VirtualAddress 0x1a0000
SizeOfRawData 0x8000
PointerToRawData 0x189a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.72149

.rcal

MD5 a66b87d95380746eb7ef4b31710c3e85 🔍
SHA1 3c4c113746544fd6587d562ce51e982d5fed1553 🔍
SHA256 9ebadd4af10d97171f607a084790c2039dde42b10e4d02f5c18325f20cde1910 🔍
SHA3 c0c64e524a179d6d0cf7df58e83474cd51349e9fa7582545d35e88d643c789e2 🔍
VirtualSize 0x4b
VirtualAddress 0x1a8000
SizeOfRawData 0x200
PointerToRawData 0x191a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 1.2544

.rsrc

MD5 df86c59f1187ffc3cedca8a831f2884c 🔍
SHA1 2b2d537b6e4cdc320a9c1168df9a1150bd8cf72f 🔍
SHA256 424bcae505fb8d88a73400fed100de24287a1424456c50b7a3d4732f6e2cc822 🔍
SHA3 03d763ad0be37a3d9b04a5a14bdd372af8e273ef9a473d02a0154b76dcc76de2 🔍
VirtualSize 0x1e8
VirtualAddress 0x1a9000
SizeOfRawData 0x200
PointerToRawData 0x191c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.77204

.reloc

MD5 15a2e0e52de109e172c8548096871a28 🔍
SHA1 2616be6385c6d01e5c21419117c8f36b8e9f4655 🔍
SHA256 5444001d9811025bf4c0ccf59a298aebea6ea2a7aae871b7550c812384d5dd3f 🔍
SHA3 7768b9e73c69f68b26ced26ee5fa3449a7f60e5b357ed87485bd6426443ca08e 🔍
VirtualSize 0x8a0
VirtualAddress 0x1aa000
SizeOfRawData 0xa00
PointerToRawData 0x191e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.12712

Imports

dwmapi.dll DwmExtendFrameIntoClientArea
KERNEL32.dll FindClose
FindFirstFileA
FindNextFileA
GetVolumeInformationA
CloseHandle
GetLastError
Sleep
GetCurrentProcess
CreateThread
OpenProcess
GetTickCount
VirtualAlloc
VirtualFree
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
GetModuleHandleA
GetModuleHandleW
GetProcAddress
WinExec
SetConsoleTextAttribute
GetConsoleWindow
CreateToolhelp32Snapshot
Process32First
Process32Next
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
CreateFileW
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CreateDirectoryA
GetStdHandle
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
UnhandledExceptionFilter
ReleaseSRWLockExclusive
USER32.dll SetWindowLongA
FindWindowA
GetWindow
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetKeyState
GetWindowLongA
GetCapture
SetCapture
ReleaseCapture
GetClientRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
LoadCursorA
TranslateMessage
DispatchMessageA
PeekMessageA
DefWindowProcA
PostQuitMessage
RegisterClassA
UnregisterClassA
CreateWindowExA
DestroyWindow
GetWindowRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetSystemMetrics
SendInput
GetAsyncKeyState
SetWindowPos
ShowWindow
GDI32.dll GetStockObject
ADVAPI32.dll GetCurrentHwProfileA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
IMM32.dll ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
MSVCP140.dll ??1_Lockit@std@@QEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exceptions@std@@YAHXZ
_Query_perf_counter
_Query_perf_frequency
_Mtx_lock
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?rdstate@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Xbad_function_call@std@@YAXXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
d3d9.dll Direct3DCreate9Ex
WINMM.dll PlaySoundA
WINHTTP.dll WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpSendRequest
VCRUNTIME140.dll __std_terminate
__current_exception_context
__current_exception
__C_specific_handler
strchr
_purecall
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove
memcpy
memchr
strstr
VCRUNTIME140_1.dll __CxxFrameHandler4
api-ms-win-crt-string-l1-1-0.dll strlen
isprint
strcmp
wcsncpy_s
strncpy_s
_stricmp
strncmp
strncpy
api-ms-win-crt-stdio-l1-1-0.dll fflush
fread
fseek
ftell
fwrite
__p__commode
__stdio_common_vfprintf
_set_fmode
ungetc
setvbuf
__stdio_common_vsprintf
_fseeki64
__acrt_iob_func
fsetpos
fputc
fgetpos
fgetc
ferror
feof
__stdio_common_vsscanf
_get_stream_buffer_pointers
fopen_s
_wfopen
fclose
api-ms-win-crt-heap-l1-1-0.dll _set_new_mode
free
realloc
_callnewh
malloc
api-ms-win-crt-utility-l1-1-0.dll abs
rand
qsort
_lrotl
api-ms-win-crt-math-l1-1-0.dll acosf
ceilf
cosf
floorf
sinf
ldexp
fmaxf
fmodf
atan2f
pow
fabs
_fdtest
tanf
_dtest
roundf
_dsign
__setusermatherr
fminf
sqrt
powf
sqrtf
api-ms-win-crt-runtime-l1-1-0.dll _cexit
_seh_filter_exe
_set_app_type
_crt_atexit
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
__p___argc
__p___argv
_c_exit
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_errno
terminate
exit
_invoke_watson
_initialize_narrow_environment
system
_register_thread_local_exe_atexit_callback
api-ms-win-crt-convert-l1-1-0.dll atof
strtoll
strtoul
strtoull
strtod
strtol
api-ms-win-crt-filesystem-l1-1-0.dll _unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0.dll localeconv
_configthreadlocale

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x188
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89623
MD5 b8e76ddb52d0eb41e972599ff3ca431b 🔍
SHA1 fc12d7ad112ddabfcd8f82f290d84e637a4d62f8 🔍
SHA256 165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8 🔍
SHA3 37f83338b28cb102b1b14f27280ba1aa3fffb17f7bf165cb7b675b7e8eb7cddd 🔍

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Aug-30 00:01:11
Version 0.0
SizeofData 928
AddressOfRawData 0x180640
PointerToRawData 0x17f440

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Aug-30 00:01:11
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x140180a00
EndAddressOfRawData 0x140180a34
AddressOfIndex 0x14019f2b0
AddressOfCallbacks 0x1400b9ad0
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x14018ac00

RICH Header

XOR Key 0x248f2e5a
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 18
Imports (35207) 6
ASM objects (35207) 4
C objects (35207) 10
C++ objects (35207) 35
Imports (33145) 19
Total imports 338
C++ objects (35228) 6
Resource objects (35228) 1
Linker (35228) 1

Errors

Leave a comment

No comments yet.