b804e4c6d2b51e3b2a3f79e21cbf9112a30da2c656acdc93759698377a95b86d

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2074-Oct-23 12:20:15
Debug artifacts C:\Users\amadh\Desktop\projects\ex\rawaccel-master\grapher\obj\x64\Release\rawaccel.pdb
Comments
CompanyName
FileDescription Raw Accel GUI
FileVersion 1.7.0
InternalName rawaccel.exe
LegalCopyright
LegalTrademarks
OriginalFilename rawaccel.exe
ProductName Raw Accel
ProductVersion 1.7.0
Assembly Version 1.7.0.0

Plugin Output

Suspicious PEiD Signature: UPolyX V0.1 -> Delikon
Suspicious The PE is possibly packed. The PE only has 0 import(s).
Malicious VirusTotal score: 3/65 (Scanned on 2026-07-23 02:57:55) CrowdStrike: win/malicious_confidence_90% (D)
Paloalto: generic.ml
VirIT: Trojan.Win64.MSIL_Heur.A

Hashes

MD5 e3862b2de1207b82de16020081291c65
SHA1 aca139feabe9fb715a7973401a6771d991aab300
SHA256 b804e4c6d2b51e3b2a3f79e21cbf9112a30da2c656acdc93759698377a95b86d
SHA3 7a22863a5c834a0a536995977a461e381d59091c10f589ea13a5ed4c7ec4ad99
SSDeep 49152:/hjxqNFHYkmwbIjhFTw9NaYlt9dAVZ4WMLoiDGRXFR5uP+TxEA/Ji/dsoN0TDho:+v0jhp38CP4W2oqmTxLY5a9pG
Imports Hash d41d8cd98f00b204e9800998ecf8427e

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 2
TimeDateStamp 2074-Oct-23 12:20:15
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 48.0
SizeOfCode 0x347000
SizeOfInitializedData 0x1c000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000000000 (Section: ?)
BaseOfCode 0x2000
ImageBase 0x140000000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x366000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x400000
SizeofStackCommit 0x4000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x2000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 f82de525579602e48d66ee90340c0f96
SHA1 0a0cbc90ff6f7206986b20bb9cdb4140191b3d5d
SHA256 3e8a56194f32c524fb5d24cc377edde360f45ee08d8585cefb1e15a17bbbcf2b
SHA3 019545dba76779e4c61760de78895786a1e8648b58ace49d27b059c666b1557f
VirtualSize 0x346f80
VirtualAddress 0x2000
SizeOfRawData 0x347000
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.92279

.rsrc

MD5 15efebe261627f1a1811592ab3e75679
SHA1 c7fe4a5e1ada070fb48b74fcf6054b8426218c95
SHA256 c60b501a2eb66e09210ccd5e3c044e2499fbd97b72887628801f302d054fcf66
SHA3 4409487aa045967e0d2417bd48f681cf53b5fe0e354d84e6c7b68790169d6145
VirtualSize 0x1bf24
VirtualAddress 0x34a000
SizeOfRawData 0x1c000
PointerToRawData 0x347200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.24339

Imports

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x28f0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95069
Detected Filetype PNG graphic file
MD5 e785b01e006ce975f0b9158b3fbe1890
SHA1 7af35de6128010aeebc2f868ab281da81464aa2b
SHA256 c403cc1b323470babeda99364d8b150f0bfffda7965f6a1988e66838a6d52364
SHA3 724f3f95019fde711d74828aed85760882fc3bafb1d9d9adb275ff26916bb605

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.15335
MD5 55208dc3769bacc6bfdeb96238211cf5
SHA1 914943581158cfac063a178698e7e5e68429a7bc
SHA256 981382eada46749f8c4b4d00ad2b85015b0d7a725a42cc91cdfdb676cbe27ea1
SHA3 32cb119db10f180d932744b1656124e1589eba568efec066e41b9d6f553c9bfc

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.53223
MD5 3f57b57aa5b8c18b336614d3bdd6b9b5
SHA1 148226878b55773636c50c1e7822b9a9d9fd1a21
SHA256 214a6ecf3d55c678b78c4f781528dcfc73c8ab172f50805e837318ebf4484ddb
SHA3 fed9a6a69bde6ff3b5db09c56d917c0002ce5519d7cf8e4435de10391d1f1e0a

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82084
MD5 a00bb52a9327d928ef9d79a4a606cd8b
SHA1 979573907bd872789e67f0008fdbee24fc3d08fe
SHA256 8ecf1d3b695f3b20e50a80c2d3c23cf73099afdb7b34e7a8269f4d7831cdcfcf
SHA3 6bd13cdb09a5342f5e07f1faaf1d2168e6f91adc05ec60b01415746491fe417d

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16923
MD5 1aa3d967f744e791d78d9d337012d66e
SHA1 94c3dd8d430e92ef351cd78665c8e6502378a0f4
SHA256 236b1237765c2471c0ba35c99728f46cf8d02f8a7925901c5f56729277dca11d
SHA3 f2d2a2a0797963ac2a8a4cc640a1cff3cb482e3f324f2eee2cee1c980f335681

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.57831
MD5 fee898c81eb6c5976628e53ce0c6fcf3
SHA1 3c5d5c38f07a707a2e8c9be1c7ea1a168881ce64
SHA256 c5ef6d63e173cd3c7e1a5c402d3e11fc9d300eb644970251d57a8cb51062bbd9
SHA3 3943f75ed8eab519740804ad78993e7e23093d1c6c28d6324760bdd179051cda

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.89784
MD5 b77f532c3b7c56a93109d02c8d129cc0
SHA1 3185ac99e27ab87c6b533b95b15a1d6b012ae1fc
SHA256 2c37ba3cc7b18520bfb159219caaa93d3faa990098e696a86b31b7708022208b
SHA3 58889c945f9327317421e93f9ddc1c12e8ce5257b62f4a48b46b0af7fc9dcd99

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.89253
Detected Filetype Icon file
MD5 ec0c6427194ac7d2ef8642cef59c1b44
SHA1 10805a001bfec5d2d75f0d364f8ecd49434d93a4
SHA256 1b0e73312412339e7f2f8e6971982ba113ca29c1b2d39fe847ad63e9ad2ab7ae
SHA3 398768fcd5a91bd8e587b9e0e0a56e6a194a023a8f3c94872667f785b3642b17

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x2fc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27561
MD5 b2e5a32986835d1cec592a295a0478ac
SHA1 a638c158b6d8c06fe523d23fa45003462081494e
SHA256 b4eb28f67d1668a6dbdc141fbb437dffbe4b2ec23cef09a8755c05dd28cf1731
SHA3 72c872686fd53749ab4dccb5f39de1a32980e8350754fd45f89192f8fb19fbdd

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x1ea
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.00112
MD5 b7db84991f23a680df8e95af8946f9c9
SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734
SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a
SHA3 4f72877413d13a67b52b292a8524e2c43a15253c26aaf6b5d0166a65bc615cff

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.7.0.0
ProductVersion 1.7.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments
CompanyName
FileDescription Raw Accel GUI
FileVersion (#2) 1.7.0
InternalName rawaccel.exe
LegalCopyright
LegalTrademarks
OriginalFilename rawaccel.exe
ProductName Raw Accel
ProductVersion (#2) 1.7.0
Assembly Version 1.7.0.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2086-Jul-24 08:01:18
Version 0.0
SizeofData 112
AddressOfRawData 0x54fac
PointerToRawData 0x531ac
Referenced File C:\Users\amadh\Desktop\projects\ex\rawaccel-master\grapher\obj\x64\Release\rawaccel.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.