Manalyzer :: c2d3cd227b0e124981c92a650440b82aa9700532b5ccf2d47d6f2387eee38083

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Jan-02 19:37:58
Detected languages	English - United States
CompanyName	COBRA
ProductName	COBRA SP
FileVersion	`1.00.0003`
ProductVersion	`1.00.0003`
InternalName	COBRA SP ENBRST 1.0.3
OriginalFilename	COBRA SP ENBRST 1.0.3.exe

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual Basic v5.0/v6.0` `Microsoft Visual Basic v5.0 - v6.0`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`9e836a0e8f33aad4dc201dbcce5715b0`
SHA1	`105910532fdf8a73d409112a7decdc373cb626b0`
SHA256	`c2d3cd227b0e124981c92a650440b82aa9700532b5ccf2d47d6f2387eee38083`
SHA3	`c8d2a7abbbcaebdaa6b8e2615f72f50c8506f987b8044482c3066019fe0c7907`
SSDeep	`6144:AMKBURYQuFn7c+JIcVHZ1z+GgAPcpKRfMKBq+HZ1z+GgAPcpKR:nKBp17c+JIcV3+hAPcpKSKBq+3+hAPc`
Imports Hash	`182f7608d21ab038cc974e97b422e949`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xc0`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`3`
TimeDateStamp	2026-Jan-02 19:37:58
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED` `IMAGE_FILE_RELOCS_STRIPPED`

Image Optional Header

Magic	`PE32`
LinkerVersion	`6.0`
SizeOfCode	`0x3f000`
SizeOfInitializedData	`0x19000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000017D8 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x40000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x1000`
OperatingSystemVersion	`4.0`
ImageVersion	`1.0`
SubsystemVersion	`4.0`
Win32VersionValue	`0`
SizeOfImage	`0x59000`
SizeOfHeaders	`0x1000`
Checksum	`0x58d7a`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`b1e15e43be59b41c96df8056d9cac41f`
SHA1	`addf78da07d522838e48693142aa1981b62906af`
SHA256	`50105a8101313c12dc8f123197a0b4a384f6b7407a46c03781db81eea9a8e801`
SHA3	`2b8f75e440d072fca1c3366cad1b99c52c50d136ca903077b29aac33474de10b`
VirtualSize	`0x3ebd0`
VirtualAddress	`0x1000`
SizeOfRawData	`0x3f000`
PointerToRawData	`0x1000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`7.05438`

.data

MD5	`620f0b67a91f7f74151bc5be745b7110`
SHA1	`1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d`
SHA256	`ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7`
SHA3	`a99f9ed58079237f7f0275887f0c03a0c9d7d8de4443842297fceea67e423563`
VirtualSize	`0x1a68`
VirtualAddress	`0x40000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x40000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.rsrc

MD5	`629754c35a6754923bde13e298258837`
SHA1	`741e4dd706cf4104baa37129a516e574f194753d`
SHA256	`4881c1ff78c7517a16a964f5d74593a7242e9b2f85cf6099e8c759750a4f1640`
SHA3	`52e87812688ca503587ac60f20899908a9d8d57e821e702b7770d5acd3046887`
VirtualSize	`0x16a98`
VirtualAddress	`0x42000`
SizeOfRawData	`0x17000`
PointerToRawData	`0x41000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.04603`

Imports

MSVBVM60.DLL	`__vbaVarTstGt` `__vbaVarSub` `_CIcos` `_adj_fptan` `__vbaVarVargNofree` `__vbaFreeVar` `__vbaLenBstr` `__vbaLateIdCall` `__vbaStrVarMove` `__vbaEnd` `__vbaFreeVarList` `_adj_fdiv_m64` `__vbaFreeObjList` `_adj_fprem1` `__vbaResume` `__vbaStrCat` `#660` `#553` `__vbaHresultCheckObj` `_adj_fdiv_m32` `__vbaExitProc` `__vbaOnError` `__vbaObjSet` `_adj_fdiv_m16i` `__vbaObjSetAddref` `_adj_fdivr_m16i` `#520` `__vbaBoolVarNull` `_CIsin` `__vbaChkstk` `EVENT_SINK_AddRef` `__vbaStrCmp` `__vbaVarTstEq` `_adj_fpatan` `__vbaR4Var` `__vbaLateIdCallLd` `EVENT_SINK_Release` `_CIsqrt` `__vbaVarAnd` `EVENT_SINK_QueryInterface` `__vbaExceptHandler` `__vbaDateStr` `_adj_fprem` `_adj_fdivr_m64` `#608` `__vbaFPException` `__vbaVarCat` `_CIlog` `__vbaNew2` `_adj_fdiv_m32i` `_adj_fdivr_m32i` `__vbaStrCopy` `__vbaFreeStrList` `_adj_fdivr_m32` `_adj_fdiv_r` `#685` `#100` `__vbaI4Var` `__vbaVarCmpEq` `#610` `__vbaVarDup` `__vbaFreeVarg` `_CIatan` `__vbaStrMove` `#619` `#543` `_allmul` `__vbaLateIdSt` `_CItan` `#546` `_CIexp` `__vbaFreeObj` `__vbaFreeStr`

Delayed Imports

30001

Type	`RT_ICON`
Language	UNKNOWN
Codepage	Unicode (UTF 16LE)
Size	`0x16744`
TimeDateStamp	2026-Jan-02 19:37:58
Entropy	`6.09492`
MD5	`51dac2263610db897ce3720591c5fe19`
SHA1	`f4a122ce1bc4e9d75f3a2a3856e3628292511186`
SHA256	`d104b9ba1dc39fba7050d7b50ca6a35823f61e4d5d1d7c551729cd2c85f0bcd4`
SHA3	`0d5cd24726930a0a489d8ccb158b69556329ad13383182ccf80aa2dd8931e514`

1

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	Unicode (UTF 16LE)
Size	`0x14`
TimeDateStamp	2026-Jan-02 19:37:58
Entropy	`2.49546`
Detected Filetype	Icon file
MD5	`23d3d47ac0e341bab650486cc1810b54`
SHA1	`aedaf3442c491994d19f8c8b4f21cd05acc61628`
SHA256	`52b6deebc35f4cdeba48adc22de20d383e11c4d42bbbdc7bd112c8908f664073`
SHA3	`2275d267e1ca1d0ef4e52cc2cf337219136811c905b4e0bdc7b3b65c085c31e3`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	Unicode (UTF 16LE)
Size	`0x250`
TimeDateStamp	2026-Jan-02 19:37:58
Entropy	`3.31722`
MD5	`c745a5851530b63f69580ff86482fc67`
SHA1	`d440443042f9dd52061af86f481df8ea823790bd`
SHA256	`6e543ab7ecd1bcd1243318b21a1e0466c5e4f2f251203aabb7eabde142e5aee0`
SHA3	`59cfeb3494db8ac9dcd70dc7e2c6d6bcd906a8e629dcadcc018f777e2564682d`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.0.0.3
ProductVersion	1.0.0.3
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	English - United States
CompanyName	COBRA
ProductName	COBRA SP
FileVersion (#2)	1.00.0003
ProductVersion (#2)	1.00.0003
InternalName	COBRA SP ENBRST 1.0.3
OriginalFilename	COBRA SP ENBRST 1.0.3.exe

Resource LangID	English - United States

TLS Callbacks

Load Configuration

RICH Header

XOR Key	`0x8ace4d53`
Unmarked objects	`0`
14 (7299)	`1`
9 (8783)	`6`
13 (VS98 SP6 build 8804)	`1`

Errors

Leave a comment

No comments yet.