| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2020-Sep-27 18:20:51 |
| Detected languages |
English - United States
|
| Debug artifacts |
C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb
|
| CompanyName | Coach Dave Academy |
| FileDescription | Coach Dave Delta |
| FileVersion | 5.4.3 |
| InternalName | Coach Dave Delta |
| LegalCopyright | Copyright (C) 2015 GitHub, Inc. All rights reserved. |
| OriginalFilename | Coach Dave Delta.exe |
| ProductName | Coach Dave Delta |
| ProductVersion | 5.4.3 |
| SquirrelAwareVersion | 1 |
| Info | Matching compiler(s): | Microsoft Visual C++ 6.0 - 8.0 |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: Speed Capital Ltd
Issuer: Sectigo Public Code Signing CA R36 |
| Safe | VirusTotal score: 0/71 (Scanned on 2026-03-27 21:29:57) | All the AVs think this file is safe. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x110 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
| Magic | PE32 |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x1bc00 |
| SizeOfInitializedData | 0x23800 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000882B (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x1d000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x44000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x4e290 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| KERNEL32.dll |
GetModuleFileNameW
GetModuleHandleW FindFirstFileW FindNextFileW FindClose CreateProcessW CreateFileW CloseHandle WideCharToMultiByte GetLastError MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW |
|---|---|
| USER32.dll |
AllowSetForegroundWindow
WaitForInputIdle |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 5.4.3.0 |
| ProductVersion | 5.4.3.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | Coach Dave Academy |
| FileDescription | Coach Dave Delta |
| FileVersion (#2) | 5.4.3 |
| InternalName | Coach Dave Delta |
| LegalCopyright | Copyright (C) 2015 GitHub, Inc. All rights reserved. |
| OriginalFilename | Coach Dave Delta.exe |
| ProductName | Coach Dave Delta |
| ProductVersion (#2) | 5.4.3 |
| SquirrelAwareVersion | 1 |
| Resource LangID | English - United States |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 107 |
| AddressOfRawData | 0x2aab8 |
| PointerToRawData | 0x29ab8 |
| Referenced File | C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x2ab24 |
| PointerToRawData | 0x29b24 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 808 |
| AddressOfRawData | 0x2ab38 |
| PointerToRawData | 0x29b38 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2020-Sep-27 18:20:51 |
| Version | 0.0 |
| SizeofData | 0 |
| AddressOfRawData | 0 |
| PointerToRawData | 0 |
| Size | 0xa0 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x42d068 |
| SEHandlerTable | 0x42a9d0 |
| SEHandlerCount | 58 |
| XOR Key | 0x530b4f95 |
|---|---|
| Unmarked objects | 0 |
| ASM objects (26213) | 13 |
| C++ objects (26213) | 155 |
| C objects (26213) | 22 |
| ASM objects (VS 2015/2017 runtime 26706) | 19 |
| C++ objects (VS 2015/2017 runtime 26706) | 60 |
| C objects (VS 2015/2017 runtime 26706) | 34 |
| Imports (26213) | 5 |
| Total imports | 89 |
| C++ objects (LTCG) (27040) | 4 |
| Resource objects (27040) | 1 |
| 151 | 1 |
| Linker (27040) | 1 |
No comments yet.