Manalyze report for cbff4a24f0e46f0b8e9450df8733e0b7081909d90244da7dc086418acbc5a7ce

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	1970-Jan-01 00:00:00
Debug artifacts	Embedded COFF debugging symbols

Plugin Output

Suspicious	PEiD Signature:	`HQR data file`
Info	Interesting strings found in the binary:	`Contains domain names: .hash.net api.telegram.org golang.org https://api.telegram.org https://api.telegram.org/botbytes https://go.dev telegram.org textproto.nl`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to MD5` `Uses constants related to SHA1` `Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to AES`
Suspicious	The PE is possibly packed.	`Unusual section name found: /4` `Unusual section name found: /19` `Unusual section name found: /32` `Unusual section name found: /46` `Unusual section name found: /65` `Unusual section name found: /78` `Unusual section name found: /90` `Unusual section name found: .symtab`
Suspicious	The PE contains functions most legitimate programs don't use.	`[!] The program may be hiding some of its imports: LoadLibraryW LoadLibraryExW GetProcAddress` `Functions which can be used for anti-debugging purposes: SwitchToThread`
Malicious	VirusTotal score: 42/72 (Scanned on 2025-10-29 09:52:57)	`ALYac: Trojan.Generic.38706838` `AVG: Win64:MalwareX-gen [Spy]` `Alibaba: TrojanSpy:Win32/Stealer.3f97f71b` `Arcabit: Trojan.Generic.D24E9E96` `Avast: Win64:MalwareX-gen [Spy]` `Avira: TR/AVI.Agent.rwwtl` `BitDefender: Trojan.Generic.38706838` `Bkav: W64.AIDetectMalware` `CAT-QuickHeal: Trojan.Ghanarava.17610825867385d6` `CTX: exe.trojan.stealer` `CrowdStrike: win/malicious_confidence_100% (W)` `Cylance: Unsafe` `DeepInstinct: MALICIOUS` `ESET-NOD32: a variant of WinGo/Spy.Agent.IB` `Elastic: malicious (high confidence)` `Emsisoft: Trojan.Generic.38706838 (B)` `F-Secure: Trojan.TR/AVI.Agent.rwwtl` `Fortinet: W32/PossibleThreat` `GData: Trojan.Generic.38706838` `Google: Detected` `Ikarus: Trojan.WinGo.Agent` `Kaspersky: Trojan-Spy.Win32.Stealer.fmqk` `Kingsoft: Win32.Trojan-Spy.Stealer.fmqk` `Lionic: Trojan.Win32.Stealer.12!c` `MaxSecure: Trojan.Malware.325188728.susgen` `McAfeeD: ti!CBFF4A24F0E4` `MicroWorld-eScan: Trojan.Generic.38706838` `Microsoft: Trojan:Win32/Egairtigado!rfn` `Paloalto: generic.ml` `Panda: Trj/Chgt.AD` `Rising: Spyware.Convagent!8.12330 (CLOUD)` `Skyhigh: BehavesLike.Win64.Scarlet.rh` `Sophos: Mal/Generic-S` `Symantec: ML.Attribute.HighConfidence` `Tencent: Win32.Trojan-Spy.Stealer.Kcnw` `TrellixENS: Artemis!5AA07A23BFD1` `TrendMicro-HouseCall: TROJ_GEN.R002H09HD25` `VBA32: TrojanSpy.Stealer` `VIPRE: Trojan.Generic.38706838` `Varist: W64/ABTrojan.VWCC-5796` `Zillya: Trojan.Stealer.Win32.199970` `alibabacloud: Trojan[spy]:Win/Stealer.ftyu`

Hashes

MD5	`5aa07a23bfd1cdf69acd9c1c537385d6` 🔍
SHA1	`b96559b56d1432492dfe6c026fbd8e3e1a98f341` 🔍
SHA256	`cbff4a24f0e46f0b8e9450df8733e0b7081909d90244da7dc086418acbc5a7ce` 🔍
SHA3	`fda529801718054d7d08926f097f14fec6137608ca4862b20501897efd2217f5` 🔍
SSDeep	`98304:BaZUwpNS4jQXwbSE8xxV4ouQW5TvEpqckeuUZ+tzB:BONpI4jSq83UQ8Tle8` 🔍
Imports Hash	`d42595b695fc008ef2c56aabd8efd68e` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0x8b`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`15`
TimeDateStamp	1970-Jan-01 00:00:00
PointerToSymbolTable	`0x7c6600`
NumberOfSymbols	`7952`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`3.0`
SizeOfCode	`0x289e00`
SizeOfInitializedData	`0x4b400`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000077340 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.1`
ImageVersion	`1.0`
SubsystemVersion	`6.1`
Win32VersionValue	`0`
SizeOfImage	`0x889000`
SizeOfHeaders	`0x600`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`68a6aa3bbd9fc483b3ba7767a45f83e5 🔍`
SHA1	`39743e040b13fd29cc882cc07b13ef79fdb829dc 🔍`
SHA256	`046fa8509e52104397e2818bb36e2152e35f5db0ea1899b1f6d2bfd86beee4df 🔍`
SHA3	`06e0e2031802e74e7ab2fcfee288ab0f1393194528598f0578c22e82ff47ba55 🔍`
VirtualSize	`0x289d71`
VirtualAddress	`0x1000`
SizeOfRawData	`0x289e00`
PointerToRawData	`0x600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.20761`

.rdata

MD5	`ec723bc7de52137e7062831ebb147cb0 🔍`
SHA1	`b098fbde56c028ae79feec057a841e99f7dbf657 🔍`
SHA256	`7cb6b586c815dd971ca00c114f6788015a12f602c9da15aa7aad818f0b9e9efa 🔍`
SHA3	`c687c3e1988e637619d52aa83533085a47fb6c428bd02744fef5bcc53089f28c 🔍`
VirtualSize	`0x2adeb0`
VirtualAddress	`0x28b000`
SizeOfRawData	`0x2ae000`
PointerToRawData	`0x28a400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.53655`

.data

MD5	`c82b42c1773b205961d3775d614b39a0 🔍`
SHA1	`2284bc30582e2e5c31afa7365f9dc98cf8c7078a 🔍`
SHA256	`e6801793d57cd0f0f69fa7549be968d7f1e5efd1ee59f81c057828327060f1cb 🔍`
SHA3	`d06da54da555be92632f5f0a4dc9275682d3ced2e92304ff541e155124754e23 🔍`
VirtualSize	`0xa0ad0`
VirtualAddress	`0x539000`
SizeOfRawData	`0x4b400`
PointerToRawData	`0x538400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`6.22254`

.pdata

MD5	`d5d8c74d35760897f5cf1953ae85d77f 🔍`
SHA1	`90d64d6122ca744f4b34072119bc4ae571622b8d 🔍`
SHA256	`fc4a3c31db0619eaf6a807c0b9a67b2e1acedbbfcb9e03fbce9a1f368a19ec49 🔍`
SHA3	`661a83619556fbb8ba49714f4e18eec37fe90bed34ad163dfa7f48ddea8dad8c 🔍`
VirtualSize	`0xedd8`
VirtualAddress	`0x5da000`
SizeOfRawData	`0xee00`
PointerToRawData	`0x583800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.52428`

.xdata

MD5	`4cc159b38be9de7f9e4a7cb5bae63021 🔍`
SHA1	`fd908be4ba38f61bfec97c6b587b9c066d05434e 🔍`
SHA256	`bbe7a6ee10c0a60e5df0d8412b7ed4dfa82fcaefe1b567f494ebecb7663f836d 🔍`
SHA3	`1f66a0d6faa0d9709e8dd115b25426f54767bd64c58f8b6ac2b8273a2f0733d9 🔍`
VirtualSize	`0xb4`
VirtualAddress	`0x5e9000`
SizeOfRawData	`0x200`
PointerToRawData	`0x592600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`1.77783`

/4

MD5	`523eaecd9190dfd8860c76496fe54d39 🔍`
SHA1	`4c150439725d926e90f25a2382a6fc0423f39c53 🔍`
SHA256	`55238d963c4c3315a9cda822f9392abe52bf62ca63d002c243df2fa55c8de088 🔍`
SHA3	`4a9b57bfc11367efc2692a9e762223f2e0362f9a8943e8c4d57a823353b1de6e 🔍`
VirtualSize	`0x14b`
VirtualAddress	`0x5ea000`
SizeOfRawData	`0x200`
PointerToRawData	`0x592800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.57872`

/19

MD5	`d89ac8b1c3cb600c5495bfbea4a7c010 🔍`
SHA1	`235b79f44b9a3defbb7ab6f6fd6e467ead84b173 🔍`
SHA256	`58b00d18cf767c2ac98bca59bf535f05c1756815a847d054472e27634621cc2d 🔍`
SHA3	`b61d138ebe225266746c0512e21e9cc3ac4adcb5601cf6cbc9cd8b8ed34d831d 🔍`
VirtualSize	`0x764ca`
VirtualAddress	`0x5eb000`
SizeOfRawData	`0x76600`
PointerToRawData	`0x592a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.99485`

/32

MD5	`8e73e040f99be33b56d0b366ec76beb2 🔍`
SHA1	`de981f942af744772b021cd6acdee3056fee1f2d 🔍`
SHA256	`64c7cace88fd620633770afa91c26bfca4f7ed5946c8c5e6dc63610fc43ec800 🔍`
SHA3	`2154d30068c2f6d20d793d5ad4874fdbfab09d376bff0f4ffd96447bce8ac970 🔍`
VirtualSize	`0x18284`
VirtualAddress	`0x662000`
SizeOfRawData	`0x18400`
PointerToRawData	`0x609000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.93759`

/46

MD5	`40cca7c46fc713b4f088e5d440ca7931 🔍`
SHA1	`3aaa1650bfaf5325fa9cb3a1a284aebcc92aebf4 🔍`
SHA256	`3e3c5f5d419b70e588da0ef0e3d9ce1a5863a5624febc16cd0c007cd14e89015 🔍`
SHA3	`a0e18fe9f6ac46417d52cdc99cf9ae56edb5a53f788995a085b10f88f348a0e4 🔍`
VirtualSize	`0x30`
VirtualAddress	`0x67b000`
SizeOfRawData	`0x200`
PointerToRawData	`0x621400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.855685`

/65

MD5	`97cb8cd71b4c7f6e2f01971bbc08fa97 🔍`
SHA1	`fb1740a8a7e92fdec601b6d8db1056740e4545ee 🔍`
SHA256	`dbde8ccb62d9dbfd429b2c0fbd18807c2d44a043dfee37752479ed49ed2a19e5 🔍`
SHA3	`fbcb3a8280288ed22a372df224d6ccd07f7daa98a59a4f9d4278bea9556c08ea 🔍`
VirtualSize	`0xd1497`
VirtualAddress	`0x67c000`
SizeOfRawData	`0xd1600`
PointerToRawData	`0x621600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.99821`

/78

MD5	`5802e0aeb900fe064ea7c02155f920de 🔍`
SHA1	`09c6deaecfc9b646870b16eb62047b6a914b925e 🔍`
SHA256	`e132813d551424eb24a84a46fc4bbcb27ecf7797f782c578869cfddea09ea9d6 🔍`
SHA3	`2c66f9b06dae893a8c18a3748d6e397d8f72167705c0dab77d56261e1fd4f5bd 🔍`
VirtualSize	`0x96a2e`
VirtualAddress	`0x74e000`
SizeOfRawData	`0x96c00`
PointerToRawData	`0x6f2c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.99479`

/90

MD5	`7c5e31971ec0648273f4ef132661a929 🔍`
SHA1	`ef9e86610efd8c76428190b7c6da8c3554a3a702 🔍`
SHA256	`e2cc8d22d6ac65e10c080f7de9e299be82ea1bc9d20301a35c8c071e5d2e4630 🔍`
SHA3	`238f9db0c638543d6f9659e38ed42bd5ff8f3d923c16d878ad98113cb9833aba 🔍`
VirtualSize	`0x2fe37`
VirtualAddress	`0x7e5000`
SizeOfRawData	`0x30000`
PointerToRawData	`0x789800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.83481`

.idata

MD5	`84c10e75b3188e1a54ed368ba21dab8a 🔍`
SHA1	`51f058c3cdd3f0792950d2e1629dd6b12331a21e 🔍`
SHA256	`05bf50c43f034c781e6b894c7be84e515774bfab47c1f7bbe003b495345fa6a5 🔍`
SHA3	`684ae52efad6e74e9be99b5572fb29393f0b5885a24fb917aeb32bfa47c12e41 🔍`
VirtualSize	`0x53e`
VirtualAddress	`0x815000`
SizeOfRawData	`0x600`
PointerToRawData	`0x7b9800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.96507`

.reloc

MD5	`de5e7812782c1fcd30ca0da3d6c03225 🔍`
SHA1	`6d7aa47af233da49a3940e33dd3c92a14bdcfc0b 🔍`
SHA256	`4f86a9f20f826cb6c8810a181723ebbcad4f425a3851394f5ec7a32043f5c0ad 🔍`
SHA3	`a1835c304687032b546196fe80695f5407d55cb3ae6da9df68f2357e77fca4fc 🔍`
VirtualSize	`0xc730`
VirtualAddress	`0x816000`
SizeOfRawData	`0xc800`
PointerToRawData	`0x7b9e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.43402`

.symtab

MD5	`ddd1e510359d8ef504663eb9b9744aa2 🔍`
SHA1	`247f639015ee4095248a0f4cd8ada5c9626f4c60 🔍`
SHA256	`1051f9b7a86881f5ae0d26fe5b69eb3be072b31d8d5ba5f910a302e7f966345e 🔍`
SHA3	`d75a940af3ecbd140d885bd6101979c53f52ff61d083ef5a6d97514e54938886 🔍`
VirtualSize	`0x65be0`
VirtualAddress	`0x823000`
SizeOfRawData	`0x65c00`
PointerToRawData	`0x7c6600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.33914`

Imports

kernel32.dll	`WriteFile` `WriteConsoleW` `WerSetFlags` `WerGetFlags` `WaitForMultipleObjects` `WaitForSingleObject` `VirtualQuery` `VirtualFree` `VirtualAlloc` `TlsAlloc` `SwitchToThread` `SuspendThread` `SetWaitableTimer` `SetProcessPriorityBoost` `SetEvent` `SetErrorMode` `SetConsoleCtrlHandler` `RtlVirtualUnwind` `RtlLookupFunctionEntry` `ResumeThread` `RaiseFailFastException` `PostQueuedCompletionStatus` `LoadLibraryW` `LoadLibraryExW` `SetThreadContext` `GetThreadContext` `GetSystemInfo` `GetSystemDirectoryA` `GetStdHandle` `GetQueuedCompletionStatusEx` `GetProcessAffinityMask` `GetProcAddress` `GetErrorMode` `GetEnvironmentStringsW` `GetCurrentThreadId` `GetConsoleMode` `FreeEnvironmentStringsW` `ExitProcess` `DuplicateHandle` `CreateWaitableTimerExW` `CreateThread` `CreateIoCompletionPort` `CreateEventA` `CloseHandle` `AddVectoredExceptionHandler` `AddVectoredContinueHandler`

Delayed Imports

Version Info

TLS Callbacks

Load Configuration

RICH Header

Errors

[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /32!
[*] Warning: Tried to read outside the COFF string table to get the name of section /46!
[*] Warning: Tried to read outside the COFF string table to get the name of section /65!
[*] Warning: Tried to read outside the COFF string table to get the name of section /78!
[*] Warning: Tried to read outside the COFF string table to get the name of section /90!

Leave a comment

No comments yet.