d085bd291c5e68ab33b88b0a03be3671a76987b0998b9a881b2d36390175b09b
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Nov-09 08:28:14 |
| Detected languages |
English - United States
|
| Debug artifacts |
Embedded COFF debugging symbols
|
| CompanyName | Hookshot |
| FileDescription | Hookshot Builder setup |
| ProductName | Hookshot Builder |
| FileVersion | 1.0.0 |
| OriginalFilename | HookshotBuilder-Setup.exe |
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE is possibly packed. |
Unusual section name found: .buildid
Unusual section name found: /4 Unusual section name found: /18 Unusual section name found: /58 Unusual section name found: /70 Unusual section name found: /82 Unusual section name found: /33 Unusual section name found: /47 |
| Info | The PE contains common functions which appear in legitimate applications. |
Possibly launches other programs:
|
| Suspicious | The file contains overlay data. | 10240 bytes of data starting at offset 0x29600. |
| Suspicious | VirusTotal score: 2/71 (Scanned on 2026-11-09 22:18:41) |
Microsoft:
Trojan:Win32/Wacatac.B!ml
Trapmine: malicious.moderate.ml.score |
Hashes
| MD5 | a3c73ed0d0bdaee488257da9c9846860 🔍 |
|---|---|
| SHA1 | 8a2b89e192fc34bfb4bdb8de9e2d93ab2bc6ef1d 🔍 |
| SHA256 | d085bd291c5e68ab33b88b0a03be3671a76987b0998b9a881b2d36390175b09b 🔍 |
| SHA3 | a4be8cf4ffd130100603e6b83f031f6dc6eb9add13f499b62174f1ce22ff9cba 🔍 |
| SSDeep | 3072:0Sg5GpvTyPxWkwvcih3SpGfxf0+jTtq///deEHi7YJtpTb3u:0Sg5GpcxWkEh3SYfxfhft0/Bi0Jnb3 🔍 |
| Imports Hash | 2a8d1065c02522662c17acb3c4d0331f 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x78 |
| e_cp | 0x1 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0 |
| e_ss | 0 |
| e_sp | 0 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x78 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 14 |
| TimeDateStamp | 2026-Nov-09 08:28:14 |
| PointerToSymbolTable | 0x29600 |
| NumberOfSymbols | 320 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x5000 |
| SizeOfInitializedData | 0x24200 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000001000 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x144000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | 31f3a91290e3868005a28b988dedde5e 🔍 |
|---|---|
| SHA1 | 4fc48dc41a25b688558bcb2b1162f8a7a565b377 🔍 |
| SHA256 | 8d9e28d056811a4d9188b57ec1fdc6b37d9e1778a58c030c8003267546104b4b 🔍 |
| SHA3 | 3f74dc9494156767edd7b54f3eaa4b8a2a8d5781db811a021181a7185794753a 🔍 |
| VirtualSize | 0x4fc6 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x5000 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.85101 |
.rdata
| MD5 | 3364485fb2080f99bebd3b0deeb873c0 🔍 |
|---|---|
| SHA1 | a0b81d998bc66cc4c9778b6dbbbbc4ca5c9d706a 🔍 |
| SHA256 | 7abf1a3dd342409d846f721c92f64d2f853fccb67483eed4a518cefa5d0da6f5 🔍 |
| SHA3 | 21b569769b1f60ef498fcedbd1ebbc8433598a96f6526597405302b354385a07 🔍 |
| VirtualSize | 0x2e48 |
| VirtualAddress | 0x6000 |
| SizeOfRawData | 0x3000 |
| PointerToRawData | 0x5400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.00113 |
.buildid
| MD5 | d368c14be2a8e04bcd1a293c4396640f 🔍 |
|---|---|
| SHA1 | 312aa84663f10b78aa934fea8ba9b733b9143f36 🔍 |
| SHA256 | d25107b276d370b37213bf1143a3450a0195180772cc8ee863dca453e2e202f2 🔍 |
| SHA3 | 3eb2c0c5a0d5cacf79e29d9197c68625896024a7deb70cc05ee8f6990e36fe7c 🔍 |
| VirtualSize | 0x35 |
| VirtualAddress | 0x9000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x8400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 0.604661 |
.data
| MD5 | eda95479c11f8d74dbc155cb02397561 🔍 |
|---|---|
| SHA1 | 5a529af68e4bd2dee8edaf9b4ff18a7221b2e271 🔍 |
| SHA256 | 9e1969e99dfec36172927c1bccef2c5f06c60c855bac512a5a45f087c41dc7e8 🔍 |
| SHA3 | 8db0ffc2ceeb5ef2a1dabea612d76c4d8fd5bd1f21fe02e9548f74187607db22 🔍 |
| VirtualSize | 0x111908 |
| VirtualAddress | 0xa000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x8600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.601871 |
.pdata
| MD5 | d2c1c09f74f74fea4116e5e5de931fa8 🔍 |
|---|---|
| SHA1 | 7eda45c81e9faeebe62d62887f01e247be972ff7 🔍 |
| SHA256 | f321e1a58eaf92d036d452ef7cb7762334af7cf919f97d3e23738a24b360cfa2 🔍 |
| SHA3 | d82298bdeafe0da02f65fffbab6a2b7455a85ed80cd849237777f75c9a541ed6 🔍 |
| VirtualSize | 0x198 |
| VirtualAddress | 0x11c000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x8800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 3.28386 |
.rsrc
| MD5 | b3a0498508a7f5e6e250887fb228bb6d 🔍 |
|---|---|
| SHA1 | 3d970390c3ea2452eaa565fc181c5d3c6302330a 🔍 |
| SHA256 | 195ace703c2a944e0708f54e12c8d1815d1c489792a9d397e9e99339c04effb0 🔍 |
| SHA3 | 0f444ec0e03452d46da5acb5c5b0ca5662a226a5b21706011f3fb5545a96d5b4 🔍 |
| VirtualSize | 0x12418 |
| VirtualAddress | 0x11d000 |
| SizeOfRawData | 0x12600 |
| PointerToRawData | 0x8a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.9396 |
.reloc
| MD5 | 308ebc63d986bb67963c0f77b60abd99 🔍 |
|---|---|
| SHA1 | b4451f6e6e0a4d3e43ca5864b092c5155cc6c642 🔍 |
| SHA256 | 2638fb1343ef5c63581555c673bf004a0babede79db6968485c3e2e96b1f6dbe 🔍 |
| SHA3 | 4d56832761ba8102c87f38be05cd0f31ace82ace52474a12df42f206f375d01e 🔍 |
| VirtualSize | 0x54 |
| VirtualAddress | 0x130000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x1b000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 0.97497 |
/4
| MD5 | d8245ee506b3b1d695616c50136cc938 🔍 |
|---|---|
| SHA1 | fdfc88bfba0d5e36bdeb564a9616acd9b2517218 🔍 |
| SHA256 | dbb050db067d2782db454be1f14d14a9263e291d73c6bf4e646ed895834b3b55 🔍 |
| SHA3 | bb16dda1e76eb2a6c11786c0a8308600bdc4704f2b7b22d78ab01b89fc6fd6df 🔍 |
| VirtualSize | 0x1886 |
| VirtualAddress | 0x131000 |
| SizeOfRawData | 0x1a00 |
| PointerToRawData | 0x1b200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 4.50955 |
/18
| MD5 | d8d14c46b379f1e698a6379d6e889606 🔍 |
|---|---|
| SHA1 | becb9cce7998e0fb899f37076a0f05dd74530b03 🔍 |
| SHA256 | 76e69695a20c0f14429b94ad9882b8b23ff8705ebb3e46171834585943a9bf56 🔍 |
| SHA3 | 26d1c863f506d124379771339f242195a60f437c70f0edcdb51ea9212c0dd096 🔍 |
| VirtualSize | 0x30 |
| VirtualAddress | 0x133000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x1cc00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 0.199776 |
/58
| MD5 | 84e3c269f5eb2cb6a4546ed655b2e468 🔍 |
|---|---|
| SHA1 | b0f4005b572393d0b0fbc23ccd6068c7554a8c89 🔍 |
| SHA256 | 0a5bd2b197e8b64f6b9c583b32437136b33cbee879537f0f387289ecb1f1eb82 🔍 |
| SHA3 | 1fe029b03d9cda1407be1007ac44d5f5e5f5faaa6081d0da2b51b6430a75daf8 🔍 |
| VirtualSize | 0x43d0 |
| VirtualAddress | 0x134000 |
| SizeOfRawData | 0x4400 |
| PointerToRawData | 0x1ce00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.04846 |
/70
| MD5 | a9d54e4b409745ed0554cec896c78258 🔍 |
|---|---|
| SHA1 | 6e86b397266dfe40a3869fbb45bd62fa69ea0ddc 🔍 |
| SHA256 | 64237cfb49d59f53b6630880a012b871a1d6969f04aeda90535e70e5b6e3f42c 🔍 |
| SHA3 | cc7d5ede00ff7cd22dde7e1689e3e848d95c551dff7c05125fc7934ed5b5609b 🔍 |
| VirtualSize | 0x26a0 |
| VirtualAddress | 0x139000 |
| SizeOfRawData | 0x2800 |
| PointerToRawData | 0x21200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.46677 |
/82
| MD5 | 06e3151a3399bf0d1d5777a98335dd4e 🔍 |
|---|---|
| SHA1 | 6c3c8c27b2e991a4532da310a6f778d3899c71e2 🔍 |
| SHA256 | faa7e5c875459c80560839677b7b284509269fc974a82a34f5c17b06ac216305 🔍 |
| SHA3 | 4b54b3b87a1b0fb8ebbdd75d35d92cb88953c1764514a3bcf7eb5ab53b1117af 🔍 |
| VirtualSize | 0x16ba |
| VirtualAddress | 0x13c000 |
| SizeOfRawData | 0x1800 |
| PointerToRawData | 0x23a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 1.88897 |
/33
| MD5 | af873a5cd2c7c6441d456df718c291a0 🔍 |
|---|---|
| SHA1 | 469554c994e26d53dca03f580d0b7d2bce8089c9 🔍 |
| SHA256 | c1fa5515cb15c6790b9438131b9b52d3d0559a56bc646812c7efba58c547e8aa 🔍 |
| SHA3 | a7fbf6a536856a4b799db0d9857ee4816d4564bd01bdaf06ee370440bc52034c 🔍 |
| VirtualSize | 0x120 |
| VirtualAddress | 0x13e000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x25200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 0.763092 |
/47
| MD5 | 2b7df3896c613fa9120f22a5fbd0bae6 🔍 |
|---|---|
| SHA1 | 269d016d5d88ebc906528c1dfc4aff0a0a2f2fcf 🔍 |
| SHA256 | f1c35863e3a8908186e76462ca8af5ada214816392f448a16a9ec2084aa36832 🔍 |
| SHA3 | a329a3f4a0fc2bb51babdc70b7afd64c2d3b52cc8f227c5d0e65dc777c7692cf 🔍 |
| VirtualSize | 0x4159 |
| VirtualAddress | 0x13f000 |
| SizeOfRawData | 0x4200 |
| PointerToRawData | 0x25400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.33934 |
Imports
| WINHTTP.dll |
WinHttpCloseHandle
WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetOption WinHttpSetTimeouts |
|---|---|
| bcrypt.dll |
BCryptCloseAlgorithmProvider
BCryptCreateHash BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptOpenAlgorithmProvider |
| COMCTL32.dll |
InitCommonControlsEx
|
| SHELL32.dll |
SHGetFolderPathW
|
| api-ms-win-crt-stdio-l1-1-0.dll |
__acrt_iob_func
__p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf __stdio_common_vswprintf fflush setvbuf |
| api-ms-win-crt-string-l1-1-0.dll |
_wcsicmp
memset strcmp strcpy strlen strncmp strpbrk strtok wcscat wcscmp wcscpy wcslen wcsncpy |
| api-ms-win-crt-environment-l1-1-0.dll |
__p__wenviron
_wgetenv getenv |
| api-ms-win-crt-runtime-l1-1-0.dll |
__p___argc
__p___wargv __p__wcmdln _cexit _configure_wide_argv _crt_atexit _exit _fpreset _initialize_wide_environment _initterm _initterm_e _seh_filter_exe _set_app_type _set_invalid_parameter_handler abort exit |
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
| api-ms-win-crt-heap-l1-1-0.dll |
_set_new_mode
free malloc realloc |
| api-ms-win-crt-private-l1-1-0.dll |
memcpy
memmove strchr strrchr strstr wcsrchr wcsstr |
| GDI32.dll |
CreateFontW
|
| USER32.dll |
CreateWindowExW
DefWindowProcW DestroyWindow DispatchMessageW GetMessageW GetSystemMetrics LoadCursorW LoadIconW MessageBoxW PostMessageW PostQuitMessage RegisterClassW SendMessageW SetWindowTextW ShowWindow TranslateMessage |
| KERNEL32.dll |
CloseHandle
CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitThread FindClose FindFirstFileW FindNextFileW GetExitCodeProcess GetFileAttributesW GetLastError GetModuleFileNameW GetStartupInfoW GetSystemDirectoryW MoveFileW MultiByteToWideChar ReadFile RemoveDirectoryW SetFileAttributesW SetUnhandledExceptionFilter Sleep VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile |
| api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
|
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x29f |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.58331 |
| Detected Filetype | PNG graphic file |
| MD5 | cbaf0adb80a0ec30609daaf9a5eb2daf 🔍 |
| SHA1 | 73a039931e6c77a0442d23e003648f58f51d2d94 🔍 |
| SHA256 | 1451237dea604f74fd54ee33ae56dc07c20b68f388c63f2da4c6027700450140 🔍 |
| SHA3 | c8aa8208d29d6759d30f70adc77ff58fbcfbc3245181d28e8de72ea417721c01 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x4bd |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.82591 |
| Detected Filetype | PNG graphic file |
| MD5 | 9fbfc24c276ff7f9bbf9c14bed4067e6 🔍 |
| SHA1 | c7850ebba6c3a4dafdbbc47c658ab160fdb3ce82 🔍 |
| SHA256 | 20745fa27ec4b2585c540c3795f3053319ac7c5ec911083d5d3cc0feceff5b1a 🔍 |
| SHA3 | 8c49e10c2dbb4f0a85d438255935ec9454dbb2f12ceb474c2d8a7428ef455e97 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x760 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.89213 |
| Detected Filetype | PNG graphic file |
| MD5 | a5e5bcc459202ba15e4b5c12841f197e 🔍 |
| SHA1 | 4f234b27299f64bdecda70d8293ba5210df539c2 🔍 |
| SHA256 | 64c5a70ea00852b2fbd2e08d283a7db515a3eb1f5dd503f5d4f73a6046f52d03 🔍 |
| SHA3 | bb704de2e207a70f8cdc40884bec207e7ddead7e076cde07b13eae413aeb2108 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xd8c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.92601 |
| Detected Filetype | PNG graphic file |
| MD5 | 4430ed8c70c8c2e04667f9201da8a974 🔍 |
| SHA1 | feab1b1760b883f121c08b9a0c8e935e9edf19c8 🔍 |
| SHA256 | ea32cbf7b638f921cefd2b43dfe1df86a0416c133c48658c6666b962312e8677 🔍 |
| SHA3 | f0225715a854944114184cbda21b5aad1cd7c3a463ff21e04ef8fa6a4fcf83a2 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14fc |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.92767 |
| Detected Filetype | PNG graphic file |
| MD5 | 16b18cc14da24f26310b6d2c29877fb6 🔍 |
| SHA1 | 349c92ebbeb52f0a1f466bdae5b8b9ecf6394183 🔍 |
| SHA256 | 3bf5d52ee6732dd52ed97a6b9d883b76a1e4a39e2eb272e2df34d4cb9c312045 🔍 |
| SHA3 | 0bf4268b437c95a239bed7fcdb8d203b9c15f01ff5241abf43d7438aece67ef4 🔍 |
6
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x3d04 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.97126 |
| Detected Filetype | PNG graphic file |
| MD5 | 5f2dd3532f072b622d507deade2bee3b 🔍 |
| SHA1 | 204201d3670a512ee77867239af80a0b3a96bb47 🔍 |
| SHA256 | 770f3054faefbb1a40fc4d9da6639d5f6a84face1a0df6565bc63a38ecd18a59 🔍 |
| SHA3 | d97ffaf704be5bfe09389d5a434326d7bbbb681b6aeeddbe8557b8e04bfd9dbb 🔍 |
7
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xad88 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.96537 |
| Detected Filetype | PNG graphic file |
| MD5 | 8558b327cf816deefd307da47271c295 🔍 |
| SHA1 | 66b4d66ea03c3c8e041976e927a4a992525fa8fb 🔍 |
| SHA256 | 4315bcb2f7e59e80c3bdab2bdcc6e63e1038d235cfd8b3d5b6d724a4212969d6 🔍 |
| SHA3 | fc1643c5ae1045b6e397419c9dfe52d1b667f94dee000ebf5051d3bfab30587d 🔍 |
1 (#2)
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x68 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.88752 |
| Detected Filetype | Icon file |
| MD5 | d438dc73d21613439b77df9f7865b175 🔍 |
| SHA1 | 748a1104ebd1a56e171993fd5c359314e330dff3 🔍 |
| SHA256 | 7379ad1bf4210d05e3123e363795b3e2bb9f0e662c7bac6b032e7cd213658a96 🔍 |
| SHA3 | 3d24f6067430f5b9419590fef9b46e743b56ecd4ae2804b2eb633d55cfb44cc2 🔍 |
1 (#3)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x234 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.21139 |
| MD5 | 114bd125624cc2bf536ac35d297aa7c4 🔍 |
| SHA1 | 9144b23a2985f3ebb6663d1ba89258c01e550ffa 🔍 |
| SHA256 | e2b59a00d349eea80e29f6d0a4328dfc9b95f726b1e14bdf0d8039be235536ff 🔍 |
| SHA3 | c6a4acf8f48d7501c22688b40287651bb0b5873ba75edd761e257bc08a221e2e 🔍 |
1 (#4)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x348 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.12919 |
| MD5 | 25b56880d200ec2fd3ed70a2ca738556 🔍 |
| SHA1 | bc5c2c4e49bf0c578015b82725da87d3d504a881 🔍 |
| SHA256 | ef8309ea983a2c1a579141094cdb4fd0d8fe076d6b2f02676a9591448b524142 🔍 |
| SHA3 | c0b5be1d3dc87100f83e738659371622925a7729f421f2e9dd970d2501b51175 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs | (EMPTY) |
| FileType |
VFT_UNKNOWN
|
| Language | English - United States |
| CompanyName | Hookshot |
| FileDescription | Hookshot Builder setup |
| ProductName | Hookshot Builder |
| FileVersion (#2) | 1.0.0 |
| OriginalFilename | HookshotBuilder-Setup.exe |
| Resource LangID | English - United States |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Nov-09 08:28:14 |
| Version | 0.0 |
| SizeofData | 25 |
| AddressOfRawData | 0x901c |
| PointerToRawData | 0x841c |
TLS Callbacks
Load Configuration
| Size | 0x138 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0 |
RICH Header
Errors
[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /18!
[*] Warning: Tried to read outside the COFF string table to get the name of section /58!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /82!
[*] Warning: Tried to read outside the COFF string table to get the name of section /33!
[*] Warning: Tried to read outside the COFF string table to get the name of section /47!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
Leave a comment
No comments yet.