d3278e4d16462fec7a4f10279587de1555dd5fa3bb49ef0f35146019bd217ad9

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Mar-11 03:14:38
Detected languages English - United States
Debug artifacts C:\Users\Russel\source\repos\Combat-Master-Internal-main\x64\Release\Combat Master Internal.pdb

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • GetAsyncKeyState
  • MapVirtualKeyA
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtectEx
  • VirtualProtect
 Reads the contents of the clipboard:
  • GetClipboardData
Malicious VirusTotal score: 31/71 (Scanned on 2026-06-28 16:10:23) AVG: Win64:Malware-gen
AhnLab-V3: Trojan/Win.Generic.C5860104
Antiy-AVL: Trojan/Win32.Agent
Avast: Win64:Malware-gen
Avira: TR/W64.Malware
CAT-QuickHeal: Trojan.Agent
CTX: dll.trojan.generic
Cynet: Malicious (score: 100)
DeepInstinct: MALICIOUS
Elastic: malicious (high confidence)
F-Secure: Trojan.TR/W64.Malware
Fortinet: W32/PossibleThreat
GData: Win64.Trojan.Agent.PW7VCJ
Google: Detected
Ikarus: Trojan.Win64.Krypt
Lionic: Trojan.Win32.Generic.4!c
Malwarebytes: Malware.AI.2953183968
MaxSecure: Trojan.Malware.662197730.susgen
McAfeeD: ti!D3278E4D1646
Paloalto: generic.ml
Rising: Trojan.Kryptik@AI.83 (RDML:sWjvJPVJruM4IWOFXmiMUw)
Skyhigh: BehavesLike.Win64.PWSCangKu.hh
Sophos: Mal/Generic-S
Symantec: Trojan.Gen.MBT
TrellixENS: Artemis!2E1D31271EEA
TrendMicro: Trojan.Win32.ZYX.USBLET26
TrendMicro-HouseCall: Trojan.Win32.ZYX.USBLET26
Varist: W64/ABTrojan.NWTQ-5356
ViRobot: Trojan.Win.Z.Agent.600064.EK
Webroot: W32.Trojan.Agent.Gen
alibabacloud: Trojan:Win/Wacatac.B9nj

Hashes

MD5 2e1d31271eeafe5e2a7c907339834552
SHA1 949ec2c3f945ab2045177027477217ef3942f6e9
SHA256 d3278e4d16462fec7a4f10279587de1555dd5fa3bb49ef0f35146019bd217ad9
SHA3 e5de1bde57b17e22f88fca16aca9b420a84d291b3ec36ea62f3c06349b59726d
SSDeep 6144:NggcuFUdG+lgyI2uMeQKawzuSSVmInLfAth8dXK41Irg6FFStoPcQELeOr7iL0u:0go5MsIrgXLYJKQCHKXQB5e96Efnyh
Imports Hash d98cc3a77a14b04162be21175fec1ea3

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 8
TimeDateStamp 2026-Mar-11 03:14:38
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x75800
SizeOfInitializedData 0x1e200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000075608 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x9a000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 8fb2d95e52fa91a404bfa11ad36603e9
SHA1 4bcf7788362258712529add72a35d18d7e3a3010
SHA256 5e69a382a35182bb3cb74e8203bb4b12eaacab8b51cbf9d45af2b61b2842bf00
SHA3 5eecbbe4a120663aebcb75c0e3b9ddfa75fc5b53a1608acd196a5348eccfefbe
VirtualSize 0x75750
VirtualAddress 0x1000
SizeOfRawData 0x75800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.49794

.rdata

MD5 4a87376f388ae2855e08478f90b420d7
SHA1 6db4cb21a233854446ad53d4263fbc0338536113
SHA256 4106ce1515e41c18c2e6905f58d8f6e5968bb81e64bbabfde28c5d1f56ad22cc
SHA3 bc4a4737107877e09dd482a2d20a4f675710669139d97ac2adf12646bbe506c6
VirtualSize 0x15046
VirtualAddress 0x77000
SizeOfRawData 0x15200
PointerToRawData 0x75c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.14009

.data

MD5 7003502d143aaf90658f3cfb4ab32dd5
SHA1 f356e088a2afcbe66911d16740a68b73475a0764
SHA256 eb6d2b5a877544a2bf51d8c261a5a25ba5ca42351cc4523d66ca15b0f6c4ffb9
SHA3 23654bcb15544d5dc20fa080c1f99857da9a4fa06ecb1348289ccbf124d34b98
VirtualSize 0x1828
VirtualAddress 0x8d000
SizeOfRawData 0x400
PointerToRawData 0x8ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.65034

.pdata

MD5 47087da83f6e1267a9c3b9668941078c
SHA1 f4be8fdb7767b663062b4425dffa4922cf24a6f7
SHA256 9da3177856637b3c6a27c48d5a88935442e2b31cebef269384eadc1e74e4d19d
SHA3 430332c13357b39572f6f638bfae2c52a9cd87d39856831954d1ca27988b5613
VirtualSize 0x47a0
VirtualAddress 0x8f000
SizeOfRawData 0x4800
PointerToRawData 0x8b200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.93765

.detourc

MD5 5896d164b4799198ca4d1f7204629caf
SHA1 cbfc85440feae96366b2c76d8d4b4a25547a171a
SHA256 4d1800d7c3c23f72a51d37eaa33c6759aacb1371f9f96862d0f64b5495e66e18
SHA3 f893612e5bc5cf41c87ec3be7d69abd8f117d3fc5cc562308b4821582d689445
VirtualSize 0x21f0
VirtualAddress 0x94000
SizeOfRawData 0x2200
PointerToRawData 0x8fa00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.24414

.detourd

MD5 edda25907019e5cc74c177f6952e5e4b
SHA1 7a4f78401ecb1ae9f682732465ae6077089ebb13
SHA256 67edb63255622d74f26750550ba3dd665fbccf95fd0ab08e4a26ba7d8ac3a162
SHA3 f4a44987a5bb73b0e511a980a6e46723e30252562c97bcd39a080b05991cde7d
VirtualSize 0x18
VirtualAddress 0x97000
SizeOfRawData 0x200
PointerToRawData 0x91c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.116115

.rsrc

MD5 0ee811550feed12d413edf29fb835172
SHA1 fed6bb2b8f5b67b3dc58c834722acec490fba4a5
SHA256 ae44ab2c9b9e7857f58eb901913fad5897e90fa3e1119bfa8884ecb91f1a9044
SHA3 5b861c2b04c1a8a94249c7bf0b03608e7a7c83017c269babfb2bf13b1d5cd683
VirtualSize 0xf8
VirtualAddress 0x98000
SizeOfRawData 0x200
PointerToRawData 0x91e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.52201

.reloc

MD5 4bff1e6436c2095ba338297c071c3fdc
SHA1 db1d11d860475402165aeaad4d91cadd15c240e5
SHA256 a7346e54533684ecac748df82431e2eb1edcfde821edb228b307b6a040202f53
SHA3 ae4b62b826707eca6f6d7d25e35f024db4e0c300c00d9aa4b102a912b18228ac
VirtualSize 0x678
VirtualAddress 0x99000
SizeOfRawData 0x800
PointerToRawData 0x92000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.84334

Imports

d3d11.dll D3D11CreateDeviceAndSwapChain
KERNEL32.dll GetPrivateProfileIntA
GetPrivateProfileStringA
GetTickCount
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
FreeLibrary
QueryPerformanceCounter
GetLastError
GetCurrentProcess
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
CreateThread
VirtualQuery
VirtualProtectEx
VirtualQueryEx
SetLastError
GetModuleHandleW
GetModuleHandleA
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
FreeLibraryAndExitThread
VirtualProtect
GetProcAddress
WritePrivateProfileStringA
GetCurrentThread
VirtualFree
DisableThreadLibraryCalls
ReleaseSRWLockExclusive
GetModuleFileNameA
USER32.dll GetKeyState
GetMessageExtraInfo
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
SendInput
IsWindowUnicode
RegisterClassExA
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetWindowLongPtrA
UnregisterClassA
mouse_event
CreateWindowExA
SetClipboardData
DestroyWindow
GetSystemMetrics
GetKeyNameTextA
GetAsyncKeyState
CallWindowProcA
MapVirtualKeyA
DefWindowProcA
MSVCP140.dll ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?good@ios_base@std@@QEBA_NXZ
?uncaught_exceptions@std@@YAHXZ
IMM32.dll ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
D3DCOMPILER_47.dll D3DCompile
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll _CxxThrowException
__std_type_info_destroy_list
memchr
memset
memcpy
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
__C_specific_handler
memcmp
memmove
api-ms-win-crt-string-l1-1-0.dll strncmp
strcmp
strncpy
strtok_s
api-ms-win-crt-stdio-l1-1-0.dll __stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
fread
_wfopen
fwrite
ftell
fflush
fseek
fclose
api-ms-win-crt-runtime-l1-1-0.dll _cexit
_initterm
_initterm_e
_configure_narrow_argv
_invoke_watson
_initialize_narrow_environment
_seh_filter_dll
_execute_onexit_table
_initialize_onexit_table
api-ms-win-crt-convert-l1-1-0.dll atoi
atof
api-ms-win-crt-utility-l1-1-0.dll qsort
api-ms-win-crt-heap-l1-1-0.dll _callnewh
malloc
free
api-ms-win-crt-math-l1-1-0.dll cosf
ceilf
atan2f
acosf
fmodf
logf
pow
powf
sinf
log
sqrtf
expf

Delayed Imports

2

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x91
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.8858
MD5 f7ad1eab748bc07570a57ec87787cf90
SHA1 0b1608da9fef218386e825db575c65616826d9f4
SHA256 d2952e57023848a37fb0f21f0dfb38c9000f610ac2b00c2f128511dfd68bde04
SHA3 6c9541b36948c19ae507d74223621875b3af4064f7cd8200bdb97e15a047e96a

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Mar-11 03:14:38
Version 0.0
SizeofData 120
AddressOfRawData 0x83388
PointerToRawData 0x81f88
Referenced File C:\Users\Russel\source\repos\Combat-Master-Internal-main\x64\Release\Combat Master Internal.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Mar-11 03:14:38
Version 0.0
SizeofData 20
AddressOfRawData 0x83400
PointerToRawData 0x82000

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Mar-11 03:14:38
Version 0.0
SizeofData 812
AddressOfRawData 0x83414
PointerToRawData 0x82014

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Mar-11 03:14:38
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x180083760
EndAddressOfRawData 0x180083768
AddressOfIndex 0x18008d93c
AddressOfCallbacks 0x1800775e0
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x18008d040

RICH Header

XOR Key 0x3e074fd7
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 14
ASM objects (35207) 4
C objects (35207) 8
C++ objects (35207) 21
Imports (35207) 6
C++ objects (VS2019 Update 9 (16.9.4) compiler 29914) 3
Imports (33145) 15
Total imports 189
C++ objects (LTCG) (35224) 7
Resource objects (35224) 1
Linker (35224) 1

Errors

Leave a comment

No comments yet.