Manalyze report for d4b2f1ff7bffbf9bf054b00a481e740636655be8944b5c7af2d6b9f0450bfffd

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2023-Apr-23 01:16:23
TLS Callbacks	2 callback(s) detected.

Plugin Output

Suspicious	PEiD Signature:	`UPolyX V0.1 -> Delikon`
Info	Interesting strings found in the binary:	`Contains domain names: bitstream.com color.xyz dejavu.sourceforge.net http://dejavu.sourceforge.net http://dejavu.sourceforge.net/wiki/index.php/License http://www.bitstream.com http://www.gnu.org http://www.gnu.org/licenses/gpl-3.0.html https://michaelwillis.github.io https://michaelwillis.github.io/dragonfly-reverb sourceforge.net www.bitstream.com www.gnu.org`
Suspicious	The PE is possibly packed.	`Unusual section name found: .xdata`
Info	The PE contains common functions which appear in legitimate applications.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA` `Reads the contents of the clipboard: GetClipboardData`
Suspicious	VirusTotal score: 1/69 (Scanned on 2026-07-12 03:15:15)	`Google: Detected`

Hashes

MD5	`cc0617e7552fcb9c5d0c43358fbd3a2b`
SHA1	`f7533f744e9280c6ee14c2d0d05d8c4f7e9a612b`
SHA256	`d4b2f1ff7bffbf9bf054b00a481e740636655be8944b5c7af2d6b9f0450bfffd`
SHA3	`f9c8d55a8024c817c13c32e8d50fe7c33f00311cbfe4b7cfaf7f2b8c6e78882c`
SSDeep	`49152:yBw/g1JTrJON0tFmdqMFZBdRAJVv+HfWNh:y2g1MZBdRAJl+HfW`
Imports Hash	`3d031709c7134ba6a65a349301fd6db8`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`11`
TimeDateStamp	2023-Apr-23 01:16:23
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_DEBUG_STRIPPED` `IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`2.0`
SizeOfCode	`0x151000`
SizeOfInitializedData	`0x3a0000`
SizeOfUninitializedData	`0x1600`
AddressOfEntryPoint	`0x0000000000001350 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x6c780000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`5.2`
Win32VersionValue	`0`
SizeOfImage	`0x3a8000`
SizeOfHeaders	`0x400`
Checksum	`0x3ac940`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`60e3b967733eeeb4e044426ac7f132ac`
SHA1	`f6eb0a0e82572455f7c2fa58de521244fb6973c8`
SHA256	`4ec45cde9dbb77a0e3259e3eec05f84f97101ca5c85ec95ba330d4fe4f6479e8`
SHA3	`5c2516536ffe709adbb7ee2ae218f1050c977453fe9f3a2642471e37a40ccdc7`
VirtualSize	`0x150eb8`
VirtualAddress	`0x1000`
SizeOfRawData	`0x151000`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_CODE` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.29374`

.data

MD5	`b34fff3700f689b44281bd8d6e52b433`
SHA1	`e1ea3184f8e15e99dd258064dfd02943dc097575`
SHA256	`8b8aaf02f2af5f635f640b83a960e73fd9eb32c5befcf50f3b4e4a48e3873a0c`
SHA3	`d4bc19e9e11696eebe9d4b0ca67c4f2b96396a326d326a4e9f5ff4f82f5a7d20`
VirtualSize	`0x3690`
VirtualAddress	`0x152000`
SizeOfRawData	`0x3800`
PointerToRawData	`0x151400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.321742`

.rdata

MD5	`0a23695b97ae76aa4737c8ff218ddd81`
SHA1	`9dbf974578c088c64ac80288fa1b1485b37a3faa`
SHA256	`198373d8bb28137bc9853663b5232f94f4d5f7d9112de6f3a409868cdd8d7205`
SHA3	`ff3f527d3e3f5a6962349ea1ad9ca1498e01da78d19a56b0953be39b8d47ead2`
VirtualSize	`0x21ce00`
VirtualAddress	`0x156000`
SizeOfRawData	`0x21ce00`
PointerToRawData	`0x154c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.81606`

.pdata

MD5	`c5b72255a30fa1e609c8eec106ca000d`
SHA1	`7d1b9d8b82a74e39c51c90416663662904374538`
SHA256	`866744bd03b6e88561d7c3a025259029f29cf403f66657c52799b15d1bf9f335`
SHA3	`b54f829b6d02b0dfe47eaf5d86f0ce74d6791c2189d0b34bfd9a7de8e8d9eaeb`
VirtualSize	`0x130d4`
VirtualAddress	`0x373000`
SizeOfRawData	`0x13200`
PointerToRawData	`0x371a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.06401`

.xdata

MD5	`ea4b2705efa8bdeaf57b0649f1692899`
SHA1	`f86e264489f5b57eec603bd3f0b496574ed1697e`
SHA256	`0340a6ebab2a587c25c07131398c61535e1405df28e6f1d31a23b2be0c0f77b1`
SHA3	`93b403d6e0b73519e71f209919eeb077523b64e4441bded57c4a2de8385390b1`
VirtualSize	`0x16da0`
VirtualAddress	`0x387000`
SizeOfRawData	`0x16e00`
PointerToRawData	`0x384c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.93262`

.bss

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x1420`
VirtualAddress	`0x39e000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.edata

MD5	`401b5d614dba9ecaeff8efe4c17bdec6`
SHA1	`b1dde22c7b94484b7de753904a24523fe6b0caf2`
SHA256	`12cfd318deba8b745762ac7b97810828be437f61da046a1aa14720e53c94cab0`
SHA3	`d5ec8ed488f61fbda3d4b09204ddd29a86fb7a049e1e4b5ffb699e61f3a36717`
VirtualSize	`0x7d`
VirtualAddress	`0x3a0000`
SizeOfRawData	`0x200`
PointerToRawData	`0x39ba00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`1.44624`

.idata

MD5	`a8c479e620507908518f32ea857b0592`
SHA1	`97893d192cb6e03486af29b6ff67c5d45c9f279d`
SHA256	`9d0d2b531d2291543602ef9a9fbab6ba7fdd4fd562f5043ba739e741a8bd6eea`
SHA3	`a4c304fff4cc34b76503d2185b280bccc7cb51457d6f55c28e4e7edee85ee9aa`
VirtualSize	`0x2208`
VirtualAddress	`0x3a1000`
SizeOfRawData	`0x2400`
PointerToRawData	`0x39bc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.49567`

.CRT

MD5	`2bfe677e365b72a05dbeef743137b0e9`
SHA1	`d237377e94f929c9e935ca8d100107d7352ccdc4`
SHA256	`ca31a6ff9fdfdab1569915f1e964e33816c66485b2dac7c530532d1f77ed1be4`
SHA3	`81cbee91e1e69c38464dafe7fd67440f71f6d26d6bae4580f4e1027337089281`
VirtualSize	`0x58`
VirtualAddress	`0x3a4000`
SizeOfRawData	`0x200`
PointerToRawData	`0x39e000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.201539`

.tls

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x10`
VirtualAddress	`0x3a5000`
SizeOfRawData	`0x200`
PointerToRawData	`0x39e200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.reloc

MD5	`761fa6f75a4f7e91a50f84cd572f464d`
SHA1	`119be5a019d3683ad01fbf43edf940e7f75d3de5`
SHA256	`73c2672adcb224e45ede8009553f4ec59304bf8ee0b20ffe7390ec637a4f3d78`
SHA3	`ff10cc338a7f7d56219f8f889827680ecbb7b77f7d8e9d280441ac5689e7c352`
VirtualSize	`0x1eb0`
VirtualAddress	`0x3a6000`
SizeOfRawData	`0x2000`
PointerToRawData	`0x39e400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.39677`

Imports

GDI32.dll	`ChoosePixelFormat` `DescribePixelFormat` `GetStockObject` `SetPixelFormat` `SwapBuffers`
KERNEL32.dll	`CloseHandle` `CreateSemaphoreW` `DeleteCriticalSection` `EnterCriticalSection` `FreeLibrary` `GetCurrentProcess` `GetCurrentProcessId` `GetCurrentThread` `GetCurrentThreadId` `GetLastError` `GetModuleFileNameA` `GetModuleHandleA` `GetModuleHandleExA` `GetProcAddress` `GetSystemTimeAsFileTime` `GetTickCount` `GetTimeZoneInformation` `GlobalAlloc` `GlobalFree` `GlobalLock` `GlobalUnlock` `InitializeCriticalSection` `IsDBCSLeadByteEx` `LeaveCriticalSection` `LoadLibraryA` `MultiByteToWideChar` `QueryPerformanceCounter` `QueryPerformanceFrequency` `RaiseException` `ReleaseSemaphore` `RtlAddFunctionTable` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlUnwindEx` `RtlVirtualUnwind` `SetLastError` `SetUnhandledExceptionFilter` `Sleep` `TerminateProcess` `TlsAlloc` `TlsFree` `TlsGetValue` `TlsSetValue` `UnhandledExceptionFilter` `VirtualProtect` `VirtualQuery` `WaitForSingleObject` `WideCharToMultiByte`
msvcrt.dll	`___lc_codepage_func` `___mb_cur_max_func` `__doserrno` `__iob_func` `__setusermatherr` `_amsg_exit` `_errno` `_filelengthi64` `_fileno` `_fstat64` `_initterm` `_lock` `_lseeki64` `_strnicmp` `_time64` `_unlock` `_wfopen` `abort` `atan` `atof` `calloc` `exit` `fclose` `feof` `fflush` `fgetpos` `fopen` `fputc` `fputs` `fread` `free` `fseek` `fsetpos` `ftell` `fwrite` `getc` `getenv` `getwc` `isspace` `iswctype` `localeconv` `log10` `malloc` `memchr` `memcmp` `memcpy` `memmove` `memset` `putc` `putwc` `rand` `realloc` `setlocale` `setvbuf` `signal` `sinh` `sprintf` `srand` `strcmp` `strcoll` `strcpy` `strerror` `strftime` `strlen` `strncmp` `strncpy` `strtol` `strxfrm` `tan` `towlower` `towupper` `ungetc` `ungetwc` `vfprintf` `wcscoll` `wcsftime` `wcslen` `wcsxfrm` `_write` `_strdup` `_read` `_fileno` `_fdopen`
OPENGL32.dll	`glBegin` `glBindTexture` `glBlendFunc` `glClear` `glColor3f` `glColor4f` `glColorMask` `glCullFace` `glDeleteTextures` `glDisable` `glDrawArrays` `glEnable` `glEnd` `glFinish` `glFlush` `glFrontFace` `glGenTextures` `glGetBooleanv` `glGetError` `glGetIntegerv` `glLineWidth` `glLoadIdentity` `glMatrixMode` `glOrtho` `glPixelStorei` `glPopMatrix` `glPushMatrix` `glReadPixels` `glRotatef` `glScissor` `glStencilFunc` `glStencilMask` `glStencilOp` `glTexCoord2f` `glTexImage2D` `glTexParameterfv` `glTexParameteri` `glTexSubImage2D` `glTranslatef` `glVertex2d` `glViewport` `wglCreateContext` `wglDeleteContext` `wglGetProcAddress` `wglMakeCurrent`
USER32.dll	`AdjustWindowRectEx` `BeginPaint` `ClientToScreen` `CloseClipboard` `CreateWindowExA` `DefWindowProcA` `DestroyWindow` `DispatchMessageA` `EndPaint` `EnumDisplaySettingsA` `FlashWindowEx` `GetClassInfoExA` `GetClientRect` `GetClipboardData` `GetCursorPos` `GetDC` `GetDesktopWindow` `GetFocus` `GetKeyState` `GetMessageTime` `GetMonitorInfoA` `GetUpdateRect` `GetWindowLongA` `GetWindowLongPtrA` `GetWindowRect` `InSendMessageEx` `InvalidateRect` `IsClipboardFormatAvailable` `KillTimer` `LoadCursorA` `LoadIconA` `MapVirtualKeyA` `MapWindowPoints` `MonitorFromWindow` `MsgWaitForMultipleObjects` `OpenClipboard` `PeekMessageA` `PostMessageA` `RedrawWindow` `RegisterClassExA` `ReleaseCapture` `ReleaseDC` `ScreenToClient` `SetActiveWindow` `SetCapture` `SetClipboardData` `SetCursor` `SetFocus` `SetForegroundWindow` `SetTimer` `SetWindowLongA` `SetWindowLongPtrA` `SetWindowPos` `SetWindowTextW` `ShowWindow` `ToUnicode` `TrackMouseEvent` `TranslateMessage` `UnregisterClassA` `UpdateWindow` `WaitMessage`

Delayed Imports

DllMain

Ordinal	`1`
Address	`0x19b50`

VSTPluginMain

Ordinal	`2`
Address	`0x19b70`

main

Ordinal	`3`
Address	`0x19b70`

Version Info

TLS Callbacks

StartAddressOfRawData	`0x6cb25000`
EndAddressOfRawData	`0x6cb25008`
AddressOfIndex	`0x6cb1e5cc`
AddressOfCallbacks	`0x6cb24030`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_TYPE_REG`
Callbacks	`0x000000006C78BF10` `0x000000006C78BEE0`

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0!

Leave a comment

No comments yet.