Manalyze report for ddb6bac6f2ac2c2195645661b1ed50a70deafe54e2c9e1744a3a7a10f6b715aa

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2026-Sep-25 05:33:32
TLS Callbacks	2 callback(s) detected.

Plugin Output

Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`f635735e4c00521b200500523e463c9c` 🔍
SHA1	`1a14877e10b7f73905ab3e966f989922235f3ab6` 🔍
SHA256	`ddb6bac6f2ac2c2195645661b1ed50a70deafe54e2c9e1744a3a7a10f6b715aa` 🔍
SHA3	`3fab9d6c5b84877ffa338db4f3345866f7fed4faaa3291dd460496b2c7a0702d` 🔍
SSDeep	`1536:Wn9oR2/MUudo0edsgFhWm6+NwX75r4PKPA6/Aprg95Bs5ENpEusivhzWEFlnLk1:WqxUuaTu4PNQvhzWh` 🔍
Imports Hash	`a7a757ec40bd86590a25defcb5bb9f03` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x78`
e_cp	`0x1`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0`
e_ss	`0`
e_sp	`0`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x78`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2026-Sep-25 05:33:32
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xf400`
SizeOfInitializedData	`0x6200`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000001350 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x1b000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`4f66f75d4ced84e10b214e034113c6fc 🔍`
SHA1	`e3f2ed5e427b56b4371346a99f28078c8e216c54 🔍`
SHA256	`5444bb2698cc759d3d0d09dde0df901d7a1eb7949b0eeced215c1f6e38f93ef8 🔍`
SHA3	`7882959f6a8bbeec7b7d97050066d208090b7626cfe389fd4aa62ba00a429623 🔍`
VirtualSize	`0xf276`
VirtualAddress	`0x1000`
SizeOfRawData	`0xf400`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.4138`

.rdata

MD5	`0c6a4f55dae7cf61706f35b621e10cf5 🔍`
SHA1	`cab8e2a8d9d5ac3453744dde289c0bac24f1130a 🔍`
SHA256	`f0b872eea307edf5c4bb661be48283b6de2b073a840d9ddcd72ff0ef77aaf56e 🔍`
SHA3	`2a17723fbf9e3f534e7846bbb92d71b1958ef3ced24d2e6fb8e3427563ab3ff5 🔍`
VirtualSize	`0x559c`
VirtualAddress	`0x11000`
SizeOfRawData	`0x5600`
PointerToRawData	`0xf800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.33209`

.data

MD5	`ee215a56a9126261bc0258ba40e7409a 🔍`
SHA1	`2029f0384ab1f97ff633ee1ce3f8fde056673a98 🔍`
SHA256	`47ede907f52389ed5d4de97b71377c13bea3621b14b047ca939c2bc193920c28 🔍`
SHA3	`c205607a239315461bdb59bbe70bdd11eaeecfd093bd53d4fb80c2b4a710c5fe 🔍`
VirtualSize	`0x128`
VirtualAddress	`0x17000`
SizeOfRawData	`0x200`
PointerToRawData	`0x14e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.669603`

.pdata

MD5	`120fc96aa59684032ef73ff39517c1bc 🔍`
SHA1	`2917e09255da459f687df8dc77506284020fe9dc 🔍`
SHA256	`b8f598dbca3d5420ba8fedc8ce5d6e65e29208b0f76ae5611f7e7a47f9bbc065 🔍`
SHA3	`036151eaa9031f4cbf5f9cb692610c2d8b37ac3d1b267c4fc4a6ca2eb511a53d 🔍`
VirtualSize	`0x558`
VirtualAddress	`0x18000`
SizeOfRawData	`0x600`
PointerToRawData	`0x15000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.341`

.tls

MD5	`bf619eac0cdf3f68d496ea9344137e8b 🔍`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍`
VirtualSize	`0x10`
VirtualAddress	`0x19000`
SizeOfRawData	`0x200`
PointerToRawData	`0x15600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.reloc

MD5	`e5404c8fef51d73d6bf20e95742b3f43 🔍`
SHA1	`07519c13ac9f5ed7871d63bcdbd37d9a047845fa 🔍`
SHA256	`56433fc5adf453ce274739bbe1e937a32ba6ad992d12e0627b15da3c134fb53d 🔍`
SHA3	`4f690e1d0678af13d38e43c33b08c2cc20d433f49505b5d15725f081c1d4e280 🔍`
VirtualSize	`0x80`
VirtualAddress	`0x1a000`
SizeOfRawData	`0x200`
PointerToRawData	`0x15800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`1.48514`

Imports

SDL3.dll	`SDL_CreateWindow`
KERNEL32.dll	`DeleteCriticalSection` `EnterCriticalSection` `GetCurrentProcess` `GetLastError` `InitializeCriticalSection` `IsProcessorFeaturePresent` `LeaveCriticalSection` `SetUnhandledExceptionFilter` `Sleep` `TerminateProcess` `TlsGetValue` `VirtualProtect` `VirtualQuery` `__C_specific_handler`
libc++.dll	`_ZNKSt3__16locale9use_facetERNS0_2idE` `_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKcy` `_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9push_backEc` `_ZNSt3__120__throw_system_errorEiPKc` `_ZNSt3__121__is_windows_terminalEP6_iobuf` `_ZNSt3__122__libcpp_verbose_abortEPKcz` `_ZNSt3__126__write_to_windows_consoleEP6_iobufNS_17basic_string_viewIwNS_11char_traitsIwEEEE` `_ZNSt3__16localeC1ERKS0_` `_ZNSt3__16localeC1Ev` `_ZNSt3__16localeD1Ev` `_ZNSt3__16localeaSERKS0_` `_ZNSt3__18numpunctIcE2idE` `_ZNSt3__18to_charsEPcS0_d` `_ZNSt3__18to_charsEPcS0_dNS_12chars_formatE` `_ZNSt3__18to_charsEPcS0_dNS_12chars_formatEi` `_ZNSt3__18to_charsEPcS0_e` `_ZNSt3__18to_charsEPcS0_eNS_12chars_formatE` `_ZNSt3__18to_charsEPcS0_eNS_12chars_formatEi` `_ZNSt3__18to_charsEPcS0_f` `_ZNSt3__18to_charsEPcS0_fNS_12chars_formatE` `_ZNSt3__18to_charsEPcS0_fNS_12chars_formatEi` `_ZdlPv` `_Znwy`
api-ms-win-crt-stdio-l1-1-0.dll	`__acrt_iob_func` `__p__commode` `__p__fmode` `__stdio_common_vfprintf` `_write` `feof` `ferror` `fflush` `fwrite`
api-ms-win-crt-runtime-l1-1-0.dll	`__p___argc` `__p___argv` `_cexit` `_configure_narrow_argv` `_crt_atexit` `_exit` `_initialize_narrow_environment` `_initterm` `_set_app_type` `_set_invalid_parameter_handler` `abort` `exit` `signal`
api-ms-win-crt-heap-l1-1-0.dll	`_set_new_mode` `calloc` `free` `malloc`
api-ms-win-crt-private-l1-1-0.dll	`memchr` `memcpy` `memmove`
api-ms-win-crt-string-l1-1-0.dll	`memset` `strlen` `strncmp`
api-ms-win-crt-math-l1-1-0.dll	`__setusermatherr`
api-ms-win-crt-environment-l1-1-0.dll	`__p__environ`
api-ms-win-crt-utility-l1-1-0.dll	`rand_s`

Delayed Imports

Version Info

TLS Callbacks

StartAddressOfRawData	`0x140019000`
EndAddressOfRawData	`0x140019008`
AddressOfIndex	`0x140017078`
AddressOfCallbacks	`0x140015090`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`0x000000014000EB50` `0x000000014000EBD0`

Load Configuration

Size	`0x138`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0`

RICH Header

Errors

Leave a comment

No comments yet.