ec924c70e936e2ffd62833ac75fed17b2d8ba464ba8e8d5eb2ea637fd644207b

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Jul-09 19:14:09
Detected languages English - United States
Debug artifacts C:\Users\dogu1\source\repos\ConsoleApplication2\x64\Release\ConsoleApplication2.pdb

Plugin Output

Suspicious The PE is possibly packed. Unusual section name found: .fptable
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 f2bd27b1e36e5b68410958742aa61062
SHA1 854a45b9afff09ccaa26c91af3eca54385cb08a8
SHA256 ec924c70e936e2ffd62833ac75fed17b2d8ba464ba8e8d5eb2ea637fd644207b
SHA3 83b05372b9e87b3285464ad050252ab7f89be6a91e9b721b01f320b26e39cfda
SSDeep 3072:85/fft+0DDFM5amMJB67DgoCW6LjZbT2PS:Yc6FlU7DSo
Imports Hash 76992069859b77453d4047ada533b499

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Jul-09 19:14:09
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x14e00
SizeOfInitializedData 0xe200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000001320 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x28000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 f1482457bd294d7b11b18ef44e0b3190
SHA1 1abe20ce58a82634ff4ab274893dc729130b5805
SHA256 e10db83ac1473b9830e3bd2c8c4508efef2afc642ddf74b7c7022db4e263f2b6
SHA3 3d09d481d4d2f757dd4705673b8d4fe5067bdf22c91092e7177d55c7241f796b
VirtualSize 0x14c60
VirtualAddress 0x1000
SizeOfRawData 0x14e00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.48969

.rdata

MD5 eff8c57ce4000660d196663cb23610f0
SHA1 4768e9be6839cfe21889f4854e19041649ff6baf
SHA256 38796941377e9065e61f624d43c1a0f95dc3b0ec165559f047516925e04c389e
SHA3 1f5e04333cf9ef4c1adb695fdb6347482bfb7d6dbc14b392129d0cea2949b009
VirtualSize 0xa8e8
VirtualAddress 0x16000
SizeOfRawData 0xaa00
PointerToRawData 0x15200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.99034

.data

MD5 60bd4476a034a2555f759df6297d7117
SHA1 ac692c60758960ef0aae4f655b03dcf2fe03a80b
SHA256 4865577b8724e5bd5f3d6c9fadca48c23e8b43ab10cb65cd2ed7ac43c11abcc1
SHA3 57df94db315f0e3d49ae20d7940a75a86e4dd6d81488ff1dc36b3bc9ea39a540
VirtualSize 0x15f0
VirtualAddress 0x21000
SizeOfRawData 0xc00
PointerToRawData 0x1fc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.94399

.pdata

MD5 ea9ed4ecbb25129c62ebdfd2b166c178
SHA1 f10363a7cda045cc7024449a6dff43d446a2e690
SHA256 49b59d7dc89709cc5145c08c3058f88ddabb42c6d6dac49b3a4c5b0a3cd38be3
SHA3 e2ded1e39bd2f85d7b6cbb4f46da3d5780e62794d390e8bc5de401d105dc34be
VirtualSize 0x1338
VirtualAddress 0x23000
SizeOfRawData 0x1400
PointerToRawData 0x20800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.91539

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
VirtualSize 0x100
VirtualAddress 0x25000
SizeOfRawData 0x200
PointerToRawData 0x21c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 a726f87faa1452f85775859b97e10896
SHA1 f4ddbeb80bb55d177bcb9f85a0d4856805762858
SHA256 d74a228aab0716b1d8c94d5644434758f8c592e995d2205503f99fce72d4f6f9
SHA3 2d17f67bb418d5b963ab6269ba53eb7d4f5c46a2a1a6bca38a8dcd3d1ff4c01a
VirtualSize 0x2b0
VirtualAddress 0x26000
SizeOfRawData 0x400
PointerToRawData 0x21e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.02084

.reloc

MD5 81ae370a5ea074301712850c75a49f6c
SHA1 dfdf1907a3c1a735f76b6a2822db8bf2d741057d
SHA256 bee9aa1220dcf6afe9dd7b0a89c43745176b9a8f0dee98222ed30eb35b169171
SHA3 6faa05162573e9cc9f5ec25e8636d8e8636b7d8f2eca417789ffbb37d0762eab
VirtualSize 0x674
VirtualAddress 0x27000
SizeOfRawData 0x800
PointerToRawData 0x22200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.91792

Imports

KERNEL32.dll QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetCommandLineA
GetCommandLineW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
VirtualProtect
LoadLibraryExW
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapSize
HeapReAlloc
CloseHandle
CreateFileW
WriteConsoleW

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x249
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06044
MD5 f7e7c81035fc42015d50fadd75b9300f
SHA1 df759518191bad6608c336186b31c120b3dadb34
SHA256 72ae19a66b5d012088d762d3e2de6498a9b3b8fc153352ca6c76cf045d1fe96e
SHA3 1038ef4fa889f000231ecd6b7f2eb0759548ed2a8e5da6ca3e19b38062e60dbd

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jul-09 19:14:09
Version 0.0
SizeofData 108
AddressOfRawData 0x1e9b8
PointerToRawData 0x1dbb8
Referenced File C:\Users\dogu1\source\repos\ConsoleApplication2\x64\Release\ConsoleApplication2.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jul-09 19:14:09
Version 0.0
SizeofData 20
AddressOfRawData 0x1ea24
PointerToRawData 0x1dc24

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jul-09 19:14:09
Version 0.0
SizeofData 840
AddressOfRawData 0x1ea38
PointerToRawData 0x1dc38

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Jul-09 19:14:09
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140021000

RICH Header

XOR Key 0xe4ff77ef
Unmarked objects 0
C++ objects (33145) 141
C objects (33145) 12
ASM objects (33145) 6
ASM objects (35721) 9
C objects (35721) 16
C++ objects (35721) 39
Imports (33145) 3
Total imports 87
C++ objects (LTCG) (36248) 1
Resource objects (36248) 1
Linker (36248) 1

Errors

Leave a comment

No comments yet.