| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date | 2026-Apr-14 19:41:58 |
| TLS Callbacks | 1 callback(s) detected. |
| Debug artifacts |
rxing_cli.pdb
|
| Info | Matching compiler(s): | MASM/TASM - sig1(h) |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | Cryptographic algorithms detected in the binary: | Uses constants related to CRC32 |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xf0 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 5 |
| TimeDateStamp | 2026-Apr-14 19:41:58 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x7f2200 |
| SizeOfInitializedData | 0x3eae00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000793D5C (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xbe0000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| kernel32.dll |
GetStdHandle
CloseHandle GetConsoleMode WriteConsoleW GetConsoleOutputCP GetLastError SetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute SetLastError |
|---|---|
| ntdll.dll |
NtWriteFile
RtlNtStatusToDosError NtReadFile |
| bcryptprimitives.dll |
ProcessPrng
|
| api-ms-win-core-synch-l1-2-0.dll |
WakeByAddressSingle
WaitOnAddress WakeByAddressAll |
| KERNEL32.dll |
IsProcessorFeaturePresent
SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetFileType GetModuleHandleA FormatMessageW GetModuleHandleW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle SetFileTime CreateFileW FindClose ExitProcess GetProcessHeap HeapFree HeapReAlloc GetCommandLineW GetModuleFileNameW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetSystemTimePreciseAsFileTime GetSystemInfo CreateThread SwitchToThread SetFilePointerEx WaitForSingleObject GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW GetCurrentProcessId CreateMutexA ReleaseMutex RtlVirtualUnwind WideCharToMultiByte MultiByteToWideChar HeapAlloc GetEnvironmentVariableW GetFullPathNameW FindFirstFileExW QueryPerformanceFrequency |
| VCRUNTIME140.dll |
__CxxFrameHandler3
memcmp memmove memset memcpy __C_specific_handler __current_exception __current_exception_context _CxxThrowException |
| api-ms-win-crt-math-l1-1-0.dll |
fmodf
acosf acos atan2f __setusermatherr round roundf fmod sin cos atan2 ceil log2 exp pow fmaf fma floorf ceilf cosf sinf floor powf _hypotf log2f truncf exp2f tan |
| api-ms-win-crt-runtime-l1-1-0.dll |
_initialize_onexit_table
_register_onexit_function _c_exit _seh_filter_exe _set_app_type terminate _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv _cexit _crt_atexit _register_thread_local_exe_atexit_callback |
| api-ms-win-crt-stdio-l1-1-0.dll |
_set_fmode
__p__commode |
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
| api-ms-win-crt-heap-l1-1-0.dll |
free
_set_new_mode |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Apr-14 19:41:58 |
| Version | 0.0 |
| SizeofData | 38 |
| AddressOfRawData | 0xaebe6c |
| PointerToRawData | 0xaea46c |
| Referenced File | rxing_cli.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Apr-14 19:41:58 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0xaebe94 |
| PointerToRawData | 0xaea494 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Apr-14 19:41:58 |
| Version | 0.0 |
| SizeofData | 816 |
| AddressOfRawData | 0xaebea8 |
| PointerToRawData | 0xaea4a8 |
| StartAddressOfRawData | 0x140aec1f8 |
|---|---|
| EndAddressOfRawData | 0x140aec2d0 |
| AddressOfIndex | 0x140b9bdf8 |
| AddressOfCallbacks | 0x1407f44d8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
| Callbacks |
0x00000001406D1BA0
|
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x140b9bc40 |
| XOR Key | 0xb93679ef |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2008 SP1 build 30729) | 10 |
| Imports (35207) | 2 |
| ASM objects (35207) | 3 |
| C objects (35207) | 9 |
| C++ objects (35207) | 23 |
| Imports (33140) | 3 |
| Total imports | 134 |
| Unmarked objects (#2) | 13 |
| Linker (35209) | 1 |
No comments yet.