LANC Remastered (lancremasteredpcps.com).rar
- SHA256 4d9f9c329200d932ad5a1b30d419aca5a67addd6b1f08740ddac4e8dc32e20f0
Overview
overview
10Static
static
10LANC Remas...ed.exe
windows10-2004-x64
3LANC Remas...fi.dll
windows10-2004-x64
1LANC Remas...is.dll
windows10-2004-x64
1LANC Remas...se.dll
windows10-2004-x64
1LANC Remas...ns.dll
windows10-2004-x64
1LANC Remas...re.dll
windows10-2004-x64
1LANC Remas...ts.dll
windows10-2004-x64
1LANC Remas...me.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
LANC Remastered (lancremasteredpcps.com)/LANC Remastered.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
1800 seconds
Behavioral task
behavioral2
Sample
LANC Remastered (lancremasteredpcps.com)/ManagedWifi.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
1800 seconds
Behavioral task
behavioral3
Sample
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Analysis.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
1800 seconds
Behavioral task
behavioral4
Sample
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Base.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
1800 seconds
Behavioral task
behavioral5
Sample
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.Extensions.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
1800 seconds
Behavioral task
behavioral6
Sample
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
1800 seconds
Behavioral task
behavioral7
Sample
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Packets.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
1800 seconds
Behavioral task
behavioral8
Sample
LANC Remastered (lancremasteredpcps.com)/PsychoCoding Theme.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
1800 seconds
General
- Target LANC Remastered (lancremasteredpcps.com).rar
- Size 756KB
- Sample240218-ty4zcacf42
- SHA256 4d9f9c329200d932ad5a1b30d419aca5a67addd6b1f08740ddac4e8dc32e20f0
- MD5 a18fe3b6ed604cf5edb9225e59d4e061
- SHA1 138eb6c432803e2cbbe540bf5e3623a3967180d0
- SHA512 c57ead7c4ca7fb06625543c43b44a405afc3da23f25710a41206343e904b3fe61ac5a253e9f86013bd2556635e7a5a21b459700be192137c3671d17831cfdefe
- SSDEEP 12288:yXSGc3MvsgnGM6SB3mSIZBTMWG+ElxFyhMwgvJM8ABONhuBZUqYlsc5sMgVmA:yyUt6SBvYB01Ma1RPABOUZUq4sTdv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Detected Ploutus loader 1 IoCs
resource yara_rule static1/unpack001/LANC Remastered (lancremasteredpcps.com)/LANC Remastered.exe family_ploutus - Ploutus family
- Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/LANC Remastered (lancremasteredpcps.com)/LANC Remastered.exe unpack001/LANC Remastered (lancremasteredpcps.com)/ManagedWifi.dll unpack001/LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Analysis.dll unpack001/LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Base.dll unpack001/LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.Extensions.dll unpack001/LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.dll unpack001/LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Packets.dll unpack001/LANC Remastered (lancremasteredpcps.com)/PsychoCoding Theme.dll
File Explorer
-
LANC Remastered (lancremasteredpcps.com).rar.rar 756KB
-
LANC Remastered (lancremasteredpcps.com)/LANC Remastered.exe.exe 1.7MB
-
LANC Remastered (lancremasteredpcps.com)/ManagedWifi.dll.dll 30KB
-
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Analysis.dll.dll 92KB
-
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Base.dll.dll 12KB
-
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.Extensions.dll.dll 11KB
-
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.dll.dll 69KB
-
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Packets.dll.dll 153KB
-
LANC Remastered (lancremasteredpcps.com)/PsychoCoding Theme.dll.dll 96KB
LANC Remastered (lancremasteredpcps.com)/LANC Remastered.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 68ec4627b643ca6f66a23f77b3e4922b5b1d3f54216728df7c2fd1dc824294e0
- MD5 4d5049ded6b78dd9d0eb4b8cbc7fc48d
- SHA1 ffd12090c0923fee03a4162728caebcfa9ccc1df
- SHA512 51cd6feafa698235d288369863e6e24d1cfd3ef848c760802bbf7bb432a4d3313c1920d214ce32fdbcb4ebee191085abb7d7078fd5636bed9b30259358b3dac7
- SSDEEP 49152:txII8wF5/+xTCM1oVeG0kGj/esU462SJJm0tjRU+hT9Lgr84zMG8qK7kyjF3U4m1:Hq
- MD5 SHA1 SHA512 SSDEEP
-
Detected Ploutus loader
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1669118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
124KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LANC Remastered (lancremasteredpcps.com)/ManagedWifi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1f34e970acb3ae1d7f84b20a2a64c7b8b5f23821da74370cfb62cfbd99c8ee13
- MD5 e05f0bc5b6cfbccdb29f22f2a4b57de9
- SHA1 ecae149e602bc772fac3b15001b69571fbac36af
- SHA512 51129907a54111f5c7bd26c6d58a8780cf52bedc98907c9b5a512be381eb25623a18fdb21cbf36c38a885f7ed4eafec17cc84ef67ecd43007aed331848b1ff35
- SSDEEP 384:O3B0JKRR/umNtDPEnZLEjW2MqyquhFZGmft2vhXQV0DDTLWdECq/PDO/PBtRJf1n:SJumNtDYabpur280/T6uqtt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\PsychoNation\Desktop\managedwifi-69709\obj\Debug\ManagedWifi.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Analysis.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1f4f96a4dced09133aee3bd028cc35b5fbd3d642190abf5611016920cd9ce260
- MD5 894d0649d55e0813bf5d0f0fb96f3c99
- SHA1 924e1bf7e68acf393a5c424209733466ee2ac341
- SHA512 c3e2ba8f2ffb884ac3d4327fa8fc861a594fa37c7b7d2a3402a723692f5b56ace44e649e06b8f718978a1e423ec60189c5d1ef2e007da23e8e866ecaee010e89
- SSDEEP 1536:ZxdP4CzOeCwtI1g8gOv90bdaBsiiPxEEY/SxzuFMVeIbxT:ZxmY9tdmv90bdHiiPxEEYZSVe+F
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
100350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
90KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Base.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 39d850b2412d78580ea842730bb56f59474a8de4c2d9218d7593cd5b96ac9baf
- MD5 6f2e6b9046e7ed3ce43a34a7b701fbf9
- SHA1 0bccded54a1d30885090f54eec28136691c9d730
- SHA512 ac5130bd795f67debd2f0b93463f9bec3e4ec73a48df6f1dc173f3b78a8f54f5fb936e9630716c1c5833b669371558b66d8132140914412643f1d50d6599f306
- SSDEEP 192:Ua5AotUmz3wOHUtfq9ZlS8e59z6rUi4cYD7GRPD+LlKXVJk:UaTtlwOHUtS9jCz6rUtcq7s+QTk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Boaz\TFS\tfs06.codeplex.com\PcapDotNet\PcapDotNet\src\PcapDotNet.Base\obj\Release\PcapDotNet.Base.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 925b370a65d5135d1425027e5087be62d098d822b9f2cecd840cd7efa5397380
- MD5 bd02851517ba8a2252ae5f6588e8886e
- SHA1 3fffe62696ad6e49ca589bb1b2d9a78af304f63a
- SHA512 539bb43c27f2e8407f6a9a01f64f2c7adf551cf8478fcb436a10a2258d5a7b16cba9d104971b75e582b1738a271f7e123aecd6e3aa68828af19711a0df9a16b0
- SSDEEP 192:gefaXV/jf+FGKZ4vQZF/bsi5yuYvZyGZwzIbSrFf/wZp+e0Zs:gefkSGKcUHzGRZwzIbSrFf/Gd
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Boaz\TFS\tfs06.codeplex.com\PcapDotNet\PcapDotNet\src\PcapDotNet.Core.Extensions\obj\Release\PcapDotNet.Core.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Core.dll
- IMPHASH b0d7e5e2d1863ef226ece143700901c1
- SHA256 e580ca9c0382a8663d6bdff6e53802bd73fa8a71689d7f38521ca02269775a58
- MD5 45fa4315c7631b828e2871db89b3df27
- SHA1 f34f3a5344abbb67a21348be9eaeba7831c7333e
- SHA512 1dd74a83b0435674d61e0e752e3d671334970fd7d235203faf1791c67965eee2324a7dd18e03be575138d3c3639d106534a084c3f9a78d37ff4ff77ead4cfd96
- SSDEEP 1536:bjOWabWtyDL9wBhO/ifaU2ZogXO9KGefmWwgTbWmrOZP:/Ol6tyDRwBssaU21SKGefmgeqOZP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
22478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Boaz\TFS\tfs06.codeplex.com\PcapDotNet\PcapDotNet\bin\Release\PcapDotNet.Core.pdb
msvcr100
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
?what@exception@std@@UBEPBDXZ
_lock
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
_crt_debugger_hook
_except_handler4_common
_amsg_exit
_onexit
__FrameUnwindFilter
_cexit
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
__CxxDetectRethrow
__CxxUnregisterExceptionObject
??2@YAPAXI@Z
_CxxThrowException
memmove
??1exception@std@@UAE@XZ
kernel32
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
wpcap
pcap_dispatch
pcap_loop
pcap_sendpacket
pcap_offline_filter
pcap_freecode
pcap_setfilter
pcap_compile
pcap_open_dead
pcap_dump_flush
pcap_dump_ftell
pcap_dump_close
pcap_dump
pcap_dump_open
pcap_sendqueue_alloc
pcap_sendqueue_queue
pcap_sendqueue_destroy
pcap_sendqueue_transmit
pcap_datalink_val_to_name
pcap_datalink_val_to_description
pcap_datalink_name_to_val
pcap_geterr
pcap_lib_version
pcap_setmintocopy
pcap_setbuff
pcap_setnonblock
pcap_getnonblock
pcap_setmode
pcap_set_datalink
pcap_open
pcap_close
pcap_breakloop
pcap_setsampling
pcap_minor_version
pcap_major_version
pcap_is_swapped
pcap_snapshot
pcap_datalink
pcap_stats_ex
pcap_createsrcstr
pcap_findalldevs_ex
pcap_freealldevs
pcap_next_ex
msvcp100
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=5, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=152, version=20115,
count=2, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=95, id=1, productName=Unmarked objects,
count=37, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
LANC Remastered (lancremasteredpcps.com)/PcapDotNet.Packets.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c91619c54d3783db57c6ed446049bebbe04d42d90304a30b098dca6e6e546bbf
- MD5 8cc42bd7d00f047ed71a5bae500f4ec9
- SHA1 7be87f0ab9c83f5e186192292c5d00d0f8ab981c
- SHA512 d8c40ee532b2ead6df80da88e46e821bcc31836462ad8e69e239cef855e556e52969765237e1336dcbb8fbcd56c78be129de5539efd5d963ee1bd178d39d0893
- SSDEEP 3072:V87g3nxFesDDVmvOzL8TSC0SfjBjBEVJutmeW+fmA9sQ0irHz+B545M:VAcisDsc+7BtptmP+fmZQ0+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
162878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Boaz\TFS\tfs06.codeplex.com\PcapDotNet\PcapDotNet\src\PcapDotNet.Packets\obj\Release\PcapDotNet.Packets.pdb
mscoree
_CorDllMain
Name
.text
Size
151KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LANC Remastered (lancremasteredpcps.com)/PsychoCoding Theme.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 070583767d41d7913df3c7c791800216edf1329a64917b028d1f24e3a977e498
- MD5 bdfd2b195bb55f1054251cb52abb5dad
- SHA1 6f93f734f75d7e01852744c68312d8532e60dfe3
- SHA512 22f1d63fc19a961c994a63eaccb257c5fabdc95f3a7d13c74283b71fd10fd8000718254b8ef163640aecbbc3934d703f72a9d2bd1eb418414678adfc8f6332ca
- SSDEEP 1536:+HuaS9WG9fFc50/+FKhz7v+nF+tWitbOoQDsx:euaS9/9fFYKhHQUbOoQG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
104762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
K:\Work\Themes\PsychoCoding Theme\PsychoCoding Theme\obj\Debug\PsychoCoding Theme.pdb
mscoree
_CorDllMain
Name
.text
Size
94KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ