Maxey's Visuals 2.6 new.rar
- SHA256 76952fd1bd4c5c7a2b1731889a3e979ad1e308779080453eb0165f8aad62abb1
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Maxey's Visuals 2.6 new/FeatureModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Maxey's Visuals 2.6 new/NewInjector.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Maxey's Visuals 2.6 new/Overlay.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Maxey's Visuals 2.6 new/loader.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Maxey's Visuals 2.6 new.rar
- Size 305KB
- Sample260705-ecwzaacy8k
- SHA256 76952fd1bd4c5c7a2b1731889a3e979ad1e308779080453eb0165f8aad62abb1
- MD5 a9c59c41b3304dd8af9f257426440f79
- SHA1 bbf848fd27f318c5412733074cd8954f7446300f
- SHA512 95864d0620e3aee96ca3e96bc4497d6f40b21e82b41f426c9c7bb9fa7bdda87e72e7083d84d568e99e73acfb23da9eba2bc7628928e0690157ba99a53ecd13f1
- SSDEEP 6144:h0Ipd1pH/ArGbDvsyZ2Rj5XCRgEkJzGB5XkUPKvfk:h0Ipdz/wWxgh5XCx+zGvkUS3k
- TLSH T16C64234AF1E50DA6FA66E8E0D9106C06F243C7078BA8DD1C8C8492E75B4EFD9356673C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Maxey's Visuals 2.6 new/FeatureModule.dll unpack001/Maxey's Visuals 2.6 new/NewInjector.exe unpack001/Maxey's Visuals 2.6 new/Overlay.exe unpack001/Maxey's Visuals 2.6 new/loader.dll
File Explorer
-
Maxey's Visuals 2.6 new.rar.rar 305KB
-
Maxey's Visuals 2.6 new/FeatureModule.dll.dll 26KB
-
Maxey's Visuals 2.6 new/NewInjector.exe.exe 55KB
-
Maxey's Visuals 2.6 new/NunitoSans-Regular.ttf135KB
-
Maxey's Visuals 2.6 new/Overlay.exe.exe 416KB
-
Maxey's Visuals 2.6 new/imgui.ini110B
-
Maxey's Visuals 2.6 new/loader.dll.dll 19KB
Maxey's Visuals 2.6 new/FeatureModule.dll
- IMPHASH 267b569b06c3af33416558161fffbc46
- SHA256 2dff28d0507edd8d4b222f338c0961e17ea956832d267f4e895860789cfde653
- MD5 a6126d00f511e7015db9c3ddb5b4064e
- SHA1 b4ff3317276d40a37ef30ab52511d87a043554ec
- SHA512 48674dfc7bba69ef8eacaa337c8b5397589f0d29e93647b5edecf2a308cef454223a0bdc3168b031f99708e50485dada97f4acedd762e2bc98d3e4122152208b
- SSDEEP 384:CkIqeyYVyRJDTEoIqVPGwxqgrsJ/RuZoijtBKYkOlCtNRuZoijtBKYkOQnfhkhh8:vey3RJDQoIqZlxdVB6Io
- TLSH T1F2C2422ADD27E12BD35D8C74C9134C15ED12ACD6DBE6B5CBA7410CE60865FE8AB3D201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\hecke\OneDrive\Desktop\needed files\repos\Roblox-DLL\x64\Release\Roblox-DLL.pdb
kernel32
OutputDebugStringA
CloseHandle
CreateNamedPipeA
GetLastError
Sleep
ConnectNamedPipe
WriteFile
DisconnectNamedPipe
GetModuleHandleA
IsBadReadPtr
VirtualProtect
DisableThreadLibraryCalls
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
msvcp140
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_detach
_Mtx_lock
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
__std_exception_destroy
memcpy
__std_type_info_destroy_list
__C_specific_handler
__std_exception_copy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
terminate
_initterm_e
_seh_filter_dll
_cexit
_initterm
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
run
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
640B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
472B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35721,
count=8, id=260, version=35721,
count=21, id=261, version=35721,
count=6, id=257, version=35721,
count=5, id=257, version=33145,
count=101, id=1, productName=Unmarked objects,
count=2, id=265, version=36248,
count=1, id=256, version=36248,
count=1, id=255, version=36248,
count=1, id=258, version=36248,
Maxey's Visuals 2.6 new/NewInjector.exe
- IMPHASH 8e0a01a9559c0b7ad697433e0feac9a5
- SHA256 da446be37db2ec3f63ab2c53dffcb1cf005abb91df858da8197e026604e77789
- MD5 e6f1c3d010a72e683dce8ff750cc6880
- SHA1 d9625ad5ca092aadd0dc4302e9b40505cdbc97df
- SHA512 2e5a2cb45f57c6b3588080f7d316cf89fedf9f9f9a36c6631847c147d39be83e89290be42ba2aa67317eebbe38e69ed7b76e9d13382cd41824475183c53273ed
- SSDEEP 768:e2U4shP6Ox1o8ZpsqFdFbywgx+1J0p8/crb/NvbO2a4a0pOPCq3xt:e2U4sDXo8UqF7iL8cNTOqa0pObt
- TLSH T118435C6BB72900E8D0A7C3B8D9934A17E7B6B8050723A3DF53E192460F276D5693FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
31008
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\hibro\.gemini\antigravity\scratch\external-printsploit\printsploit external\Build\NewInjector.pdb
kernel32
OpenProcess
Sleep
GetLastError
LoadLibraryA
CloseHandle
K32GetModuleBaseNameA
K32GetModuleInformation
VirtualProtectEx
GetProcAddress
GetModuleHandleA
ReadProcessMemory
K32EnumProcessModules
VirtualFreeEx
VirtualQueryEx
ReadFile
WriteFile
CreateFileW
GetFileAttributesW
DeleteFileW
FormatMessageA
DuplicateHandle
GetCurrentProcess
VirtualAllocEx
WriteProcessMemory
GetLocaleInfoEx
FindClose
FindFirstFileW
GetFileAttributesExW
GetFullPathNameW
CreateFile2
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
LocalFree
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
msvcp140
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??7ios_base@std@@QEBA_NXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__current_exception
_CxxThrowException
__C_specific_handler
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memmove
memcpy
memset
api-ms-win-crt-stdio-l1-1-0
fread
fsetpos
ungetc
__p__commode
setvbuf
fgetpos
fwrite
_get_stream_buffer_pointers
_set_fmode
__stdio_common_vfprintf
fgetc
fclose
fflush
__acrt_iob_func
_fseeki64
fputc
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
_set_new_mode
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-string-l1-1-0
_stricmp
strlen
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_register_onexit_function
__p___argc
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__p___argv
_set_app_type
_seh_filter_exe
abort
_register_thread_local_exe_atexit_callback
_c_exit
system
_cexit
terminate
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=10, id=260, version=35403,
count=30, id=261, version=35403,
count=6, id=257, version=35403,
count=5, id=257, version=35215,
count=190, id=1, productName=Unmarked objects,
count=2, id=265, version=35728,
count=1, id=255, version=35728,
count=1, id=258, version=35728,
Maxey's Visuals 2.6 new/NunitoSans-Regular.ttf
- SHA256 e2e28393b77e81bfac576c294de53b52b9b163e632ae8a8b92325e270dfcae4a
- MD5 05f376c99895ad997a49c579d385d589
- SHA1 ca3f0c571f343961d9d333d53926262f1e243398
- SHA512 aa3ed4508f8f6a8fb7418a8dfb3d419c2fb92b170c6b5c889d7c138e3fc160455c4bc1fdc47d0716fd194acbe6721c058fc102b8f045a4844d66fc80761f59e4
- SSDEEP 1536:G8zCxfahif9ZnrNPtN7X7t13OK6kl/UAe8ulK6kl/UAe8zDXyd0o3/JylwHTGemj:9AVv/ty1JJHTG91jGBkqVPXi
- TLSH T1D8D32913B703A35AED062E798BB2D3E4A3B1FD512F66CB0FF8462E5DD85B1C40992641
- MD5 SHA1 SHA512 SSDEEP TLSH
Maxey's Visuals 2.6 new/Overlay.exe
- IMPHASH f9b68b4d32e385fd1f3d3870a2d67123
- SHA256 e535e96755c4d6685b74b014eb1d302a0e89e8d110af3ae584ded8ad5afe9915
- MD5 675f790ce5bb047a7dbe1c1226067ce2
- SHA1 0d99e9db1306b5265fda73d1dfc2e2c5ca408c16
- SHA512 6bb0b1508d1a3856da1ee1061c4739133ce0295e20f39c2e05317b8cce4469ded24cd7db81f7a2af16c092468563e37902a1594122c4551ec6c5e12a0dd7b2df
- SSDEEP 6144:ucCA7bEZB/Hci3oDgj+e0gg+7zEfPdF+tN8ctm9zz+EYeTB0tPUikgiMn1iGHOZ:T0LZ9bzEfPdF0sukXYiMn16Z
- TLSH T154949F42F1B954ECD02B9138C6C7AA1BEE373458071055CBB3D495E82FA36F4ABB9712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
318976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\hecke\source\repos\Roblox-OVERLAY\x64\Release\Roblox-OVERLAY.pdb
kernel32
IsDBCSLeadByte
GetProcAddress
FreeLibrary
QueryPerformanceCounter
ReadFile
GetModuleFileNameA
WaitNamedPipeA
Sleep
GetModuleHandleExA
CreateFileA
CloseHandle
LoadLibraryA
GetModuleHandleW
GetPrivateProfileIntA
OutputDebugStringA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLocaleInfoA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
QueryPerformanceFrequency
MultiByteToWideChar
WritePrivateProfileStringA
user32
FindWindowW
TranslateMessage
SetLayeredWindowAttributes
MessageBoxA
PeekMessageW
DispatchMessageW
GetAsyncKeyState
IsWindow
ShowWindow
RegisterClassExW
PostQuitMessage
GetSystemMetrics
CreateWindowExW
SetWindowLongPtrW
SetWindowPos
DestroyWindow
GetCursorPos
DefWindowProcW
GetKeyState
GetMessageExtraInfo
UpdateWindow
GetWindowLongPtrW
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
SetCursorPos
ReleaseCapture
IsWindowUnicode
CloseClipboard
LoadCursorW
SetCapture
SetCursor
GetClientRect
IsIconic
EmptyClipboard
SetClipboardData
GetClipboardData
OpenClipboard
shell32
ShellExecuteW
imm32
ImmGetContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmReleaseContext
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
?_Throw_Cpp_error@std@@YAXH@Z
d3d11
D3D11CreateDeviceAndSwapChain
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
__std_exception_destroy
__std_exception_copy
_CxxThrowException
__current_exception
__current_exception_context
memchr
memcmp
memcpy
__std_terminate
memset
memmove
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_set_fmode
__p__commode
_wfopen
fwrite
__stdio_common_vfprintf
fseek
fclose
fflush
__acrt_iob_func
ftell
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_callnewh
api-ms-win-crt-convert-l1-1-0
wcstombs
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_configure_narrow_argv
_seh_filter_exe
_set_app_type
terminate
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_beginthreadex
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
_cexit
api-ms-win-crt-math-l1-1-0
ceilf
cosf
acosf
__setusermatherr
fmodf
sinf
sqrtf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-string-l1-1-0
strcmp
strlen
Name
.text
Size
314KB
Virtual Size
313KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35721,
count=4, id=259, version=35721,
count=10, id=260, version=35721,
count=30, id=261, version=35721,
count=17, id=257, version=33145,
count=165, id=1, productName=Unmarked objects,
count=7, id=265, version=36248,
count=1, id=255, version=36248,
count=1, id=258, version=36248,
Maxey's Visuals 2.6 new/imgui.ini
- SHA256 7fa294e82d2f324ca7d9309a0271a0bd7bfc421ed35178645a7a8dc69fe6dd3c
- MD5 85071144691bd5bd004d73afd2c11d6a
- SHA1 ed0b368ffdee305d7acf614e7091209c1680ff6f
- SHA512 5fa36428defe511da146d61d29fc4b6c3c3703230a0063fe071dd35c27cbdedae15d51aba710393d4caa5a4af4713c591bbf2774a103542064914ba2244de0dd
- TLSH T1C1B0920173B1422982F69198626A16983B89A6482502B8C121A0286A2A4A92314476C9
- MD5 SHA1 SHA512 TLSH
Maxey's Visuals 2.6 new/loader.dll
- IMPHASH 8652aed36ed08761c03c7bc60f847940
- SHA256 703159a8f47bec4bf6c53066b31b1e153405e93754062ed9ea5af5ea0ed51b9d
- MD5 a86ef5b3dd5bc9ca386251dbda11ec60
- SHA1 26ca12a145088a4b0e29b80d0a134d5d0b043fb4
- SHA512 a088633af8acb9ee024e3cd98d75fb3ff1c3436985d80ea62cacfb235f132146c2f84fd6d7a459c46b8ffc1b80849e60f0490d86cfbc6cc3ba528513dee6a6c0
- SSDEEP 384:eF8M0lAMxJSZ+d/UCrZzzi5DlFm+xiEqpnm:e6fuMxJXOCdzzi5iEqpm
- TLSH T1DB92299AF32108B5EA37C278CA33C4268563B1076B3357DF7BA9421D0D72BD42A39A55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8720
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\hibro\Downloads\Injector (1)\Injector\rbxdriver\Build\Module.pdb
kernel32
ReadFile
TlsSetValue
HeapFree
WriteFile
OutputDebugStringA
LoadLibraryExA
CreateFileW
GetFileAttributesW
GetCurrentThreadId
GetModuleHandleA
Sleep
GetLastError
LoadLibraryA
TlsAlloc
DeleteFileW
CloseHandle
HeapAlloc
GetProcAddress
GetFileSize
GetCurrentProcessId
GetProcessHeap
QueryPerformanceCounter
InitializeSListHead
GetSystemTimeAsFileTime
msvcp140
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
memset
__std_exception_copy
__std_exception_destroy
__C_specific_handler
memcpy
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
fflush
_wfopen_s
__stdio_common_vfprintf
fclose
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
terminate
_configure_narrow_argv
_beginthreadex
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-string-l1-1-0
strcmp
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=35403,
count=7, id=260, version=35403,
count=15, id=261, version=35403,
count=6, id=257, version=35403,
count=5, id=257, version=33145,
count=65, id=1, productName=Unmarked objects,
count=1, id=265, version=35728,
count=1, id=255, version=35728,
count=1, id=258, version=35728,