SAK_v0.7.14_32bit_20220405-19-38-49.7z
- SHA256 c0881f2196fbabd2846f3039427ecedd660296d8ad29a1ce0158f22f1c6976da
Overview
overview
7Static
static
5SAK_32bit/SAK.exe
windows10-2004-x64
3SAK_32bit/SAK.exe
windows11-ltsc_2024-x64
3SAK_32bit/...ci.exe
windows10-2004-x64
1SAK_32bit/...ci.exe
windows11-ltsc_2024-x64
1SAK_32bit/...at.exe
windows10-2004-x64
3SAK_32bit/...at.exe
windows11-ltsc_2024-x64
3SAK_32bit/...ck.exe
windows10-2004-x64
1SAK_32bit/...ck.exe
windows11-ltsc_2024-x64
1SAK_32bit/...ol.exe
windows10-2004-x64
1SAK_32bit/...ol.exe
windows11-ltsc_2024-x64
1SAK_32bit/...et.exe
windows10-2004-x64
1SAK_32bit/...et.exe
windows11-ltsc_2024-x64
1SAK_32bit/...cp.exe
windows10-2004-x64
3SAK_32bit/...cp.exe
windows11-ltsc_2024-x64
3SAK_32bit/...ck.exe
windows10-2004-x64
1SAK_32bit/...ck.exe
windows11-ltsc_2024-x64
1SAK_32bit/...el.exe
windows10-2004-x64
7SAK_32bit/...el.exe
windows11-ltsc_2024-x64
7Behavioral task
behavioral1
Sample
SAK_32bit/SAK.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SAK_32bit/SAK.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
SAK_32bit/bin/4nxci.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
SAK_32bit/bin/4nxci.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
SAK_32bit/bin/guiformat.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
SAK_32bit/bin/guiformat.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
SAK_32bit/bin/hacbrewpack.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
SAK_32bit/bin/hacbrewpack.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
SAK_32bit/bin/hactool.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
SAK_32bit/bin/hactool.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
SAK_32bit/bin/hactoolnet.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
SAK_32bit/bin/hactoolnet.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
SAK_32bit/bin/hptnacp.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
SAK_32bit/bin/hptnacp.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
SAK_32bit/bin/renxpack.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
SAK_32bit/bin/renxpack.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
SAK_32bit/bin/squirrel.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral18
Sample
SAK_32bit/bin/squirrel.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target SAK_v0.7.14_32bit_20220405-19-38-49.7z
- Size 25.0MB
- Sample260801-vm34caea24
- SHA256 c0881f2196fbabd2846f3039427ecedd660296d8ad29a1ce0158f22f1c6976da
- MD5 d48ac6bb8ea4e0b5104fa1d18b9ab45c
- SHA1 9c797da608488e4e1e08eb81c8893a01f84477f3
- SHA512 0b0aa0f50238898ae4e544d737b89c0074c9e5fac7c58c28d0edc99fa7044c7f775a91d002583ddc4bdb692e4121754846e616be2440755211ba09d91c722b22
- SSDEEP 393216:y+uXzYRadGlZvY/Qb/c46VgSyXnLrA6vX7Jr6pGp+3Y5lGSSz6Pp4iqMYQxsc6Sa:y+DUGzNjTDSyXvXlr6pdIbf2g4Qv6SZs
- TLSH T1DB47339F724A00614A07804373A7D6662555C0F9DF9768B323B14BFE3626A4FEED9C83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/SAK_32bit/SAK.exe autoit_exe - Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/SAK_32bit/bin/squirrel.exe pyinstaller - Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/SAK_32bit/SAK.exe unpack001/SAK_32bit/bin/4nxci.exe unpack001/SAK_32bit/bin/guiformat.exe unpack001/SAK_32bit/bin/hacbrewpack.exe unpack001/SAK_32bit/bin/hactool.exe unpack001/SAK_32bit/bin/hactoolnet.exe unpack001/SAK_32bit/bin/hptnacp.exe unpack001/SAK_32bit/bin/renxpack.exe unpack001/SAK_32bit/bin/squirrel.exe
File Explorer
-
SAK_v0.7.14_32bit_20220405-19-38-49.7z.7z 25.0MB
-
SAK_32bit/SAK.exe.exe 1.6MB
-
SAK_32bit/bin/4nxci.exe.exe 980KB
-
SAK_32bit/bin/4nxci_LICENSE877B
-
SAK_32bit/bin/fw_nca_mapping.csv1KB
-
SAK_32bit/bin/guiformat.exe.exe 76KB
-
SAK_32bit/bin/hacbrewpack.exe.exe 1022KB
-
SAK_32bit/bin/hacbrewpack_LICENSE17KB
-
SAK_32bit/bin/hactool.exe.exe 1.2MB
-
SAK_32bit/bin/hactoolnet.exe.exe 3.4MB
-
SAK_32bit/bin/hptnacp.exe.exe 2.3MB
-
SAK_32bit/bin/nro_fw_NintendoLogo.png.png 262B
-
SAK_32bit/bin/nro_fw_StartupMovie.gif.gif 39KB
-
SAK_32bit/bin/nro_fw_main53KB
-
SAK_32bit/bin/nro_fw_main.npdm972B
-
SAK_32bit/bin/renxpack.exe.exe 988KB
-
SAK_32bit/bin/renxpack_LICENSE888B
-
SAK_32bit/bin/squirrel.exe.exe 22.3MB
-
squirrel.pyc186KB
-
SAK_32bit/liesmich_readme.txt29KB
SAK_32bit/SAK.exe
- IMPHASH eb97e4fc5518ac300a92a11673825e0b
- SHA256 9f6b8b9b26cb5c6f1d44f8c771f64ee16fa0800331c8ccbc31ebad2e452a834a
- MD5 fba0709e39294680ccecfead574f3a59
- SHA1 a9153aebdc0924f182cf0cf688d90de96f0eed16
- SHA512 e7b0d84f39c6012612abb08adbb60a0cdb53e1288312c5278399d0660771b816e088d7e7636d25f128ed1910bca2e7ec64097c60449b1b429d728f33679920bf
- SSDEEP 24576:SAHnh+eWsN3skA4RV1Hom2KXMmHar/fP1piadgSepsCIBumhbozTX2JNe5:Vh+ZkldoPK8YaTfP1pige65Nhbk
- TLSH T1F775CF0273D5C036FFAA92735B6AF23556BD7D240123852F23D83E7BBE701A1162D662
- MD5 SHA1 SHA512 SSDEEP TLSH
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
163850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
wsock32
WSACleanup
socket
inet_ntoa
setsockopt
ntohs
recvfrom
ioctlsocket
htons
WSAStartup
__WSAFDIsSet
select
accept
listen
bind
closesocket
WSAGetLastError
recv
sendto
send
inet_addr
gethostbyname
gethostname
connect
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
winmm
timeGetTime
waveOutSetVolume
mciSendStringW
comctl32
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Remove
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
InitCommonControlsEx
ImageList_Create
mpr
WNetUseConnectionW
WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
wininet
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetCrackUrlW
HttpQueryInfoW
InternetQueryOptionW
HttpOpenRequestW
HttpSendRequestW
FtpOpenFileW
FtpGetFileSize
InternetOpenUrlW
InternetReadFile
InternetConnectW
psapi
GetProcessMemoryInfo
iphlpapi
IcmpCreateFile
IcmpCloseHandle
IcmpSendEcho
userenv
DestroyEnvironmentBlock
UnloadUserProfile
CreateEnvironmentBlock
LoadUserProfileW
uxtheme
IsThemeActive
kernel32
DuplicateHandle
CreateThread
WaitForSingleObject
HeapAlloc
GetProcessHeap
HeapFree
Sleep
GetCurrentThreadId
MultiByteToWideChar
MulDiv
GetVersionExW
IsWow64Process
GetSystemInfo
FreeLibrary
LoadLibraryA
GetProcAddress
SetErrorMode
GetModuleFileNameW
WideCharToMultiByte
lstrcpyW
lstrlenW
GetModuleHandleW
QueryPerformanceCounter
VirtualFreeEx
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
CreateFileW
SetFilePointerEx
SetEndOfFile
ReadFile
WriteFile
FlushFileBuffers
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetFileTime
GetFileAttributesW
FindFirstFileW
SetCurrentDirectoryW
GetLongPathNameW
GetShortPathNameW
DeleteFileW
FindNextFileW
CopyFileExW
MoveFileW
CreateDirectoryW
RemoveDirectoryW
SetSystemPowerState
QueryPerformanceFrequency
FindResourceW
LoadResource
LockResource
SizeofResource
EnumResourceNamesW
OutputDebugStringW
GetTempPathW
GetTempFileNameW
DeviceIoControl
GetLocalTime
CompareStringW
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
CreatePipe
InterlockedExchange
TerminateThread
LoadLibraryExW
FindResourceExW
CopyFileW
VirtualFree
FormatMessageW
GetExitCodeProcess
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDriveTypeW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetVolumeInformationW
SetVolumeLabelW
CreateHardLinkW
SetFileAttributesW
CreateEventW
SetEvent
GetEnvironmentVariableW
SetEnvironmentVariableW
GlobalLock
GlobalUnlock
GlobalAlloc
GetFileSize
GlobalFree
GlobalMemoryStatusEx
Beep
GetSystemDirectoryW
HeapReAlloc
HeapSize
GetComputerNameW
GetWindowsDirectoryW
GetCurrentProcessId
GetProcessIoCounters
CreateProcessW
GetProcessId
SetPriorityClass
LoadLibraryW
VirtualAlloc
IsDebuggerPresent
GetCurrentDirectoryW
lstrcmpiW
DecodePointer
GetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCurrentThread
CloseHandle
GetFullPathNameW
EncodePointer
ExitProcess
GetModuleHandleExW
ExitThread
GetSystemTimeAsFileTime
ResumeThread
GetCommandLineW
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetStringTypeW
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
RtlUnwind
ReadConsoleW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
FindClose
SetEnvironmentVariableA
user32
AdjustWindowRectEx
CopyImage
SetWindowPos
GetCursorInfo
RegisterHotKey
ClientToScreen
GetKeyboardLayoutNameW
IsCharAlphaW
IsCharAlphaNumericW
IsCharLowerW
IsCharUpperW
GetMenuStringW
GetSubMenu
GetCaretPos
IsZoomed
MonitorFromPoint
GetMonitorInfoW
SetWindowLongW
SetLayeredWindowAttributes
FlashWindow
GetClassLongW
TranslateAcceleratorW
IsDialogMessageW
GetSysColor
InflateRect
DrawFocusRect
DrawTextW
FrameRect
DrawFrameControl
FillRect
PtInRect
DestroyAcceleratorTable
CreateAcceleratorTableW
SetCursor
GetWindowDC
GetSystemMetrics
GetActiveWindow
CharNextW
wsprintfW
RedrawWindow
DrawMenuBar
DestroyMenu
SetMenu
GetWindowTextLengthW
CreateMenu
IsDlgButtonChecked
DefDlgProcW
CallWindowProcW
ReleaseCapture
SetCapture
CreateIconFromResourceEx
mouse_event
ExitWindowsEx
SetActiveWindow
FindWindowExW
EnumThreadWindows
SetMenuDefaultItem
InsertMenuItemW
IsMenu
TrackPopupMenuEx
GetCursorPos
DeleteMenu
SetRect
GetMenuItemID
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
SetForegroundWindow
IsIconic
FindWindowW
MonitorFromRect
keybd_event
SendInput
GetAsyncKeyState
SetKeyboardState
GetKeyboardState
GetKeyState
VkKeyScanW
LoadStringW
DialogBoxParamW
MessageBeep
EndDialog
SendDlgItemMessageW
GetDlgItem
SetWindowTextW
CopyRect
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
GetMenu
DestroyWindow
EnumWindows
GetDesktopWindow
IsWindow
IsWindowEnabled
IsWindowVisible
EnableWindow
InvalidateRect
GetWindowLongW
GetWindowThreadProcessId
AttachThreadInput
GetFocus
GetWindowTextW
ScreenToClient
SendMessageTimeoutW
EnumChildWindows
CharUpperBuffW
GetParent
GetDlgCtrlID
SendMessageW
MapVirtualKeyW
PostMessageW
GetWindowRect
SetUserObjectSecurity
CloseDesktop
CloseWindowStation
OpenDesktopW
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
GetUserObjectSecurity
MessageBoxW
DefWindowProcW
SetClipboardData
EmptyClipboard
CountClipboardFormats
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
BlockInput
GetMessageW
LockWindowUpdate
DispatchMessageW
TranslateMessage
PeekMessageW
UnregisterHotKey
CheckMenuRadioItem
CharLowerBuffW
MoveWindow
SetFocus
PostQuitMessage
KillTimer
CreatePopupMenu
RegisterWindowMessageW
SetTimer
ShowWindow
CreateWindowExW
RegisterClassExW
LoadIconW
LoadCursorW
GetSysColorBrush
GetForegroundWindow
MessageBoxA
DestroyIcon
SystemParametersInfoW
LoadImageW
GetClassNameW
gdi32
StrokePath
DeleteObject
GetTextExtentPoint32W
ExtCreatePen
GetDeviceCaps
EndPath
SetPixel
CloseFigure
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchBlt
GetDIBits
LineTo
AngleArc
MoveToEx
Ellipse
DeleteDC
GetPixel
CreateDCW
GetStockObject
GetTextFaceW
CreateFontW
SetTextColor
PolyDraw
BeginPath
Rectangle
SetViewportOrgEx
GetObjectW
SetBkMode
RoundRect
SetBkColor
CreatePen
CreateSolidBrush
StrokeAndFillPath
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
GetAce
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegConnectRegistryW
InitializeSecurityDescriptor
InitializeAcl
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
CreateProcessAsUserW
CreateProcessWithLogonW
GetLengthSid
CopySid
LogonUserW
AllocateAndInitializeSid
CheckTokenMembership
RegCreateKeyExW
FreeSid
GetTokenInformation
GetSecurityDescriptorDacl
GetAclInformation
AddAce
SetSecurityDescriptorDacl
GetUserNameW
InitiateSystemShutdownExW
shell32
DragQueryPoint
ShellExecuteExW
DragQueryFileW
SHEmptyRecycleBinW
SHGetPathFromIDListW
SHBrowseForFolderW
SHCreateShellItem
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFolderPathW
SHFileOperationW
ExtractIconExW
Shell_NotifyIconW
ShellExecuteW
DragFinish
ole32
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
ProgIDFromCLSID
CLSIDFromProgID
OleSetMenuDescriptor
MkParseDisplayName
OleSetContainedObject
CoCreateInstance
IIDFromString
StringFromGUID2
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoInitialize
CoUninitialize
GetRunningObjectTable
CoGetInstanceFromFile
CoGetObject
CoSetProxyBlanket
CoCreateInstanceEx
CoInitializeSecurity
oleaut32
LoadTypeLibEx
VariantCopyInd
SysReAllocString
SysFreeString
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayAllocData
SafeArrayAllocDescriptorEx
SafeArrayCreateVector
RegisterTypeLi
CreateStdDispatch
DispCallFunc
VariantChangeType
SysStringLen
VariantTimeToSystemTime
VarR8FromDec
SafeArrayGetVartype
VariantCopy
VariantClear
OleLoadPicture
QueryPathOfRegTypeLi
RegisterTypeLibForUser
UnRegisterTypeLibForUser
UnRegisterTypeLi
CreateDispTypeInfo
SysAllocString
VariantInit
Name
.text
Size
568KB
Virtual Size
567KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
191KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
822KB
Virtual Size
821KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=225, version=20806,
count=1, id=199, version=41118,
count=51, id=223, productName=VS2013 build 21005, version=21005,
count=177, id=224, productName=VS2013 build 21005, version=21005,
count=53, id=225, productName=VS2013 build 21005, version=21005,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=37, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=544, id=1, productName=Unmarked objects,
count=80, id=234, version=40629,
count=1, id=223, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
SAK_32bit/bin/4nxci.exe
- IMPHASH 128c68049ba3b050bc5e1839813b6f8f
- SHA256 10ce3661dd9f6bc00f5f52c2f1bff9f5c6ba0bdbff47408b03b828829e426ff7
- MD5 c9014290e0c68dbee7862c919f27cf1b
- SHA1 2e2c9fc487e0ce3d964627041ce98c94771d529b
- SHA512 31b72b33aaf4ec58a69178790c99258988df39e744f8802ac22077e535bc85fe8b2afb3cea268777814b72d9412f2e83f3d8f6e919ff397ace2aa0f5e6bb8881
- SSDEEP 24576:klTz9ILlrkO0miKf2mnunTZZAhABwOFdUCoC9n4Bc9oWReO:kbY+EXunTZZAhABwOFdUCoBc9zReO
- TLSH T1C7256B44FA83FEF6F91A877D44E3931F42AE9240D729EB33EA04FD2898276590633545
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5280
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__lconv_init
__p___argv
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_exit
_filelengthi64
_fileno
_findclose
_findfirst
_findnext
_fullpath
_initterm
_iob
_lock
_onexit
_snwprintf
_stati64
_strdup
_unlock
_vsnprintf_s
_wfopen
_wmkdir
_wrmdir
abort
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fread
free
fseek
fsetpos
ftell
fwprintf
fwrite
getenv
localeconv
malloc
mbstowcs
memset
memcmp
memcpy
printf
putchar
puts
raise
rand
realloc
remove
setbuf
setlocale
signal
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strstr
vfprintf
wcscpy
wcslen
wcstombs
user32
MessageBoxW
Name
.text
Size
241KB
Virtual Size
241KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
316B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/14
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
429KB
Virtual Size
428KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/89
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
SAK_32bit/bin/4nxci_LICENSE
- SHA256 2faf06d2650a279b8b71d0a754e28b49803fad2df496421144ef842388461aa5
- MD5 99c1bc07af99d9b1aaff2a8cb2798ca1
- SHA1 21fe8a2cb89ead5f4439a7ac46f24166f16253ef
- SHA512 1ccb2f601e47e0e9d24e0e0220f07fabfc518da9f026f3ebefb8730adb10187931b92d53829727babd1cafeb53ef1c05dbd4454e38630bf7b729d22915bbdecd
- TLSH T1ED11448E70E2DA9469E56B516C515DC9618DF0326603B60430A8E344C7634CE903A401
- MD5 SHA1 SHA512 TLSH
SAK_32bit/bin/fw_nca_mapping.csv
- SHA256 b1447b9f5498622ac9026e1983ac0a82a631e1840e0dc8b8cfbb76dddba2dda7
- MD5 e829df4cf6c91e870ffb9703e9e17732
- SHA1 df2acb3f2b0190da467ef0f5644b1cfb548dc5a2
- SHA512 0a0c8c35b3a72207b928beef78ae53026b4b2b8e38ce68e860adf677c81b1cc5463d78735adf0db821cc9b6a19674277669d4135abfe885da97f1d06cf1303d7
- TLSH T140419438B23E4ED80D0A097AFCA2E64DAE852532BA55D0D58A439C512663E37AD1B770
- MD5 SHA1 SHA512 TLSH
SAK_32bit/bin/guiformat.exe
- IMPHASH 796e8a3a6a59357dc579b989eea35777
- SHA256 647fb4f5108af632c3d52fec34934922c50c70585697504e92fb80b3b7d05ee3
- MD5 2459a629ace148286360b860442221a2
- SHA1 e1530fe47f34bfb18c7c01ce60010c7ff80652dd
- SHA512 3db860433a6522eff77736e1dc28c76543c2cce58e054f08700e781c52674dfa35f355853a1ee73c255956ea0ffbe47f288bc7b5f1e27be6d1eda07ecb27782e
- SSDEEP 1536:aihX6I+ob6rhXaHTcOgECqvec4ZoGcy0I:0I+UchNOgECUecGoGT
- TLSH T132735C22F2E5D129F0B24AB02D718BA65A39BE31C531D44B67C06B5F1E719A7DD22333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19117
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WriteFile
VirtualFree
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualAlloc
SetVolumeLabelW
CloseHandle
DeviceIoControl
CreateFileW
GetVolumeInformationW
GetDriveTypeW
GetLogicalDriveStringsW
GetModuleFileNameW
GetWindowsDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
GetSystemInfo
GetProcAddress
GetVersion
FlushFileBuffers
LCMapStringW
SetFilePointer
GetStringTypeW
GetStringTypeA
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
RtlUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
HeapReAlloc
LeaveCriticalSection
GetLastError
LocalFree
FormatMessageW
LCMapStringA
GetLocalTime
HeapFree
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapDestroy
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
user32
MessageBoxA
CreateDialogParamW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
LoadImageW
DestroyWindow
DestroyIcon
PostQuitMessage
BeginDeferWindowPos
ScreenToClient
DeferWindowPos
EndDeferWindowPos
LoadMenuW
GetSubMenu
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DestroyMenu
GetWindowTextW
CharToOemBuffW
SetWindowLongW
IsDlgButtonChecked
GetDlgItemInt
CheckDlgButton
GetClientRect
GetParent
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
LoadCursorW
SetCursor
GetDlgItemTextW
SetWindowTextW
GetDC
DrawTextW
ReleaseDC
GetDlgItem
EnableWindow
SendMessageW
MessageBoxW
ShowWindow
gdi32
GetTextMetricsW
SelectObject
comctl32
InitCommonControlsEx
Name
.text
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=97, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=22, id=14, version=7299,
count=3, productName=Unmarked objects (old),
count=7, id=19, version=8034,
count=138, id=1, productName=Unmarked objects,
count=2, id=21, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
SAK_32bit/bin/hacbrewpack.exe
- IMPHASH e4abcf668a38ab5928b8dd4e843ca002
- SHA256 b453f6bcb127231fd8ceb8719ca8f467bfb9ca6fb532919cc03f725eb5b8671b
- MD5 8788310f4cc1620479772ba541fb54ca
- SHA1 14776056840eb8480ef456bd31d39bdea98b2f8e
- SHA512 a9cc1142f269dd20bbf02c8abe71922efc4f9337c5c480ae3ae427003d652d4fab971aaba7d3067ac3d5aec9bdfdbb5e932e6d96b2d9c828e6816d134878ed85
- SSDEEP 24576:brd/9MltGcUFsa+mnASngQqAjaJOKgpWQMhazvAv8GLWU6L:bTCQD/ASngQqAjaJOKgpWQMhR8G6U6L
- TLSH T1FC256B44FA43FDF6F90A87B944E3A31F42AED240D719EB33EA04FD6898276590633645
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5280
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__lconv_init
__p___argv
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_exit
_filelengthi64
_fileno
_findclose
_findfirst
_findnext
_fullpath
_initterm
_iob
_lock
_onexit
_snwprintf
_stat64
_stati64
_unlock
_vsnprintf_s
_wfindfirst
_wfindnext
_wfopen
_wfullpath
_wmkdir
_wrename
_wrmdir
_wstati64
abort
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fread
free
fseek
fsetpos
ftell
fwprintf
fwrite
getenv
islower
isspace
isupper
localeconv
malloc
memset
memcmp
memcpy
printf
putchar
puts
raise
rand
remove
setlocale
signal
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strstr
strtoul
vfprintf
wcscat
wcscpy
wcslen
user32
MessageBoxW
Name
.text
Size
245KB
Virtual Size
245KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
604B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/14
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
458KB
Virtual Size
457KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/89
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
SAK_32bit/bin/hacbrewpack_LICENSE
- SHA256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643
- MD5 b234ee4d69f5fce4486a80fdaf4a4263
- SHA1 4cc77b90af91e615a64ae04893fdffa7939db84c
- SHA512 aee80b1f9f7f4a8a00dcf6e6ce6c41988dcaedc4de19d9d04460cbfb05d99829ffe8f9d038468eabbfba4d65b38e8dbef5ecf5eb8a1b891d9839cda6c48ee957
- SSDEEP 384:ghUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:gmFWixMFzMdm7jUI
- TLSH T13A82A42E770443F205C202A16A4F68DFA32AD5B9723E1155386DC15E236FE35C3BFA99
- MD5 SHA1 SHA512 SSDEEP TLSH
SAK_32bit/bin/hactool.exe
- IMPHASH 892e7f509a3f073822380b18e0d16783
- SHA256 01e6ccb916c74071645df84f13e05d0185c9b2f5d748e469c84a157a53395cf9
- MD5 e87d6333b3d7f13f0cb8b384873f4b85
- SHA1 0baccd07aac5a73f31b39173b8ed50e9065b3164
- SHA512 1cd58b515e46a0a0ad36dec786e027787556c9f8f5ad3077a95a7812c4c95120e30b21d0702cf1f93a4183403faabeb3f5614bff625e4a3c48c5737f8e7919b7
- SSDEEP 24576:Jb0IfwGOZmuYcPp1kaTotKplefgS1W+4tBLd6Y:NfuZmuLPp1kaTdlefgSpuLd6Y
- TLSH T157458E54F381BDBAC849877149D353667736F0815326EB2F362CEE380F17B809E66A49
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5344
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_filelengthi64
_fileno
_fmode
_gmtime64
_initterm
_lock
_onexit
_strdup
_stricmp
_unlock
_wfopen
_wmkdir
_wrmdir
abort
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fread
free
fseek
fsetpos
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memmove
memset
printf
putchar
puts
realloc
signal
strchr
strcmp
strcpy
strerror
strftime
strlen
strncat
strncmp
strncpy
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
cJSON_AddArrayToObject
cJSON_AddBoolToObject
cJSON_AddFalseToObject
cJSON_AddItemReferenceToArray
cJSON_AddItemReferenceToObject
cJSON_AddItemToArray
cJSON_AddItemToObject
cJSON_AddItemToObjectCS
cJSON_AddNullToObject
cJSON_AddNumberToObject
cJSON_AddObjectToObject
cJSON_AddRawToObject
cJSON_AddStringToObject
cJSON_AddTrueToObject
cJSON_Compare
cJSON_CreateArray
cJSON_CreateArrayReference
cJSON_CreateBool
cJSON_CreateDoubleArray
cJSON_CreateFalse
cJSON_CreateFloatArray
cJSON_CreateIntArray
cJSON_CreateNull
cJSON_CreateNumber
cJSON_CreateObject
cJSON_CreateObjectReference
cJSON_CreateRaw
cJSON_CreateString
cJSON_CreateStringArray
cJSON_CreateStringReference
cJSON_CreateTrue
cJSON_Delete
cJSON_DeleteItemFromArray
cJSON_DeleteItemFromObject
cJSON_DeleteItemFromObjectCaseSensitive
cJSON_DetachItemFromArray
cJSON_DetachItemFromObject
cJSON_DetachItemFromObjectCaseSensitive
cJSON_DetachItemViaPointer
cJSON_Duplicate
cJSON_GetArrayItem
cJSON_GetArraySize
cJSON_GetErrorPtr
cJSON_GetObjectItem
cJSON_GetObjectItemCaseSensitive
cJSON_GetStringValue
cJSON_HasObjectItem
cJSON_InitHooks
cJSON_InsertItemInArray
cJSON_IsArray
cJSON_IsBool
cJSON_IsFalse
cJSON_IsInvalid
cJSON_IsNull
cJSON_IsNumber
cJSON_IsObject
cJSON_IsRaw
cJSON_IsString
cJSON_IsTrue
cJSON_Minify
cJSON_Parse
cJSON_ParseWithOpts
cJSON_Print
cJSON_PrintBuffered
cJSON_PrintPreallocated
cJSON_PrintUnformatted
cJSON_ReplaceItemInArray
cJSON_ReplaceItemInObject
cJSON_ReplaceItemInObjectCaseSensitive
cJSON_ReplaceItemViaPointer
cJSON_SetNumberHelper
cJSON_Version
cJSON_free
cJSON_malloc
Name
.text
Size
306KB
Virtual Size
306KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
362KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
158KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
SAK_32bit/bin/hactoolnet.exe
- IMPHASH 1081b5e56315abc73b60aeae3bf16ebd
- SHA256 2ffb12bf36e26550b55d308e85b5e9b35a0ea530215ba8673a3c978627023e03
- MD5 223904a9a7f5b5acd4b8fa136b02d644
- SHA1 9be937331cd20d1ae0bdbf7bfa5d469eeeaf8ca5
- SHA512 6b56fef09ba918f538566d4a760b04982d36d8051db7824fe25766fcde21c3d4e05602e6e7d03190dc0ed17acc4e1a08602b82b8f137b6a7713ce143879ae97f
- SSDEEP 49152:CnJ53I6vWPE7o/Op7L0KUt5QU11g+vm7bKKEg3sUfx+tT2hAUgR3rn:e55eXzMhECrgR3rn
- TLSH T1B4F59E62F38806C8D437DA34CE29C323D670B896073586DB1D65565E2F7BAD29F3B221
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
425436
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\LibHac\src\hactoolnet\bin\Release\net6.0\win-x64\native\hactoolnet.pdb
advapi32
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
EventWrite
EventRegister
EventEnabled
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
bcrypt
BCryptCreateHash
BCryptEncrypt
BCryptDecrypt
BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptDestroyHash
BCryptSetProperty
BCryptDestroyKey
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptImportKey
kernel32
SetFilePointerEx
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
CompareStringW
SetLastError
GetDiskFreeSpaceExW
GetLastError
SetThreadErrorMode
FormatMessageW
LocalFree
QueryPerformanceCounter
GetCPInfoExW
GetConsoleMode
GetFileType
SetConsoleOutputCP
GetConsoleOutputCP
GetStdHandle
WriteFile
ReadFile
ReadConsoleW
WriteConsoleW
MultiByteToWideChar
WideCharToMultiByte
CloseThreadpoolIo
ExpandEnvironmentStringsW
GetEnvironmentVariableW
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
LoadLibraryExW
FileTimeToSystemTime
GetSystemTime
GetCalendarInfoEx
GetLocaleInfoEx
EnumCalendarInfoExEx
LCMapStringEx
CompareStringOrdinal
CompareStringEx
FindNLSStringEx
LocaleNameToLCID
ResolveLocaleName
GetUserPreferredUILanguages
FindStringOrdinal
GetTickCount64
GetCurrentProcessorNumber
GetCurrentProcess
GetCurrentThread
Sleep
CreateThreadpoolWork
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
InitializeCriticalSection
InitializeConditionVariable
DeleteCriticalSection
EnterCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
WakeConditionVariable
WaitForMultipleObjectsEx
QueryPerformanceFrequency
GetFileAttributesExW
GetFullPathNameW
GetLongPathNameW
GetProcAddress
GetCPInfo
LocalAlloc
IsDebuggerPresent
RaiseFailFastException
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
EnumTimeFormatsEx
CreateDirectoryW
CreateFileW
DeleteFileW
DeleteVolumeMountPointW
FindNextFileW
FindClose
FindFirstFileExW
FlushFileBuffers
FreeLibrary
GetFileInformationByHandleEx
GetOverlappedResult
GetSystemDirectoryW
QueryUnbiasedInterruptTime
RemoveDirectoryW
SetFileAttributesW
SetFileInformationByHandle
GetDynamicTimeZoneInformation
GetTimeZoneInformation
CloseHandle
SetEvent
ResetEvent
CreateEventExW
DuplicateHandle
GetThreadPriority
SetThreadPriority
VerSetConditionMask
FlushProcessWriteBuffers
GetCurrentThreadId
WaitForSingleObjectEx
AddVectoredExceptionHandler
FlsAlloc
FlsGetValue
FlsSetValue
CreateEventW
TerminateProcess
SwitchToThread
CreateThread
SuspendThread
ResumeThread
GetThreadContext
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
QueryInformationJobObject
GetModuleHandleExW
GetProcessAffinityMask
VirtualQuery
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
DebugBreak
WaitForSingleObject
SleepEx
GlobalMemoryStatusEx
GetTickCount
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
GetWriteWatch
ResetWriteWatch
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
K32GetProcessMemoryInfo
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
HeapAlloc
HeapFree
GetCommandLineW
GetCommandLineA
ExitProcess
GetModuleFileNameW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
ncrypt
NCryptEncrypt
NCryptOpenStorageProvider
NCryptCreatePersistedKey
NCryptImportKey
NCryptGetProperty
NCryptSetProperty
NCryptVerifySignature
NCryptFreeObject
NCryptFinalizeKey
NCryptDecrypt
ole32
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
CoGetApartmentType
CoWaitForMultipleHandles
CoTaskMemFree
user32
LoadStringW
DotNetRuntimeDebugHeader
Name
.text
Size
499KB
Virtual Size
498KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.managed
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
166KB
Virtual Size
225KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=260, version=27412,
count=17, id=259, version=27412,
count=140, id=261, version=27412,
count=16, id=260, version=30625,
count=9, id=259, version=30625,
count=46, id=261, version=30625,
count=13, id=257, version=27412,
count=233, id=1, productName=Unmarked objects,
count=14, id=260, productName=VS2019 v16.11.1 build 30133, version=30133,
count=12, id=259, productName=VS2019 v16.11.1 build 30133, version=30133,
count=61, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,
count=1, productName=Unmarked objects (old),
count=1, id=256, version=30706,
count=1, id=255, version=30706,
count=1, id=258, version=30706,
SAK_32bit/bin/hptnacp.exe
- IMPHASH ef57fa0005d17bd373b885166da6c10c
- SHA256 3a0cbfcca48f2154423b26bfafcaf9c55061f32a7e09f0b34691c5c3a006e995
- MD5 f18c9613eabe47d2bf6722c7faf5449e
- SHA1 fe1c6bb5735bda2b86dc0cbe261966aea9132c56
- SHA512 090d9db6f83d5d44fc38faf875699d2aa5d47fd82ffd4f2959be76597e26df3dc320d5b0ac9efadbebacf0e178a1c4c6e96298f4026204b4b4a934d4d6b1be23
- SSDEEP 24576:zE6H60CTegbTmLf1CoqnFys38s6uEQRfSmr84ER7eRXovlraVuQ583h30w:HWazrR7J
- TLSH T10EB509036A8B4E75DDD23BB451CB633F9734EE30CA269B7FE609C4359A532C4681A742
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
_fdopen
_fstat
_lseek
_read
_strdup
_stricoll
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_flsbuf
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
atoi
calloc
exit
fclose
fflush
fgetc
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
getwc
isalpha
isspace
iswctype
localeconv
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
puts
putwc
realloc
setlocale
setvbuf
signal
sprintf
sscanf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strncpy
strtod
strtol
strtoul
strxfrm
tolower
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcstombs
wcsxfrm
Name
.text
Size
757KB
Virtual Size
756KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
258KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/14
Size
512B
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/80
Size
1024B
Virtual Size
686B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/91
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/102
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
SAK_32bit/bin/nro_fw_NintendoLogo.png
- SHA256 4a9fc7cdac065db84a611924d6f51b2da469ffbba71407ef79a2877c29040555
- MD5 e400d3b5ded2d6a110e6bda4e374abdd
- SHA1 d86be480d755ebf69809d256318bfef17051ce8b
- SHA512 c965ffa55534b3c49c78c9fd71b431c00c6dabd534718f62ecfb7e784c4788be35cc4acfb8820e360cc9e59584249541e7572abdc201313d2350f6f92602233f
- TLSH T1A2D080D776904C5DD55B097F5125468094BE83DF166251585F71C01CD41C655A425361
- MD5 SHA1 SHA512 TLSH
SAK_32bit/bin/nro_fw_StartupMovie.gif
- SHA256 eee1edba75dd9f7967d5a9f5ad6dfefd01a364c9799d42babd653fa9b98e51f0
- MD5 617450c83f1f39a0ca3f9f3f3833e738
- SHA1 d96fd2e48964adea1464ede0a1290cf39119c657
- SHA512 2943ec035403b4f69578425ef9a63a4eb6caeb74b0a910a65ac98a326f3ba6816e6adede9f9fa09973a9dc8d6a4b95a6f9d944e1a32b0332937c6f928088ca84
- SSDEEP 768:BIOtfAGBNOOu+MA36QrW4Z/gLr8VVOPLT+JTWY1ygSpCYn:BIyfAaNXwFuHZI8VVOPH+6zV
- TLSH T1A903E196E1CE6807596E6E5A8D4DDFBF015A414C36CAD473E04B7B835A389FE34C8238
- MD5 SHA1 SHA512 SSDEEP TLSH
SAK_32bit/bin/nro_fw_main
- SHA256 63e45d7a78025b425f3268254aa1ad808d9f5544db54ebda80a93c8a36755c15
- MD5 3608fc25b69984dd97ac758e6f75baea
- SHA1 28fec9ac3ec0200ba328a01386a602e6d2a9c4de
- SHA512 3928e288c7f6952cedf6ceb1aed88569f9fa5429e4581bad3f95110f723d5f2d016c91f33e1846789750ce37df0077eb935804ddb77de33c6c2f07b957d9f5aa
- SSDEEP 1536:s4GB/YaHWITnh/W02yJiBjTsEiLRLLXImd1BXksn2lEzya:4B/YuJcV1jTiLRHXIm3BUsn2lEzya
- TLSH T1C733CF69B6C50B46D249E23AE5EDCB29232A349407D72244ED413B7E6DCF7EEF260409
- MD5 SHA1 SHA512 SSDEEP TLSH
SAK_32bit/bin/nro_fw_main.npdm
- SHA256 d11e4ce9f42acd39287c83fc3eb7b4d51a53d6d4b117f8d4b5f18a7c968c2335
- MD5 354a406f291a7d2f2ebd47c361187b0f
- SHA1 3aed29c34049ec3a31f28143a81f6f45d45b3686
- SHA512 47d6be38b0c20777fc1c71721a62daededf322a643bd5c807bbcee5fa636ccb2aabcdb8da310e372327acc011d98f9ef4eac52a5b62b9fc8d9ac7bccf42bc8f9
- TLSH T18A115E83A242ED59F505333B0C47CF71B9879C2C8E84EE4BBD25B2AD9C382208C82001
- MD5 SHA1 SHA512 TLSH
SAK_32bit/bin/renxpack.exe
- IMPHASH 128c68049ba3b050bc5e1839813b6f8f
- SHA256 51d847e22795aaa29ead6b924ddb711be6f4b833eb04a367a7095b32d5390072
- MD5 3b87a30e819b4b381c40d90267077b74
- SHA1 df5131a26c6b18506275ebacc6c64dd029a119dc
- SHA512 a139932340ed741648dbfb74d47504ae78347aa1eadc0486faf37bfa293f79125e68b7b793191cea5138d3cfa86a3885bce485e0e8ece412d0aac69bcff97b3b
- SSDEEP 24576:mawJ3ht++QVbv2R7LyVmn2D3OSXouxOOkpbTK8/qXK4QHWGmx:iDIVABeI2D3OSXouxOOkpbTKW4Q2Gmx
- TLSH T1A0255B54FA83FEF6F91A87BE44E3931F42AED240D329E733AA04FD6884276590633545
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5280
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__lconv_init
__p___argv
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_exit
_filelengthi64
_fileno
_findclose
_findfirst
_findnext
_fullpath
_initterm
_iob
_lock
_onexit
_snwprintf
_stati64
_strdup
_unlock
_vsnprintf_s
_wfopen
_wmkdir
_wrmdir
abort
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fread
free
fseek
fsetpos
ftell
fwprintf
fwrite
getenv
localeconv
malloc
mbstowcs
memset
memcmp
memcpy
printf
putchar
puts
raise
rand
realloc
remove
setbuf
setlocale
signal
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strstr
vfprintf
wcscpy
wcslen
wcstombs
user32
MessageBoxW
Name
.text
Size
239KB
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
284B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/14
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
433KB
Virtual Size
433KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/89
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
SAK_32bit/bin/renxpack_LICENSE
- SHA256 0ddb55d8ae37c53fa8f86d7f3e6eb7b2c0660f0f4e9d033497d27ccedbf1f62b
- MD5 039b3b84babe99c456a64e1f5f71d580
- SHA1 79cf7ce731d839627a849be837760ecb656041e3
- SHA512 2d8b4fcd2f300a702315c9a386ec8a0f8b5260ca8d123969e2524c62c12e3017792a516b52476911771547359edc495f3d62412c2466566172f19ac7b70c9a92
- TLSH T11811448E70E19AD469F99F51AC50ADC971CEF0326603BA0430A8E354C72344E907A411
- MD5 SHA1 SHA512 TLSH
SAK_32bit/bin/squirrel.exe
- IMPHASH 4df47bd79d7fe79953651a03293f0e8f
- SHA256 ebf1fea6ea96d10dd3b4201c17ecf83d655eb84e724b7b1f2980655df11c9d1d
- MD5 059e952e9fbfe540449dec24b8849e7b
- SHA1 3bd253fef6a3827e0b338b0c2db7cbd5d587a526
- SHA512 610f46389c44c60eeccfa9bc4b12254f0134dbb176b763e1d66dea7626134c27b0e3c37c6cb2c06ddc9cf6079fb9a5d583f7d109f306f2e4012c647b18e60517
- SSDEEP 393216:gHbWHOvptvjAwCteW6EWfVMg1OzqMDikJQlKfUH9EfSX/Ju7FfGYdrW:gHUM1+te9MqOzqjU0d9EfmMFf8
- TLSH T1B83733CBE6437C5DCDB902375B97C2A53421B5E07B26257B232A0FBFF41A2815E6C912
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
30986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LoadLibraryExW
GetShortPathNameW
FormatMessageW
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetCommandLineA
ReadFile
CreateFileW
GetDriveTypeW
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
GetFullPathNameA
CreateDirectoryW
RemoveDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
SetStdHandle
SetConsoleCtrlHandler
DeleteFileW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
SetEnvironmentVariableA
GetFileAttributesExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetProcessHeap
WriteConsoleW
GetTimeZoneInformation
HeapSize
HeapReAlloc
SetEndOfFile
RaiseException
ws2_32
ntohl
Name
.text
Size
125KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
338KB
Virtual Size
337KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=241, version=40116,
count=170, id=243, version=40116,
count=24, id=242, version=40116,
count=18, id=259, version=24123,
count=29, id=261, version=24123,
count=18, id=260, version=24123,
count=5, id=203, version=65501,
count=113, id=1, productName=Unmarked objects,
count=17, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
squirrel.pyc
- SHA256 5b113120791437afc874651fa1f5d51614a19d483674549198d194679a24f1c2
- MD5 b3132f8f4b0edb2624cb13089aca89a5
- SHA1 46096ff89fc826a5ebfd75283665b10227c03410
- SHA512 3d3032dfed7a23d8bff5f7cf2bc288bf37719ef202ee61d86dab84080cd033d449891aca8c5166d941e329fd9a6f1b841cd79e412fb7709dd78a14bfc7be9fcc
- SSDEEP 3072:G6SMRtDm5Bg3bYzm76bLy0OYpKErGoEkC23ogZLidA:+DgrYzm7EOZgZW6
- TLSH T12114A4FA519341D2625BA92CB0501404EF3BBD9C8BC647BFC4026A49FE855B9AF70F4E
- MD5 SHA1 SHA512 SSDEEP TLSH
SAK_32bit/liesmich_readme.txt
- SHA256 7e7155ea5911fa54424e87d9632a0050ca07c9a7b45b101f7ea0bc4c95c98dfe
- MD5 30a129cd27b7813e6f8eb155519fb769
- SHA1 451ae3a1870776ab617858b3d3c3e9ff032ad689
- SHA512 03ad0052bf8d52329d6890b5cfa90eae2f9bc1db0935faa15c83f530957af44d43b4b649e56733f5b49496d5527a984f7345d9d2c0254ecd21ace6ce8f7e5372
- SSDEEP 384:UFu2HV9H+YrMO8mDXVyZ6EOCeezVBCsxtyHVERJvmlb//Vnw:Uc6yWg6EOUVBCUvmd/dw
- TLSH T1BFD2B62B918BDC7487321742614B16F5ABEEC269AFAB11FCF81CB51C235D09C671E26C
- MD5 SHA1 SHA512 SSDEEP TLSH