0d4efae9627f2c1a92b75e1ca2aa8ecb19663e5ea391d0dc7d3b1f9cc239568d
- SHA256 0d4efae9627f2c1a92b75e1ca2aa8ecb19663e5ea391d0dc7d3b1f9cc239568d
Overview
overview
7Static
static
7�...WX.exe
windows10-2004-x64
5�...WX.exe
windows11-ltsc_2024-x64
5�...e).gba
windows10-2004-x64
3�...e).gba
windows11-ltsc_2024-x64
3�...n).gba
windows10-2004-x64
3�...n).gba
windows11-ltsc_2024-x64
3�...WX.exe
windows10-2004-x64
5�...WX.exe
windows11-ltsc_2024-x64
6�...1).gba
windows10-2004-x64
3�...1).gba
windows11-ltsc_2024-x64
3�...WX.exe
windows10-2004-x64
5�...WX.exe
windows11-ltsc_2024-x64
6�...n).gba
windows10-2004-x64
3�...n).gba
windows11-ltsc_2024-x64
3�...xa.dll
windows10-2004-x64
3�...xa.dll
windows11-ltsc_2024-x64
3�...nt.dll
windows10-2004-x64
5�...nt.dll
windows11-ltsc_2024-x64
5�...se.dll
windows10-2004-x64
1�...se.dll
windows11-ltsc_2024-x64
1�...ia.exe
windows10-2004-x64
6�...ia.exe
windows11-ltsc_2024-x64
6�...ar.dll
windows10-2004-x64
3�...ar.dll
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
2 GBA/VisualBoyAdvance-M-WX.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2 GBA/VisualBoyAdvance-M-WX.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
2 GBA/roms/Super Mario Advance (USA, Europe).gba
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
2 GBA/roms/Super Mario Advance (USA, Europe).gba
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
2 GBA/roms/Super Mario Advance - Super Mario USA + Mario Brothers (Japan).gba
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
2 GBA/roms/Super Mario Advance - Super Mario USA + Mario Brothers (Japan).gba
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
GBA/VisualBoyAdvance-M-WX.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
GBA/VisualBoyAdvance-M-WX.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral9
Sample
GBA/roms/Famicom Mini 01 - Super Mario Bros. (Japan) (En) (Rev 1).gba
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
GBA/roms/Famicom Mini 01 - Super Mario Bros. (Japan) (En) (Rev 1).gba
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
2հ GBA/VisualBoyAdvance-M-WX.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
2հ GBA/VisualBoyAdvance-M-WX.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral13
Sample
2հ GBA/roms/Famicom Mini 21 - Super Mario Bros. 2 (Japan).gba
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
2հ GBA/roms/Famicom Mini 21 - Super Mario Bros. 2 (Japan).gba
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
1+2հ/7zxa.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
1+2հ/7zxa.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
1+2հ/kailleraclient.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
1+2հ/kailleraclient.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
1+2հ/language/Chinese.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
1+2հ/language/Chinese.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
1+2հ/nestopia.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral22
Sample
1+2հ/nestopia.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral23
Sample
1+2հ/unrar.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
1+2հ/unrar.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 0d4efae9627f2c1a92b75e1ca2aa8ecb19663e5ea391d0dc7d3b1f9cc239568d
- Size 15.5MB
- Sample260802-m4z41sysaw
- SHA256 0d4efae9627f2c1a92b75e1ca2aa8ecb19663e5ea391d0dc7d3b1f9cc239568d
- MD5 533e86f78aaadc33b1b4a142747c91df
- SHA1 47f49263091374fdb7127747dfa37219cfb3bd2b
- SHA512 09a7d484ce9e8574e4b6783b172bf95c21f9383888f10613b8634ce852c61b01bc67b7d73cfd1214a2f849f27ea4cdd443e8dac094d3baed84806b15c43b2d46
- SSDEEP 393216:7anadpiXCP8qOSkjzgZCXanadpiXHiWgDaNctNyBItRxQ:7IsECPt3mzIsEHzgDGaOIC
- TLSH T114F6338B71B760ADFAFBC4E9AD142AA3385E4DBC4F1AB7CC3501A502C0A31F56395D19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack008/1+2հ/kailleraclient.dll acprotect -
resource yara_rule static1/unpack002/2 GBA/VisualBoyAdvance-M-WX.exe upx static1/unpack004/ GBA/VisualBoyAdvance-M-WX.exe upx static1/unpack006/2հ GBA/VisualBoyAdvance-M-WX.exe upx static1/unpack008/1+2հ/kailleraclient.dll upx - Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack002/2 GBA/VisualBoyAdvance-M-WX.exe unpack004/ GBA/VisualBoyAdvance-M-WX.exe unpack006/2հ GBA/VisualBoyAdvance-M-WX.exe unpack008/1+2հ/7zxa.dll unpack008/1+2հ/kailleraclient.dll unpack009/out.upx unpack008/1+2հ/language/Chinese.nlg unpack008/1+2հ/nestopia.exe unpack008/1+2հ/unrar.dll
File Explorer
-
0d4efae9627f2c1a92b75e1ca2aa8ecb19663e5ea391d0dc7d3b1f9cc239568d.zip 15.5MB
-
GBA版.zip.zip 5.9MB
-
2 GBA/VisualBoyAdvance-M-WX.exe.exe 2.1MB
-
2 GBA/doc/DevInfo.txt3KB
-
2 GBA/doc/License.txt1KB
-
2 GBA/doc/ReadMe.MFC.txt5KB
-
2 GBA/doc/ReadMe.SDL.txt7KB
-
2 GBA/doc/gpl.txt17KB
-
2 GBA/doc/ips.htm.html .js 12KB
-
2 GBA/roms/Super Mario Advance (USA, Europe).gba4.0MB
-
2 GBA/roms/Super Mario Advance - Super Mario USA + Mario Brothers (Japan).gba4.0MB
-
超级玛丽 GBA版.zip.zip 2.3MB
-
GBA/VisualBoyAdvance-M-WX.exe.exe 2.1MB
-
GBA/doc/DevInfo.txt3KB
-
GBA/doc/License.txt1KB
-
GBA/doc/ReadMe.MFC.txt5KB
-
GBA/doc/ReadMe.SDL.txt7KB
-
GBA/doc/gpl.txt17KB
-
GBA/doc/ips.htm.html .js 12KB
-
GBA/roms/Famicom Mini 01 - Super Mario Bros. (Japan) (En) (Rev 1).gba4.0MB
-
超级玛丽2日版 GBA版.zip.zip 4.7MB
-
2հ GBA/VisualBoyAdvance-M-WX.exe.exe 2.1MB
-
2հ GBA/doc/DevInfo.txt3KB
-
2հ GBA/doc/License.txt1KB
-
2հ GBA/doc/ReadMe.MFC.txt5KB
-
2հ GBA/doc/ReadMe.SDL.txt7KB
-
2հ GBA/doc/gpl.txt17KB
-
2հ GBA/doc/ips.htm.html .js 12KB
-
2հ GBA/roms/Famicom Mini 21 - Super Mario Bros. 2 (Japan).gba4.0MB
-
超级马里奥1+2日版.zip.zip 1.2MB
-
1+2հ/7zxa.dll.dll 166KB
-
1+2հ/Disksys.rom8KB
-
1+2հ/kailleraclient.dll.dll 31KB
-
out.upx.dll 66KB
-
1+2հ/language/Chinese.nlg.dll 45KB
-
1+2հ/nestopia.exe.exe 2.0MB
-
1+2հ/nestopia.log7KB
-
1+2հ/nestopia.xml19KB
-
1+2հ/roms/Super Mario Bros. (Japan, USA).nes40KB
-
1+2հ/roms/Super Mario Brothers 2 (Japan).fds63KB
-
1+2հ/schemadb.xsd.xml 32KB
-
1+2հ/schemaromset.xsd.xml 32KB
-
1+2հ/unrar.dll.dll 158KB
-
超级马里奥2美版.zip.zip 1.4MB
GBA版.zip
- SHA256 7f54414db0ea169be177900bf6c3b07d177f39a4972d1459b2653c57f425db68
- MD5 655ea5be3a45ed1f63a4a55e764622bf
- SHA1 46a253ecb599c65ace5dca90bde7168ed047d37e
- SHA512 3759d22cc44d7a9d1d3e0f1010fe074debac44307d743e6dee1998a05c004f84910167eb2a0dbbe1e0ad2a576b19cb8e5d53f9f689bacac08f9b70833d1cd1a7
- SSDEEP 98304:uA0SJYV1Aaj79c2NEnBiCuENKG3AVa3gp028DMef+z6z7nD6qZJUQSOmJ30mg+EL:uXbAatzEbuENKJVawp028Qemon2qZJQk
- TLSH T1A656338FE6B73596DEBFC67AEF113C12754FABCE2F29A58F5034841140821B546F8922
- MD5 SHA1 SHA512 SSDEEP TLSH
2 GBA/VisualBoyAdvance-M-WX.exe
- SHA256 1be4fe42ae7d4038e8c698bd29eb9debddb31fa3583a5dbdf5dd110653a6bdfe
- MD5 a48cb861ef3b8bbff1ec2252cdb58130
- SHA1 5ee42cfe92294e4a84409552ccefb81eb5b1e696
- SHA512 0104c48e1df4527c2116b02d3ce0afa752e59387ed19ff08d848791436a2528bfafb94f20826bdf91780f289c7ce945c105dcb199b725cf0a68b4e37482f70ce
- SSDEEP 49152:zyy5kTHYXxKglzBOeVIe5X5dmjkefWc2GaE/+mwzmc:zy+kTYXxKglFJy65wfz2GaE/+mpc
- TLSH T1F3A533CE79278469C1EF41F7FF26658B560F9CCE0B0E598A3552B2B35473BA0621834E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
13378688
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
11.0MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
299KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=221, productName=VS2013 build 21005, version=21005,
count=2, id=199, version=41118,
count=17, id=223, productName=VS2013 build 21005, version=21005,
count=21, id=224, productName=VS2013 build 21005, version=21005,
count=7, id=225, productName=VS2013 build 21005, version=21005,
count=4, id=203, version=65501,
count=1, id=207, version=65501,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1012, id=1, productName=Unmarked objects,
count=5, productName=Unmarked objects (old),
count=160, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=103, id=229, version=31101,
count=491, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
2 GBA/doc/DevInfo.txt
- SHA256 2730c665c001f4ebd7a0026dc6ec5a7fa7e851f18f093d324fdf8710eae30d8e
- MD5 a5c89a2843cc96268516ed6237c698cc
- SHA1 a8191d3415e4f234ca98f5c2d2ee036436c99f2f
- SHA512 9e44c88ea5adb5a54c1270eafa2756cc4b1c7d43ad6b5ddc5dde7a1e2f3f60972af72adbfd1f995190090ddbb2cf1e1c83fa6b7143a9791ff79a9130d0678269
- TLSH T14051D86E761D423267310AC2B19EE2D0F77B897A5F77542AB58D429C2312358233F29A
- MD5 SHA1 SHA512 TLSH
2 GBA/doc/License.txt
- SHA256 8722ad6b19af05b0393e98682d7f29abc75b71744defc7fdf6c8e4424a424fc2
- MD5 972e2d40088a83300dab0da653321953
- SHA1 beab663794748cad526e8f452a4d898b2ab06b28
- SHA512 cb095e2241def8c648bac1e37436ad89ca5e9ac6df93174240b3fba8de987d255f397dfe18694d7cb387572d543b7a61fa9eee8321bcbff373e2f2fd05caeebb
- TLSH T1E721404D580E83FA6C5121C3624BA4DAF36A47AA6B5F188231DEC20FA005E7146ED0A4
- MD5 SHA1 SHA512 TLSH
2 GBA/doc/ReadMe.MFC.txt
- SHA256 12acc7e8d983b36d92529d39986f524fabf9fda263a228d71efc3e2d45d2ce5a
- MD5 d3f40d9a9576954148d14a42107d3273
- SHA1 00ea116bdfe0e108966aeaceb96583e7f65a67b7
- SHA512 b2dea814138f52bc45e93c6a4af343e69fe24d8f2553904f47cb8bca5d6d6d5d2d0bd4b5786e07b5f16a4ca0a8a5e31cff9ed231066987fe97db709e7ede1a76
- SSDEEP 96:NL9c3jKtHxzyfHWRFNprlqGfKxOSPwScC8V8E/BsdumW/ZTOBK0ebWt8Y:h6KePWXlp7i98VfSOoea8Y
- TLSH T155C1B6DE6A1BD21209B141D3351FF25ABF654036D21B94F1384CE06CF302BEA52AA14D
- MD5 SHA1 SHA512 SSDEEP TLSH
2 GBA/doc/ReadMe.SDL.txt
- SHA256 d47ec233158bef2d1877d0137643a978a590f910d677aceb9626d6cf95e16ea8
- MD5 2f6fc220b1b2c60ccab78a99322569b0
- SHA1 f6b77ce2f7bdf3ab9b5fba448d6e80766b2907b0
- SHA512 b5a1abf7cab8dfe263b8ee626206e946ee78bb36203b695322c982ee7ddb782e212bb1f81420fb534d036e3e90ef16109f9fe357f5591e04b4ee0c0d57556f85
- SSDEEP 192:ttbNlO/5iAzFQcuSTtHNznmjP8fpJVPZ3vOLx9BgtS:ttbXO/5iwFQfSTRNzYFq4
- TLSH T13BF1F9A72A5407375E656263620FB0F1F72DA07C123A427070DDE01C23677A6A3BF5DA
- MD5 SHA1 SHA512 SSDEEP TLSH
2 GBA/doc/gpl.txt
- SHA256 b8b470dfb7fc09b59d9eba6dbd1dafae0ec84dc8094d8be2fcc9d16563976bb3
- MD5 6e5a0457b4015d9fb78fd560ed883885
- SHA1 be67df87c5fe62cb8a76bc5340a31f82a1f9bb98
- SHA512 79233c30f9f993916395548f75d4395d7c2c907b7a4f859eadaf8e73308130ca0600029a9e3b5d41e04e35655b4a02ccbbd2706c60c26a779ddc9b76da9821a1
- SSDEEP 384:tq2PmwERb6k/iAVX/dUY2ZpEGMOZ77o0UDPj:tzun1iYWrTXo0UDPj
- TLSH T1A082A41E770643F209D202916A4B68DEE32ED4B9723E11543459C1AD337FE3583BFA99
- MD5 SHA1 SHA512 SSDEEP TLSH
2 GBA/doc/ips.htm
- SHA256 7580b3a0cc04fc12dbac989f418263237a750197fd4ec54697fbff3952225567
- MD5 1022a705b6ae30e6a77112257c84b589
- SHA1 828d8c3cb4ac3101446c8773b18f51362179d7c3
- SHA512 ba3756b31ca82311aa1861713d49649a995811c70423ee3cd935991f1908203c7f57401e7595b4d11a1c3e50aaa25a545561f6fec3944e14b44150aa194bfd08
- SSDEEP 384:2n/AK4dGrCuAcVCJh+EwoEPhCd34h6/WexlOINiSEt:9hae4s/WexlOINiSEt
- TLSH T11142CE736388ADBA9A2300177336DAA85F6BF8765250260C783FD0F71BE142845677DB
- MD5 SHA1 SHA512 SSDEEP TLSH
2 GBA/roms/Super Mario Advance (USA, Europe).gba
- SHA256 d29dec02caacbf449e2a93c6042258b0669542e102eb0e6fd0eb92a5411e0244
- MD5 ff6b0c48065389b888c7a78731d4b58d
- SHA1 f071d45d8f5cb05b48d7d2b804c6cb6a79ad96fb
- SHA512 c75f096724203aabf9de1c4a71a737e9292f62ecc2c297545cee571037ca5dac3f50e88eaae84e57063c37bdd5078004c8b70d42beb7047dcb6b915756a12fb4
- SSDEEP 49152:upajupR54YBnNDxd6TQtPpZtt5qIEhMJg+0P7dyK5ckpXJp8q1WaYD7LLLLcLLL/:SmujTBNDxAs5t5yhug+0jdyK5cMvrfz
- TLSH T1D2169D1DB601C906D87A2DF08829D7F91250FC789E778AFB7283BF0E767B1D24911266
- MD5 SHA1 SHA512 SSDEEP TLSH
2 GBA/roms/Super Mario Advance - Super Mario USA + Mario Brothers (Japan).gba
- SHA256 623e456a9a6406c64bdb3d56504d882815368ec842c4cdfa3004627c2bbfb4b0
- MD5 c5240b871426f8bef985a540b9fcadfe
- SHA1 5ab5ade42ea0c5f255b3fbf00cdcc07b71ba20b8
- SHA512 80a9e6612c2af8c37c77a2d031e005818aac24d19d3d7e4cfcb57020957c51d00c0730a19356e4ec39b4b74aa2ce5013143cfbc3926169e0d29008518a4bbc08
- SSDEEP 49152:0vFIinYJSJBnNDxd6TQtPpZtt5qIEhMJg+0P7dyK5ckpXJm9m+44yDbLLLLcLLLx:Wew5JBNDxAs5t5yhug+0jdyK5cM0z
- TLSH T1B9169E19B301C906D43A2CF0C825D7E90210FD75AE778AFB7293BF5EBA772D149112A9
- MD5 SHA1 SHA512 SSDEEP TLSH
超级玛丽 GBA版.zip
- SHA256 31f42d3f9da3a1515893bfb2f45cbeb41da365f1b2970f802bf45d7a3388ec31
- MD5 0e8ab3ea0136fe0c8345118c44b19937
- SHA1 ea17e2d24844f6a77cdea1113aacc69dc986fb12
- SHA512 7617ba72d8a36a5fe8c593add6dc2ce3be188e0f3613e9642fb3003e638f83b1137a3a95dd830e7ef2ed1b601294b15fb1bf8ea5cebcf6cea979cd61a4a3c238
- SSDEEP 49152:IAWJSblYV1AajVJ2+jQAJbNd6Zs6nW8iCuENKGozQAVf04/qAwOsstr:IA0SJYV1Aaj79c2NEnBiCuENKG3AVf//
- TLSH T1A9B53387BA3621DEFADD4575EDA525D3F70D8ACF3B0C96ED2250A03150632F163AA213
- MD5 SHA1 SHA512 SSDEEP TLSH
GBA/VisualBoyAdvance-M-WX.exe
- SHA256 1be4fe42ae7d4038e8c698bd29eb9debddb31fa3583a5dbdf5dd110653a6bdfe
- MD5 a48cb861ef3b8bbff1ec2252cdb58130
- SHA1 5ee42cfe92294e4a84409552ccefb81eb5b1e696
- SHA512 0104c48e1df4527c2116b02d3ce0afa752e59387ed19ff08d848791436a2528bfafb94f20826bdf91780f289c7ce945c105dcb199b725cf0a68b4e37482f70ce
- SSDEEP 49152:zyy5kTHYXxKglzBOeVIe5X5dmjkefWc2GaE/+mwzmc:zy+kTYXxKglFJy65wfz2GaE/+mpc
- TLSH T1F3A533CE79278469C1EF41F7FF26658B560F9CCE0B0E598A3552B2B35473BA0621834E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
13378688
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
11.0MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
299KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=221, productName=VS2013 build 21005, version=21005,
count=2, id=199, version=41118,
count=17, id=223, productName=VS2013 build 21005, version=21005,
count=21, id=224, productName=VS2013 build 21005, version=21005,
count=7, id=225, productName=VS2013 build 21005, version=21005,
count=4, id=203, version=65501,
count=1, id=207, version=65501,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1012, id=1, productName=Unmarked objects,
count=5, productName=Unmarked objects (old),
count=160, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=103, id=229, version=31101,
count=491, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
GBA/doc/DevInfo.txt
- SHA256 2730c665c001f4ebd7a0026dc6ec5a7fa7e851f18f093d324fdf8710eae30d8e
- MD5 a5c89a2843cc96268516ed6237c698cc
- SHA1 a8191d3415e4f234ca98f5c2d2ee036436c99f2f
- SHA512 9e44c88ea5adb5a54c1270eafa2756cc4b1c7d43ad6b5ddc5dde7a1e2f3f60972af72adbfd1f995190090ddbb2cf1e1c83fa6b7143a9791ff79a9130d0678269
- TLSH T14051D86E761D423267310AC2B19EE2D0F77B897A5F77542AB58D429C2312358233F29A
- MD5 SHA1 SHA512 TLSH
GBA/doc/License.txt
- SHA256 8722ad6b19af05b0393e98682d7f29abc75b71744defc7fdf6c8e4424a424fc2
- MD5 972e2d40088a83300dab0da653321953
- SHA1 beab663794748cad526e8f452a4d898b2ab06b28
- SHA512 cb095e2241def8c648bac1e37436ad89ca5e9ac6df93174240b3fba8de987d255f397dfe18694d7cb387572d543b7a61fa9eee8321bcbff373e2f2fd05caeebb
- TLSH T1E721404D580E83FA6C5121C3624BA4DAF36A47AA6B5F188231DEC20FA005E7146ED0A4
- MD5 SHA1 SHA512 TLSH
GBA/doc/ReadMe.MFC.txt
- SHA256 12acc7e8d983b36d92529d39986f524fabf9fda263a228d71efc3e2d45d2ce5a
- MD5 d3f40d9a9576954148d14a42107d3273
- SHA1 00ea116bdfe0e108966aeaceb96583e7f65a67b7
- SHA512 b2dea814138f52bc45e93c6a4af343e69fe24d8f2553904f47cb8bca5d6d6d5d2d0bd4b5786e07b5f16a4ca0a8a5e31cff9ed231066987fe97db709e7ede1a76
- SSDEEP 96:NL9c3jKtHxzyfHWRFNprlqGfKxOSPwScC8V8E/BsdumW/ZTOBK0ebWt8Y:h6KePWXlp7i98VfSOoea8Y
- TLSH T155C1B6DE6A1BD21209B141D3351FF25ABF654036D21B94F1384CE06CF302BEA52AA14D
- MD5 SHA1 SHA512 SSDEEP TLSH
GBA/doc/ReadMe.SDL.txt
- SHA256 d47ec233158bef2d1877d0137643a978a590f910d677aceb9626d6cf95e16ea8
- MD5 2f6fc220b1b2c60ccab78a99322569b0
- SHA1 f6b77ce2f7bdf3ab9b5fba448d6e80766b2907b0
- SHA512 b5a1abf7cab8dfe263b8ee626206e946ee78bb36203b695322c982ee7ddb782e212bb1f81420fb534d036e3e90ef16109f9fe357f5591e04b4ee0c0d57556f85
- SSDEEP 192:ttbNlO/5iAzFQcuSTtHNznmjP8fpJVPZ3vOLx9BgtS:ttbXO/5iwFQfSTRNzYFq4
- TLSH T13BF1F9A72A5407375E656263620FB0F1F72DA07C123A427070DDE01C23677A6A3BF5DA
- MD5 SHA1 SHA512 SSDEEP TLSH
GBA/doc/gpl.txt
- SHA256 b8b470dfb7fc09b59d9eba6dbd1dafae0ec84dc8094d8be2fcc9d16563976bb3
- MD5 6e5a0457b4015d9fb78fd560ed883885
- SHA1 be67df87c5fe62cb8a76bc5340a31f82a1f9bb98
- SHA512 79233c30f9f993916395548f75d4395d7c2c907b7a4f859eadaf8e73308130ca0600029a9e3b5d41e04e35655b4a02ccbbd2706c60c26a779ddc9b76da9821a1
- SSDEEP 384:tq2PmwERb6k/iAVX/dUY2ZpEGMOZ77o0UDPj:tzun1iYWrTXo0UDPj
- TLSH T1A082A41E770643F209D202916A4B68DEE32ED4B9723E11543459C1AD337FE3583BFA99
- MD5 SHA1 SHA512 SSDEEP TLSH
GBA/doc/ips.htm
- SHA256 7580b3a0cc04fc12dbac989f418263237a750197fd4ec54697fbff3952225567
- MD5 1022a705b6ae30e6a77112257c84b589
- SHA1 828d8c3cb4ac3101446c8773b18f51362179d7c3
- SHA512 ba3756b31ca82311aa1861713d49649a995811c70423ee3cd935991f1908203c7f57401e7595b4d11a1c3e50aaa25a545561f6fec3944e14b44150aa194bfd08
- SSDEEP 384:2n/AK4dGrCuAcVCJh+EwoEPhCd34h6/WexlOINiSEt:9hae4s/WexlOINiSEt
- TLSH T11142CE736388ADBA9A2300177336DAA85F6BF8765250260C783FD0F71BE142845677DB
- MD5 SHA1 SHA512 SSDEEP TLSH
GBA/roms/Famicom Mini 01 - Super Mario Bros. (Japan) (En) (Rev 1).gba
- SHA256 5873d52f760825015e54e7a0f496efae39e1fed6848375904e8d77bb6c652096
- MD5 0c9accc7b0525d01c304b320f31fdd12
- SHA1 28a4f19e566a5a9ae3470045e99a3f03e786244e
- SHA512 4a40b1198d95250306a774d5f600929e4f4630b72acfdec320613af6ebb0d22d7e13632bdbcc19dd1fabbe7ac6bd37cd8210f827ac1bd76f54d73e26a9f7c66c
- SSDEEP 6144:aHAgZO13H1zDLC72XSHSH5HAgZO13H1zDLC72XSHSH5HAgZO13H1zDLC72XSHSHj:am3NCbHum3NCbHum3NCbHum3NCbH7
- TLSH T1CC16BFC9A5B25F72CD7D92790490F9B15F288D9D12A21D80781CF88F93FE2D98365B8C
- MD5 SHA1 SHA512 SSDEEP TLSH
超级玛丽2日版 GBA版.zip
- SHA256 030fc76714318120ae3ebf3ccdd28fc00f300271c9d5a638f1be90ccaab01076
- MD5 0c658dbbf7ba194fbb4f3a75460a952b
- SHA1 f8d8845645cb7090c9060652a4bbf662bbd7f18b
- SHA512 63d0ccc85f798b2027bffa812064b28cce3a1855b2412892e65553726dbe32923fb92fa76e4bc42aaaedaf3f9deac32f71c5548482d0b636eb8ec93bcd267434
- SSDEEP 98304:8A0SJYV1Aaj79c2NEnBiCuENKG3AVX1epq46z1WK3O6iOxeZ:8XbAatzEbuENKJVXQq46zP3XnO
- TLSH T14F363342B17B50EEF6FAC4FC2C9866E3182E0D6D4F5BB2C47949EA56C0311F59293E48
- MD5 SHA1 SHA512 SSDEEP TLSH
2հ GBA/VisualBoyAdvance-M-WX.exe
- SHA256 1be4fe42ae7d4038e8c698bd29eb9debddb31fa3583a5dbdf5dd110653a6bdfe
- MD5 a48cb861ef3b8bbff1ec2252cdb58130
- SHA1 5ee42cfe92294e4a84409552ccefb81eb5b1e696
- SHA512 0104c48e1df4527c2116b02d3ce0afa752e59387ed19ff08d848791436a2528bfafb94f20826bdf91780f289c7ce945c105dcb199b725cf0a68b4e37482f70ce
- SSDEEP 49152:zyy5kTHYXxKglzBOeVIe5X5dmjkefWc2GaE/+mwzmc:zy+kTYXxKglFJy65wfz2GaE/+mpc
- TLSH T1F3A533CE79278469C1EF41F7FF26658B560F9CCE0B0E598A3552B2B35473BA0621834E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
13378688
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
11.0MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
299KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=221, productName=VS2013 build 21005, version=21005,
count=2, id=199, version=41118,
count=17, id=223, productName=VS2013 build 21005, version=21005,
count=21, id=224, productName=VS2013 build 21005, version=21005,
count=7, id=225, productName=VS2013 build 21005, version=21005,
count=4, id=203, version=65501,
count=1, id=207, version=65501,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1012, id=1, productName=Unmarked objects,
count=5, productName=Unmarked objects (old),
count=160, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=103, id=229, version=31101,
count=491, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
2հ GBA/doc/DevInfo.txt
- SHA256 2730c665c001f4ebd7a0026dc6ec5a7fa7e851f18f093d324fdf8710eae30d8e
- MD5 a5c89a2843cc96268516ed6237c698cc
- SHA1 a8191d3415e4f234ca98f5c2d2ee036436c99f2f
- SHA512 9e44c88ea5adb5a54c1270eafa2756cc4b1c7d43ad6b5ddc5dde7a1e2f3f60972af72adbfd1f995190090ddbb2cf1e1c83fa6b7143a9791ff79a9130d0678269
- TLSH T14051D86E761D423267310AC2B19EE2D0F77B897A5F77542AB58D429C2312358233F29A
- MD5 SHA1 SHA512 TLSH
2հ GBA/doc/License.txt
- SHA256 8722ad6b19af05b0393e98682d7f29abc75b71744defc7fdf6c8e4424a424fc2
- MD5 972e2d40088a83300dab0da653321953
- SHA1 beab663794748cad526e8f452a4d898b2ab06b28
- SHA512 cb095e2241def8c648bac1e37436ad89ca5e9ac6df93174240b3fba8de987d255f397dfe18694d7cb387572d543b7a61fa9eee8321bcbff373e2f2fd05caeebb
- TLSH T1E721404D580E83FA6C5121C3624BA4DAF36A47AA6B5F188231DEC20FA005E7146ED0A4
- MD5 SHA1 SHA512 TLSH
2հ GBA/doc/ReadMe.MFC.txt
- SHA256 12acc7e8d983b36d92529d39986f524fabf9fda263a228d71efc3e2d45d2ce5a
- MD5 d3f40d9a9576954148d14a42107d3273
- SHA1 00ea116bdfe0e108966aeaceb96583e7f65a67b7
- SHA512 b2dea814138f52bc45e93c6a4af343e69fe24d8f2553904f47cb8bca5d6d6d5d2d0bd4b5786e07b5f16a4ca0a8a5e31cff9ed231066987fe97db709e7ede1a76
- SSDEEP 96:NL9c3jKtHxzyfHWRFNprlqGfKxOSPwScC8V8E/BsdumW/ZTOBK0ebWt8Y:h6KePWXlp7i98VfSOoea8Y
- TLSH T155C1B6DE6A1BD21209B141D3351FF25ABF654036D21B94F1384CE06CF302BEA52AA14D
- MD5 SHA1 SHA512 SSDEEP TLSH
2հ GBA/doc/ReadMe.SDL.txt
- SHA256 d47ec233158bef2d1877d0137643a978a590f910d677aceb9626d6cf95e16ea8
- MD5 2f6fc220b1b2c60ccab78a99322569b0
- SHA1 f6b77ce2f7bdf3ab9b5fba448d6e80766b2907b0
- SHA512 b5a1abf7cab8dfe263b8ee626206e946ee78bb36203b695322c982ee7ddb782e212bb1f81420fb534d036e3e90ef16109f9fe357f5591e04b4ee0c0d57556f85
- SSDEEP 192:ttbNlO/5iAzFQcuSTtHNznmjP8fpJVPZ3vOLx9BgtS:ttbXO/5iwFQfSTRNzYFq4
- TLSH T13BF1F9A72A5407375E656263620FB0F1F72DA07C123A427070DDE01C23677A6A3BF5DA
- MD5 SHA1 SHA512 SSDEEP TLSH
2հ GBA/doc/gpl.txt
- SHA256 b8b470dfb7fc09b59d9eba6dbd1dafae0ec84dc8094d8be2fcc9d16563976bb3
- MD5 6e5a0457b4015d9fb78fd560ed883885
- SHA1 be67df87c5fe62cb8a76bc5340a31f82a1f9bb98
- SHA512 79233c30f9f993916395548f75d4395d7c2c907b7a4f859eadaf8e73308130ca0600029a9e3b5d41e04e35655b4a02ccbbd2706c60c26a779ddc9b76da9821a1
- SSDEEP 384:tq2PmwERb6k/iAVX/dUY2ZpEGMOZ77o0UDPj:tzun1iYWrTXo0UDPj
- TLSH T1A082A41E770643F209D202916A4B68DEE32ED4B9723E11543459C1AD337FE3583BFA99
- MD5 SHA1 SHA512 SSDEEP TLSH
2հ GBA/doc/ips.htm
- SHA256 7580b3a0cc04fc12dbac989f418263237a750197fd4ec54697fbff3952225567
- MD5 1022a705b6ae30e6a77112257c84b589
- SHA1 828d8c3cb4ac3101446c8773b18f51362179d7c3
- SHA512 ba3756b31ca82311aa1861713d49649a995811c70423ee3cd935991f1908203c7f57401e7595b4d11a1c3e50aaa25a545561f6fec3944e14b44150aa194bfd08
- SSDEEP 384:2n/AK4dGrCuAcVCJh+EwoEPhCd34h6/WexlOINiSEt:9hae4s/WexlOINiSEt
- TLSH T11142CE736388ADBA9A2300177336DAA85F6BF8765250260C783FD0F71BE142845677DB
- MD5 SHA1 SHA512 SSDEEP TLSH
2հ GBA/roms/Famicom Mini 21 - Super Mario Bros. 2 (Japan).gba
- SHA256 18e46c415016134bb14428aa877f410ad446ae9fd6606744bb5c114c7d82fed5
- MD5 5c46126c6a429a3704f15139dadb19be
- SHA1 3455d771f2e974e1ac55543af741ae7fded0312a
- SHA512 36e7ad37ae5129eaf63e457a6e2633051e5d1ef82637ab335308f62c68222a99227fe3dced2e4c040444973bd24f439fe75a35dae7d61c50fb21b48b53249cee
- SSDEEP 49152:1nz/VkRxp5nz/VkRxp5nz/VkRxp5nz/VkRxpb:1TVkRxp5TVkRxp5TVkRxp5TVkRxpb
- TLSH T13C16CF22F765ED46D9242B38146C4BE83F31FE9C6724C34F25697E37AE6A2C34C65224
- MD5 SHA1 SHA512 SSDEEP TLSH
超级马里奥1+2日版.zip
- SHA256 c56b1add3fa9869784fd556ff05d88f4a7f9d5c165c55824d920389eedff4496
- MD5 69c2ce223faafb112977d2e42cd4317d
- SHA1 a0200788f2dd71b6acb72649c178ec0c6143b605
- SHA512 5e0c9fc05f1ce221eaef353a72cccc2b53977f30382dc29669037dd585daf53e98cb22408924eb36ec64f72fba4eea6335125a1f6f097f34c74a5e17ac37e634
- SSDEEP 24576:zjj85GCF5Tj1/HJLmVA2iPW89WqUL4lDPSggsUyigFBU1wwhqqaH:zjYGCnTjmVAPukl+zjyPq1ww8
- TLSH T1184533068586D6BCFD99BF7E6162E1733E54A134F138649D6AB334B8D0BB0F9230921D
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/7zxa.dll
- IMPHASH dd1fcfec6ca1a2b0bfb46d7f425f87a4
- SHA256 6c73b4bf32fed9f7f4f90f89cdf23c17a85ba94b9d5c065d473b70de01b94cac
- MD5 78eef11b0e83c52bf767aaa428bd07ca
- SHA1 ad761c61e7c9b6bdfc889912c178b649672c9c54
- SHA512 f2ae406e3bf9c0fa6072bde6ab90cf3daf80f7148c9b88f4deee899dfe2cb0ae64e4c26264c31c2f1c316075feefae28aa065046331d50fff2e55e1a938e57ec
- SSDEEP 3072:95XjR6yKXymKAZm5QJSmZ+Z7QS8GQhX2MlChZC:95jRBYWIHMmZ07qGB
- TLSH T17EF39F4179A5C075D24F3232E559FBB3A3B9E7448E6844836BE0DD5E2E33946C23AB0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
103896
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
user32
CharUpperW
CharUpperA
oleaut32
SysFreeString
SysAllocStringByteLen
VariantClear
SysAllocString
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
VirtualAlloc
VirtualFree
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CloseHandle
WriteFile
CreateEventA
LeaveCriticalSection
EnterCriticalSection
ResetEvent
SetEvent
WaitForSingleObject
WaitForMultipleObjects
CreateThread
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
GetSystemInfo
HeapAlloc
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
ExitProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
LCMapStringA
CreateObject
GetHandlerProperty
Name
.text
Size
120KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=14, version=7299,
count=140, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=65, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=64, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
1+2հ/Disksys.rom
- SHA256 99c18490ed9002d9c6d999b9d8d15be5c051bdfa7cc7e73318053c9a994b0178
- MD5 ca30b50f880eb660a320674ed365ef7a
- SHA1 57fe1bdee955bb48d357e463ccbf129496930b62
- SHA512 d7692af63b107b7e79ccf0d90e5ff7e70325e3196a41b6d4d83aaf8ffa5ca976351f8f31bcb1d497c02f7c699e94e77c27a0813f72aa96b576685acaae5bdad5
- SSDEEP 96:azz5m9OH6w2NwvCglxzhCvf8J8dUyXrTnse+XnqClT1vqr2M56XbIbXiJonQwBRH:4W+N2MlbdEnz6nrbqyMw0i6cv+3
- TLSH T11AF13C63FE0D65C4E2548C32BFAA628576722E1234D0C88E39F6FF9B49F03D485A1965
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/kailleraclient.dll
- SHA256 35a8f5f6b858e6af5dc34eec2bbe397ea230c09eaffbb976c42f4b096cfc2551
- MD5 c3f8a9c4cfd257f22ba3a0f2d9e23ff0
- SHA1 ad9be4eb84f31b23a6f1ba7cc490940bdde29d64
- SHA512 31f77be2487ac691f09bd5e3463c2ed6b00f1f75b3ac6b38becb9377dacb00b3c1aae2de70961212af04e6b0e6f26ab716dead2fb7d87b9c7639ed0e2d27dd99
- SSDEEP 768:2viLjbKGY60H17PJc/TG0BXOZDRm55lEv1Lk1:oK/Oh17PeqAgDRmjym1
- TLSH T1DDE2D182B29818C4EEE1C17551EF5AC40A39F81391AF9B2657E0445F7CBBD62FD0B358
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88576
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_kailleraChatSend@4
_kailleraEndGame@0
_kailleraGetVersion@4
_kailleraInit@0
_kailleraModifyPlayValues@8
_kailleraSelectServerDialog@4
_kailleraSetInfos@4
_kailleraShutdown@0
Name
UPX0
Size
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
27KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=12, version=7291,
count=2, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, productName=Unmarked objects (old),
count=108, id=1, productName=Unmarked objects,
count=13, id=19, version=8034,
count=15, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
out.upx
- SHA256 7c47c2c8a836285d5d58b50b3b8f109c849e130c1134cbc8eda2996dc70c23fd
- MD5 d14b77dce40d74dd79d00be92fdb6678
- SHA1 2593182742e25fca8c0410522107ed5f29c1c5c2
- SHA512 7836946dcce8e2f16b4f98b1f24dd7e806e2cc2fe2826a9782a4522a34b5be51f5fbe4716f51f454ebccd9e2c9f42030f591506fd6047cfa7738f34cc4adddf4
- SSDEEP 1536:wAtzMG+p78mPwxvw3o2sPKDLPgC9KgG15:tMh0YIrX
- TLSH T103632A2393C1C0F1DA1540745887A7BA99305A62DAB24AD74F73EF7ACC336A3FA35605
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51339
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=12, version=7291,
count=2, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, productName=Unmarked objects (old),
count=108, id=1, productName=Unmarked objects,
count=13, id=19, version=8034,
count=15, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
1+2հ/language/Chinese.nlg
- SHA256 3e6e4bf48091171a6e84c399dedd0533c7508c7dda6049e4e2228564121fd3e3
- MD5 c28c6a17174b2d9d57a55147797befa3
- SHA1 a35bf5cb0d5e4fa381a9a38835de5684f60c274a
- SHA512 9e1efa12478f7a13d1d933cf8f346e2a8342e95574addfc20300d69a8d5f9d09fdb050c6a14ed756c6e834881b6503d69ea0ce87849c1236cf5333cfda05510f
- SSDEEP 384:8EndcbGEkat/83hNvZbKxWHWVLZ5XZg7g5i/N4xesjyjAHfO5LGhhizWI7ut2Rdg:8Endcbdn8hwpKWxeum5LQI4Xjj
- TLSH T15E23611E8391DF65C0B282FC45F387D61A31A944FA09CF07EF41B64F64B6855AE22F29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
1+2հ/nestopia.exe
- IMPHASH e2ecc1d8e24a9bfcd100f1a2f85dc5a3
- SHA256 7699722451022d473ef4f0ff84f80165c2da15918b20056a023d87e3a6240f61
- MD5 97ad56a44b4b6c81ec4895e080a44716
- SHA1 e571a428bef389910cf3f10191b44700b8855d5f
- SHA512 7ca76849fcd5e585896f0aa43f27dafdd313f00c6fe196375397b8a272007f8a4bc92679a99a12fa3e2027242a973e26649bd6995af65103b17f96cd4257a3c7
- SSDEEP 24576:3/x7R+TZkRWyWYbVd5DQBkGbR+KRiMVJcM44sj3gr7gjDs1zWTVZu2bMzwzH7bCr:CTiR0YbvhQZTJcMmkgc1zWTGNzwcF
- TLSH T12FA5D042F3DBC17BC4131BB40A1E2B7571BAAE5A0765C6E767843F0EAEB07D29634181
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1018276
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapSize
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetACP
GetOEMCP
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RaiseException
InterlockedExchange
LoadLibraryA
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCommandLineA
CreateThread
ResumeThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
HeapFree
GetUserDefaultLangID
VirtualQuery
UnmapViewOfFile
OutputDebugStringA
IsProcessorFeaturePresent
CompareStringA
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
FileTimeToSystemTime
GetCommandLineW
SystemTimeToTzSpecificLocalTime
SetEvent
GetSystemInfo
LockResource
SizeofResource
LoadResource
GlobalUnlock
GlobalLock
ReadFile
WriteFile
SetEndOfFile
SetFilePointer
GetFileSize
CloseHandle
FlushFileBuffers
WaitForSingleObject
SetThreadPriority
GetCurrentThread
GetTickCount
FindClose
GetLastError
FreeLibrary
GetCurrentThreadId
Sleep
user32
GetWindow
GetSubMenu
GetClientRect
GetTopWindow
ReleaseDC
GetDC
CallNextHookEx
GetAsyncKeyState
SetCursor
GetDlgItem
GetDlgCtrlID
GetMenuBarInfo
DeleteMenu
CheckMenuItem
GetMenu
CheckMenuRadioItem
EnableMenuItem
GetMenuState
SetMenu
ShowScrollBar
DrawMenuBar
DestroyAcceleratorTable
SetMenuInfo
GetMenuItemCount
TranslateMessage
GetForegroundWindow
IsChild
InvalidateRect
SendInput
DestroyMenu
DestroyCursor
CloseClipboard
OpenClipboard
GetSysColorBrush
EnumThreadWindows
GetCursorPos
GetKeyState
AdjustWindowRectEx
UnhookWindowsHookEx
GetActiveWindow
LockWindowUpdate
ShowWindow
IsWindowEnabled
PostQuitMessage
SetTimer
KillTimer
GetWindowRect
EndDialog
DestroyWindow
ClientToScreen
GetWindowPlacement
GetWindowTextLengthA
SetFocus
GetParent
GetWindowThreadProcessId
SetWindowPos
SetWindowPlacement
ScreenToClient
GetSystemMetrics
IsWindowVisible
IsIconic
SetWindowTextA
IsZoomed
SetForegroundWindow
ValidateRect
GetFocus
GetWindowTextA
gdi32
SetDIBitsToDevice
Rectangle
SelectObject
GetDeviceCaps
CreateSolidBrush
CreatePen
GetObjectA
GetTextMetricsA
GetGlyphOutlineA
CreateDIBSection
DeleteDC
GetCharacterPlacementA
SetTextColor
SetBkColor
SetBkMode
GetFontLanguageInfo
CreateFontIndirectA
SetTextAlign
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
DeleteObject
GetStockObject
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
shell32
DragQueryPoint
SHGetMalloc
DragFinish
ole32
CoInitializeEx
CoUninitialize
oleaut32
VariantClear
comctl32
ImageList_Destroy
InitCommonControlsEx
ImageList_Create
ImageList_AddMasked
avifil32
AVIFileExit
AVIStreamWrite
AVIFileRelease
AVIStreamRelease
AVIFileInit
AVIFileCreateStreamW
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileOpenW
msvfw32
ICCompressorChoose
ICCompressorFree
shlwapi
StrStrIW
StrTrimW
StrCmpW
StrIsIntlEqualW
PathCompactPathExW
SHDeleteKeyW
StrStrW
winmm
mmioSeek
timeGetTime
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
mmioDescend
mmioSetInfo
mmioAscend
mmioAdvance
mmioClose
mmioCreateChunk
mmioWrite
mmioRead
mmioGetInfo
d3d9
Direct3DCreate9
dinput8
DirectInput8Create
dsound
ord11
ord3
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
245KB
Virtual Size
245KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
56KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
304KB
Virtual Size
304KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=4, id=25, version=9210,
count=2, id=28, version=9178,
count=6, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=123, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=12, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=18, version=8444,
count=1, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=251, id=1, productName=Unmarked objects,
count=96, id=105, version=2067,
count=112, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=69, id=110, productName=VS2005 build 50727, version=50727,
count=58, id=125, productName=VS2005 build 50727, version=50727,
count=170, id=109, productName=VS2005 build 50727, version=50727,
count=405, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
1+2հ/nestopia.log
- SHA256 94f6444e003182420adb0a914874d6330a7ecfeb21a61b26db54ea9c25a74812
- MD5 efe4ec4917fa19ae2e1ed46caf15b4f1
- SHA1 1841c2f9b25b4c0350a6885742858f0abec61694
- SHA512 eda1e2e602975c5c8218762246573c4a31104b538d276a02af407f22224be1f2af0e9f75a4edc02ccb47ea15776614effda7c0e77d7d519b33a74bedf13931c5
- SSDEEP 48:vKjJGnOtPeOMO5+eM/UVA3bROFiKFnOthuzSw/UsP9XFNvd8fXI9ayFMfzQTLWTN:yjVPephV3bqiKGhaMQb9ayFMf8EZ7X
- TLSH T196F1D117AAEE010CE6F29F075AF702A7853679516E3CD94D3181CB5E0CA3F409972FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/nestopia.xml
- SHA256 2298b30251232570e4d67d624e57e9b8369f854b297ce5c245604c1adbaa5057
- MD5 572d6db7a1e9b2573d66577a49e70877
- SHA1 049b0a9c033c35e49bc6c4a8216318d5f09b7f89
- SHA512 8626e0ebc5ceeb27f7fed1f21a1718992d58519f9c5158aa599148bd20d5796bfc3f562afdfe4f8acc2b02e0bffb8bbfab50989ada59d256c39006710acbe609
- SSDEEP 192:IbSvzrWdtWzxmh9bp9blU/rSea++vMCG7zUcg7zUxPGjsPN6GpRhtsRnC:Ibl81U3W/rPa++ARr
- TLSH T1DE9264B3D5C4941A0A37C54F8911A552FEBBC4C3636A2444B1CDC3D7AF348678ADB8B2
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/roms/Super Mario Bros. (Japan, USA).nes
- SHA256 f61548fdf1670cffefcc4f0b7bdcdd9eaba0c226e3b74f8666071496988248de
- MD5 811b027eaf99c2def7b933c5208636de
- SHA1 ea343f4e445a9050d4b4fbac2c77d0693b1d0922
- SHA512 c2eb66533f2bfec61f15793884777b1c711aebd74533cd33bd5774112a0381234583b9aa05588225282fd3071a42a7a4da27bde485d21fc0b45b2b2ca2d5461f
- SSDEEP 768:OdceGPIqfjTiAfHiL8UgXhlgv3SS+Wl1KcH1irR0wq:QGPxbJiL8RlgyWl1KcHS0d
- TLSH T15003CF00F419BC09D895513606EE9CEA04252E4D74A689933B7CFFEA13B7798B243F66
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/roms/Super Mario Brothers 2 (Japan).fds
- SHA256 ff8afb9ae6b705b4e51dbcb193dcebadf4c049800a71003d3a45052648e52eda
- MD5 7f38210a8a2befb8d347523b4ff6ae7c
- SHA1 20e50128742162ee47561db9e82b2836399c880c
- SHA512 9786fbcb1d473df056c92ac90e33e46a96a176feab5cc2b6e982010f5b3bf8efff7fd97b87a1f8048be6218e36e11a4d5ef225ad3c60b2fcaf59bea8414a39a3
- SSDEEP 768:LUimE/+DYKjT4ZUwwQn+z6/XQhb7JPqlzfvcB0rSXElDwHzRexkvdDCq9Zm:h/q+Uj+r4hXJyFvElXEB5kv5H
- TLSH T18D53D025F02DBD4AE451993145AE4CFA00153E4D25F68A932F3CFBAD53BBBE8A542F10
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/schemadb.xsd
- SHA256 fa28165ffc093d99f6ce427e62865f8d85caef5ff016b756ac2e47e7a00cccfa
- MD5 0a30754ecae36b6ad6af8fa0aca0ebf5
- SHA1 bdd64f474d82fde4bed5dd424e716f1e07bbd3bf
- SHA512 22410b413412713fddfb8946e29886b1117e56e45e7c89590f1634e1bf87b466c9b9235e01aeed46e036c6aa992ee342fc60023938eeb2fbc12ff411159e02b4
- SSDEEP 768:JlfEZh/p2U3FMJR+s5o3RuWFFZcy+bng6RthLA3FJpqMX1LGzd0yfBCvIZiO7oIN:JlfEnp21ckQnp2mD2AZ+PUu
- TLSH T125E24CD828D0CD2516B3293E519324ACDE3958E302609D9CF9DC95B3EF3286867BB177
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/schemaromset.xsd
- SHA256 82598d97efb1890218b36cd21de36b5dfaac9f6d8baddc8dc52046edb0d2fc09
- MD5 8c468de0583b3ac02024163d48f523b9
- SHA1 3376c94bb779f43b0fc62eaabd600187ed9538e8
- SHA512 f1cce16ea5d8f57a4ab5e38b297de758312d42bb772188f3bdfcef19f6bc4a96ce403d1dc30a0e1bd66a4358322b86940645fba3dbb28a7bf3df15c9896d94b1
- SSDEEP 768:5lfEZh/p203FMJR+s5o3RuWFFZcy+bng6RthLA3FJpqMX1LGzd0yfBCvIZiO7oIW:5lfEnp2V0kQup2mD2AZ+PUu
- TLSH T1BCE24CD828D0CD2516B3293E519324ACDE3958E302609D9CF9DC95B3EF3286867BB177
- MD5 SHA1 SHA512 SSDEEP TLSH
1+2հ/unrar.dll
- IMPHASH 244d2f9772f4886a651db44514a2a29b
- SHA256 db4c1d956c6350ba8f7899ba046f71d135b6f7b73ed0b5ec237eea2060a3277e
- MD5 eea6103d96b51e41c058ad2676cdf53e
- SHA1 5b189298039b67df653c62db5d5c490472ccbef7
- SHA512 c9ad835d006f3b27343b2b2de832ec4c638bb7b37609dc3cfd92eb80e6f4f1a0f8f3de19c40efb675bcdec1c2ea84558cfc559475ca5d631bf91c04b35dbb132
- SSDEEP 3072:lwIKRLhMEH4W1/Ybb1sU0lIyxE16QCL7QcomrpIjiHvHpqPQxhXypCO:aIiLhME/gbW7/K16QCxHpqYxhXy
- TLSH T1B1F38D26FAC2C1B6D04107705CBEEA73F13E7F951B51929773E84F2E6CB2290AA05167
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
kernel32
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
DeviceIoControl
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsDBCSLeadByte
LCMapStringA
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
user32
CharLowerA
CharLowerW
CharToOemA
CharToOemBuffA
CharUpperA
CharUpperW
EnumThreadWindows
MessageBoxA
OemToCharA
OemToCharBuffA
wsprintfA
RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc
___CPPdebugHook
Name
.text
Size
133KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
超级马里奥2美版.zip
- SHA256 96d5c50d2df80784dfa4c3657e7b35e9bea8bc862c412e7a14589eac8e99002d
- MD5 331b82ef9b9e51d5126f711ce4a0fe1c
- SHA1 7b5941a6df4575e26639a3230ff11f038d0048ef
- SHA512 583cc40e56fbfc7193403a74adab2c6bee61762107b2a6993fc09c6ce5f8f1908080e8cffd1c3dbba98ed3db595741771835d82e808908809c07a75c67b2e50a
- SSDEEP 24576:Kjj85ZCV7Tj1/HJLmVA2iPW89WqUL4lDPSggsUyigFBU1wwhstkQxdu8eAkqa+:KjYZCFTjmVAPukl+zjyPq1wwyj33/
- TLSH T1526533499AC6D16CEA7ABF3D61B0A5723D94A220E834F8DD6F63B8F4C0570B5731912C
- MD5 SHA1 SHA512 SSDEEP TLSH