stinky_auto_validate.zip
- SHA256 91309d99a9f9b3f9caf5243f650a54d365f5f33a8ae7dc2e3e3e19d762b1ffbb
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
stinky_auto/Slinky.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
stinky_auto/Stinky.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
stinky_auto/archive/lib_win.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
stinky_auto/archive/loader3_win.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
stinky_auto/nacre_7f2c.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
stinky_auto/original/nacre_7f2c.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
General
- Target stinky_auto_validate.zip
- Size 88.1MB
- Sample260901-zf2n6aar21
- SHA256 91309d99a9f9b3f9caf5243f650a54d365f5f33a8ae7dc2e3e3e19d762b1ffbb
- MD5 d953e04823c367a130134bdbe32982ef
- SHA1 eb66c53bf029cc94856939fa0c847482f5b50fb4
- SHA512 b696f6ce13e50b614b2a26c4cf8f3ef304a9f489b9b6c143f8c7489173bdc2488d95aa4d00e8e81c73763ff80f703283fb71d81311b9f7091fdd4a26185ece3d
- SSDEEP 1572864:PJjlrPxrmhBZi8QH5XKii/qVXdBfVU23fqIzbaYsPPvDWHlOEPzZb1gjYlmmG:PJjVPIhBZi8EKTSXPfSwfhbaYsPPvqFC
- TLSH T1CB1833DFFD93606C0EE520AC6251D6F7026C699DCC7C21F5BCF1D28E90D847E9289AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/stinky_auto/Slinky.exe - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/stinky_auto/Stinky.exe unpack001/stinky_auto/nacre_7f2c.dll unpack001/stinky_auto/original/nacre_7f2c.dll - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/stinky_auto/archive/lib_win unpack001/stinky_auto/archive/loader3_win
File Explorer
-
stinky_auto_validate.zip.zip 88.1MB
-
stinky_auto/AUTO_VALIDATE_README.txt524B
-
stinky_auto/README.txt249B
-
stinky_auto/Slinky.exe.exe 6.0MB
-
stinky_auto/Stinky.exe.exe 25.4MB
-
stinky_auto/archive/lib_win.dll 21.6MB
-
stinky_auto/archive/lib_win.sha25665B
-
stinky_auto/archive/lib_win.sig71B
-
stinky_auto/archive/loader3_win.exe 6.0MB
-
stinky_auto/archive/loader3_win.sha25682B
-
stinky_auto/archive/loader3_win.sig72B
-
stinky_auto/nacre_7f2c.dll.dll 32.6MB
-
stinky_auto/original/nacre_7f2c.dll.dll 32.6MB
stinky_auto/AUTO_VALIDATE_README.txt
- SHA256 e6840bec2b413b0adc078b2af87a32f9fe2d86bc076b09b13feded67f018d7d3
- MD5 3ab0ad0f9d348e877ca185304dbcdc37
- SHA1 1d003187aeadea5af02b603dc5f6743ff314df6b
- SHA512 20fda2ad4970b112b7b825556552a555ae924df815919be85e9648a37a15474bf6d741dd64daf96da61972b125e18b7fc777c74d98ce279313c79143c63cdd04
- TLSH T1C8F0059663C802F306404D5B550FFFC7E79784B00596488456EDC2DC0152A6093FB59F
- MD5 SHA1 SHA512 TLSH
stinky_auto/README.txt
- SHA256 ec09defc60c650e67e65f5297376df3e5b7953ef5ae3d891c0383a35c43bc145
- MD5 cdf3c0aedc9f3076405c7467cf295b98
- SHA1 72c29267de8bb1bca1405ee8218d2136effd247d
- SHA512 ec3936d16c1353aa615c437f13228333635589f7dd51bbadb9bf7e8179fdc42d6ee9ccb22b730d5d4cbf497e222e06d61d4a428cc5282900867f25b1fe4f5ffd
- TLSH T176D09713EB0353354BF316AE9B6D713EE70608A135278A42282AC31C138052CF0A1AC2
- MD5 SHA1 SHA512 TLSH
stinky_auto/Slinky.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 3d68c709fb63cc90a01d3aaf2db427edf5c39cbfe42a0499090ce7c3ca67827d
- MD5 029a0878d7b088c182fcd87adc7cf9f4
- SHA1 7f9312aa81b3fb6d5c416907ffecb0b92a11831a
- SHA512 f3e5c35c7934c71417614397975cfe31b90950e873e762056c8a8beff44a9c4de3586b8feba7313aecab370aa7052fc0408bdb035643a85bfe123d3fbd637d5d
- SSDEEP 49152:PsAOFu7Rot3mMIKom+C8eq8+Ns7LlnU09HS4qjtkZOUMjO10o/aufKiK9KvRp5Ep:PpEg/NClnl9yNSLthbJEp
- TLSH T18D564A03ECA545E5C0AAE23589679212BB717C885B3627D32B90F7783F72BD06E79350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
16:1e:00:0d:9d:67:74:58:96:c6:d8:54:a3:0b:b5:60:6c:df:03:58:24:83:36:44:b6:a4:7e:79:75:85:7f:93
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Chains
Jan 9, 2026
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Subject
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Serial Number
56:10:62:e9:37:d3:6d:6a:78:e7:bf:69:33:fa:31:b0
Issuer
CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2026
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
1
Major OS version
6
Entry point
506976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
338KB
Virtual Size
681KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
stinky_auto/Stinky.exe
- IMPHASH 6392b2334bf654f33ae42325e5e9f3ed
- SHA256 c6241de58e7276fbd29c9753ce4560c5bdfc26c3dcc88a4beba017ed7dde86ce
- MD5 d3c325b393ec58aaf966badf340eb780
- SHA1 d4473f0ce2b9b4a9f5e5bf77d8c340bd2055dc1e
- SHA512 4398d9919f0a13732afaddcc8e4452c41d19d8900a761e005eefd0891bffb12bf8912f02383267de1619fc03f2cfe7e17d5add41ba760495fd2763540607979d
- SSDEEP 393216:H257/wJb3rletl256vWXghePp0k7PNYgwOfa4M+0stQzyTVISr:W6VC256uLpz713ztKypFr
- TLSH T1C34723C675E992ADC442C539D6861BFAE5CD38858DBE842BBFCB44023A31C54CDF2A35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
33754176
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
OpenProcessToken
bcrypt
BCryptGenRandom
crypt32
CertOpenSystemStoreW
shell32
ShellExecuteW
user32
GetProcessWindowStation
userenv
GetUserProfileDirectoryW
winhttp
WinHttpCloseHandle
wintrust
WTHelperGetProvSignerFromChain
ws2_32
htonl
kernel32
SetEndOfFile
Name
.text
Size
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.q7m20
Size
Virtual Size
15.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.q7m21
Size
512B
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.q7m22
Size
25.4MB
Virtual Size
25.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
stinky_auto/archive/lib_win
- IMPHASH 6d0922214347bf084e9acc7ca9a166e9
- SHA256 be03bbecbf14b03458de36c8b3848c1b7325ad0aeb6a61b6e0f9206fc40b4af7
- MD5 cca3b536cbdf30a01b6f56faaaba4867
- SHA1 8942402a925183da44efce556f844374677a7fa5
- SHA512 862dabf12ceda043b66450bbfa2ec778c9281e303132c57c53b68dd56e24f6f4c9a9ebf6bce973db0410b2e42593eaeecac86aebd66db51a351c477ff3c9f632
- SSDEEP 393216:t1hMVBgt9zH4/o4PXARSt6DXUIbj22gUIEO2r31Zkhbq8PH42ZhZ02/qgmi:t1hMVBgzH4/9QRSIDtbq2JISZWuMPTZ1
- TLSH T1E13722D538D042ACC88BC531E68E2BEEF0D678495DB9681BBFC709012A31D56DCE6937
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
2e:96:f2:56:66:0a:27:4b:f1:35:dd:1e:5b:44:09:31:77:b6:8a:9a:68:35:8a:bf:0c:59:a4:47:1b:6e:59:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Chains
Jul 26, 2026
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Subject
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Serial Number
56:10:62:e9:37:d3:6d:6a:78:e7:bf:69:33:fa:31:b0
Issuer
CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2026
Subject
CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 18, 2025 - Nov 12, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
6
Entry point
39189703
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
AcquireSRWLockExclusive
user32
CallWindowProcA
shell32
ShellExecuteW
advapi32
CryptAcquireContextA
api-ms-win-crt-environment-l1-1-0
_wgetenv
api-ms-win-crt-heap-l1-1-0
calloc
api-ms-win-crt-math-l1-1-0
acos
api-ms-win-crt-runtime-l1-1-0
_errno
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
_strdup
api-ms-win-crt-time-l1-1-0
_gmtime64_s
api-ms-win-crt-utility-l1-1-0
bsearch
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-convert-l1-1-0
mbstowcs_s
api-ms-win-crt-private-l1-1-0
memchr
ws2_32
WSACleanup
iphlpapi
if_nametoindex
crypt32
CertAddCertificateContextToStore
api-ms-win-crt-filesystem-l1-1-0
_fullpath
secur32
InitSecurityInterfaceA
bcrypt
BCryptGenRandom
slinky_init
Name
.text
Size
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
288B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.slinky0
Size
Virtual Size
13.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.slinky1
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.slinky2
Size
21.6MB
Virtual Size
21.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
stinky_auto/archive/lib_win.sha256
- SHA256 5a6aceb05ecf870a71ce005df609517ccbf80d239b8d814b2baff393c39b4808
- MD5 d8a55ddda3045a6ea6ee616e19165d7e
- SHA1 89e0522a65b5170191307877283d26dd81a7267f
- SHA512 affa29cfc42a5d6a602db97c2f41c30488490bd978b956d6fe15243f7357125880b3d13bc8f44e0117d6e61d260fc14f8623bfbfac23efb81edc57d56fdc8267
- TLSH T1D0A00252D9056641AA193764360D033A2A858A515C137EA693A169FE369B231E0E4750
- MD5 SHA1 SHA512 TLSH
stinky_auto/archive/lib_win.sig
- SHA256 4929f0a9fe6d2b9c462d12a03442b4b257b0b1851bd1d7421ff3e4317bad17f1
- MD5 78a9831d8463d054e04bab1c821b7a92
- SHA1 ede53e39267e40fd73cd2d394fa9f8da873213c1
- SHA512 4724dfcaba64be2aa5c54dc41f8ac08819a694e2eb4dcf889a875ae84e8412902de991759cfa12f2108dabefaa8f4ecfa1662406a60eea5d34879bad82f366c7
- TLSH T12CA0223C2A2C20222280C03A338808AEC822C0A38000F0CE203022F0CCCC30308B30A0
- MD5 SHA1 SHA512 TLSH
stinky_auto/archive/loader3_win
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 f93345c0cfe60e5fce7d8d84ad23043cfcdd2c9516791309215bc9a005ee4e95
- MD5 0a3f1c2d04bc0d6183b4919628e08a86
- SHA1 af161fd596ebbab8dd723d6d70b81f1cd8b59ae6
- SHA512 493f4d5ece050109ce9acd77c09e75177dabf917187b08a12676278ccd687867ad6078b489fc154e9bcbe7a7aa8871097bf53d79ab63035348eb738bde96f278
- SSDEEP 49152:PsAOFu7Rot3mMIKom+C8eq8+Ns7LlnU09HS4qj+kZOUMjO10o/aufKiK9KvRp5EZ:PpEg/NClnl9yeSLthbJEZ
- TLSH T167564A03ECA545E5C0AAE23589679212BB717C885B3627D32B90F7783F72BD06E79350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ac:7b:ca:e6:f9:73:c5:0c:c1:0e:4b:a7:d2:63:49:94:c0:05:43:5f:af:1f:d6:9f:f0:0d:26:37:7f:ce:24:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Chains
Jan 9, 2026
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Subject
CN=Slinkware,O=Slinkware,L=Emmeloord,ST=Flevoland,C=NL
Serial Number
56:10:62:e9:37:d3:6d:6a:78:e7:bf:69:33:fa:31:b0
Issuer
CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2026
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
1
Major OS version
6
Entry point
506976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
338KB
Virtual Size
681KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
stinky_auto/archive/loader3_win.sha256
- SHA256 b4442b4f64f6ab7ad6b694c932dee25a5d7426b0018d1842ac6578b1f009fb2a
- MD5 aa1d294237c55d0e1bf07db6c0b5ee7f
- SHA1 035cad502c0fe26415295816761cc5832c7d58f4
- SHA512 46c01ff4c9bc06dc706db75fbe25204c41c293501a4d7e9e80a0ac0d834229df0c5cf469c1309106cc2d2bc63ffdda2212675bef172e198b9cfb9f74b558214c
- TLSH T196A012068124D8060509262512190D4177802D17A100680745104099A202E0C97C6136
- MD5 SHA1 SHA512 TLSH
stinky_auto/archive/loader3_win.sig
- SHA256 86d9d92de79a00fab75dcf7799184af028c5268f9041a8cda5c86b8421427650
- MD5 ef7fe63d71674138bf0b2ecd8b7955aa
- SHA1 1f6a5c5d970aa0aab7fe2d326f158b77f267480f
- SHA512 cd474c880ddcc58b682cef70717053625515d9feb78c38df297d79c5e4c0278a8b55248c2b9b3dc4f6a3d08091e6928bb54f16ae6e801f1276d57763c79ae309
- TLSH T1B5A022082008BCC303B280A203A0CC0020B820A8E0C80000BC0C0320300CE82E0C2C03
- MD5 SHA1 SHA512 TLSH
stinky_auto/nacre_7f2c.dll
- IMPHASH fd7b9983c0061a68f800425082a075f5
- SHA256 fd4603571cec079c45475967ea6f86b7f2f0806934e7d8fc353145a3e5a0dc53
- MD5 db911111feb8e2e5216ec5ba41804bf7
- SHA1 a272f5c5e7348749abc673a45295e6419d1c9a97
- SHA512 7f67a9ab310a9fa6428d58a5301708ac11ca2c4fc1bf92d44992a105a09261137247274bb50e9f54329016d1c08f95b2647df33163c67e24d910ec8cf6074f8f
- SSDEEP 393216:8nIQSrWGKrux4enQhAkn3Qn0WfCTI4W/5kvZs+OiGQGp3Qn0WfCT3ffKnJ:cTZn3zI75k7OTHp3zvS
- TLSH T14677F1DA65E841BCD452C238C28727EAE1E5B8494FB455DFBFC644902E32FD4C8BA721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
33397452
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
user32
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
IsWindow
EnumWindows
GetWindowThreadProcessId
PostMessageW
advapi32
CryptExportKey
SystemFunction036
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
OpenProcessToken
GetTokenInformation
SetEntriesInAclW
SetNamedSecurityInfoW
BuildTrusteeWithSidW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptCreateHash
CryptDecrypt
bcrypt
BCryptGenRandom
crypt32
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenSystemStoreW
CertDuplicateCertificateContext
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CryptProtectData
CryptUnprotectData
CertOpenStore
winhttp
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpen
ws2_32
htons
htonl
getpeername
select
recvfrom
getsockopt
inet_ntoa
ioctlsocket
WSAGetLastError
WSASetLastError
send
recv
WSACleanup
WSAStartup
inet_addr
gethostbyaddr
getservbyport
getservbyname
accept
bind
closesocket
connect
listen
setsockopt
socket
getsockname
sendto
shutdown
ntohs
gethostbyname
kernel32
GetProcessHeap
OutputDebugStringW
HeapSize
WriteConsoleW
SetEndOfFile
InitializeCriticalSection
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryExW
IsThreadAFiber
HeapFree
HeapAlloc
UnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetCurrentThread
IsProcessorFeaturePresent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
SetStdHandle
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
InitializeSListHead
GetStartupInfoW
CloseHandle
SetLastError
AddVectoredExceptionHandler
SetEvent
CreateEventW
Sleep
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CreateThread
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
DisableThreadLibraryCalls
CreateToolhelp32Snapshot
Thread32First
Thread32Next
Module32FirstW
Module32NextW
GetEnvironmentVariableW
DeleteFileW
GetLastError
LocalFree
MoveFileExW
MultiByteToWideChar
OpenProcess
CreateFileW
GetFileInformationByHandle
ReadFile
GetLocalTime
GetModuleFileNameW
WideCharToMultiByte
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFileType
GetStdHandle
WriteFile
GetModuleHandleW
GetProcAddress
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
GetExitCodeThread
CreateSemaphoreA
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
FormatMessageA
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
VirtualLock
GetModuleHandleExW
GetACP
GetSystemTimeAsFileTime
RtlVirtualUnwind
GetSystemTime
SystemTimeToFileTime
SwitchToFiber
DeleteFiber
CreateFiberEx
LoadLibraryW
ConvertFiberToThread
ConvertThreadToFiberEx
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
FindClose
FindFirstFileW
FindNextFileW
VirtualUnlock
SetUnhandledExceptionFilter
GetCPInfo
CompareStringEx
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
WaitForSingleObjectEx
SwitchToThread
GetLogicalProcessorInformationEx
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
SleepConditionVariableSRW
GetTickCount64
GetLocaleInfoEx
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
FindFirstFileExW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
GetTempPathW
CreateFile2
AreFileApisANSI
DeviceIoControl
CreateDirectoryExW
CopyFile2
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WakeConditionVariable
WakeAllConditionVariable
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
StinkyConfigure
Name
.text
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
252KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.r4k80
Size
13.9MB
Virtual Size
13.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.r4k81
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.r4k82
Size
11.9MB
Virtual Size
11.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
stinky_auto/original/nacre_7f2c.dll
- IMPHASH fd7b9983c0061a68f800425082a075f5
- SHA256 e66218f29b70bd0fff93356adcdbd7aebf4b8288b8f4a05a7a34662e52bfd2c5
- MD5 49967765ba2f649f2646f76bd6475a75
- SHA1 4cbd47419591ab781452a70f7cfbbaeb84fc29ac
- SHA512 6e5875b10386d98581c48e7a9c165f33a20459d907cfeccd891cdf795e33c054545a0f03c2754341665ee3ef942d7a1e1af1c37ac17a0ec258a8b06fb1254e14
- SSDEEP 393216:8XIQSrWGKrux4enQhAkn3Qn0WfCTI4W/5kvZs+OiGQGp3Qn0WfCT3ffKnJ:sTZn3zI75k7OTHp3zvS
- TLSH T19A77F1DA65E841BCD452C238C28727EAE1E5B8494FB455DFBFC644902E32FD4C8BA721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
33397452
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
user32
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
IsWindow
EnumWindows
GetWindowThreadProcessId
PostMessageW
advapi32
CryptExportKey
SystemFunction036
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
OpenProcessToken
GetTokenInformation
SetEntriesInAclW
SetNamedSecurityInfoW
BuildTrusteeWithSidW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptCreateHash
CryptDecrypt
bcrypt
BCryptGenRandom
crypt32
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenSystemStoreW
CertDuplicateCertificateContext
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CryptProtectData
CryptUnprotectData
CertOpenStore
winhttp
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpen
ws2_32
htons
htonl
getpeername
select
recvfrom
getsockopt
inet_ntoa
ioctlsocket
WSAGetLastError
WSASetLastError
send
recv
WSACleanup
WSAStartup
inet_addr
gethostbyaddr
getservbyport
getservbyname
accept
bind
closesocket
connect
listen
setsockopt
socket
getsockname
sendto
shutdown
ntohs
gethostbyname
kernel32
GetProcessHeap
OutputDebugStringW
HeapSize
WriteConsoleW
SetEndOfFile
InitializeCriticalSection
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryExW
IsThreadAFiber
HeapFree
HeapAlloc
UnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetCurrentThread
IsProcessorFeaturePresent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
SetStdHandle
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
InitializeSListHead
GetStartupInfoW
CloseHandle
SetLastError
AddVectoredExceptionHandler
SetEvent
CreateEventW
Sleep
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CreateThread
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
DisableThreadLibraryCalls
CreateToolhelp32Snapshot
Thread32First
Thread32Next
Module32FirstW
Module32NextW
GetEnvironmentVariableW
DeleteFileW
GetLastError
LocalFree
MoveFileExW
MultiByteToWideChar
OpenProcess
CreateFileW
GetFileInformationByHandle
ReadFile
GetLocalTime
GetModuleFileNameW
WideCharToMultiByte
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFileType
GetStdHandle
WriteFile
GetModuleHandleW
GetProcAddress
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
GetExitCodeThread
CreateSemaphoreA
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
FormatMessageA
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
VirtualLock
GetModuleHandleExW
GetACP
GetSystemTimeAsFileTime
RtlVirtualUnwind
GetSystemTime
SystemTimeToFileTime
SwitchToFiber
DeleteFiber
CreateFiberEx
LoadLibraryW
ConvertFiberToThread
ConvertThreadToFiberEx
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
FindClose
FindFirstFileW
FindNextFileW
VirtualUnlock
SetUnhandledExceptionFilter
GetCPInfo
CompareStringEx
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
WaitForSingleObjectEx
SwitchToThread
GetLogicalProcessorInformationEx
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
SleepConditionVariableSRW
GetTickCount64
GetLocaleInfoEx
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
FindFirstFileExW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
GetTempPathW
CreateFile2
AreFileApisANSI
DeviceIoControl
CreateDirectoryExW
CopyFile2
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WakeConditionVariable
WakeAllConditionVariable
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
StinkyConfigure
Name
.text
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
252KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.r4k80
Size
13.9MB
Virtual Size
13.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.r4k81
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.r4k82
Size
11.9MB
Virtual Size
11.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ