By using Saferwall you consent to our Terms of Service and Privacy Policy and allow us to share your submission with the security community. Learn more

PE (Portable Executable)

.text

Entropy 0x6.26b8ad916dc0c 6.151255462651309
Characteristics 0x60000020 1610612768
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x600 1536
Pointer to relocations 0x0 0
Size of raw data 0x294400 2.58MB
Virtual address 0x1000 4096
Virtual size 0x294308 2.58MB

.rdata

Entropy 0x5.64a5e3a390a58 5.393156268532627
Characteristics 0x40000040 1073741888
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x294a00 2705920
Pointer to relocations 0x0 0
Size of raw data 0xcb600 813.50KB
Virtual address 0x296000 2711552
Virtual size 0xcb462 813.10KB

.data

Entropy 0x6.a991a564481a 6.662378632529091
Characteristics 0xc0000040 3221225536
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x360000 3538944
Pointer to relocations 0x0 0
Size of raw data 0x86e00 539.50KB
Virtual address 0x362000 3547136
Virtual size 0x8f464 573.10KB

.pdata

Entropy 0x6.38fc18793d89 6.222596673583698
Characteristics 0x40000040 1073741888
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x3e6e00 4091392
Pointer to relocations 0x0 0
Size of raw data 0x2c200 176.50KB
Virtual address 0x3f2000 4136960
Virtual size 0x2c10c 176.26KB

Entropy 0x6.857898d20bfa8 6.521371413498835
Characteristics 0x40000040 1073741888
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x413000 4272128
Pointer to relocations 0x0 0
Size of raw data 0x200 512B
Virtual address 0x41f000 4321280
Virtual size 0x1e0 480B

.reloc

Entropy 0x5.74ef90eb47e2c 5.456780488435366
Characteristics 0x42000040 1107296320
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x413200 4272640
Pointer to relocations 0x0 0
Size of raw data 0x7400 29.00KB
Virtual address 0x420000 4325376
Virtual size 0x7340 28.81KB

.idata

Entropy 0x2.daa8b7c4963a6 2.8541369299839316
Characteristics 0xc0000040 3221225536
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x41a600 4302336
Pointer to relocations 0x0 0
Size of raw data 0x400 1.00KB
Virtual address 0x428000 4358144
Virtual size 0x1000 4.00KB

.tls

Entropy 0x0.48d97b74696 0.28456851570206254
Characteristics 0xc0000000 3221225472
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x41aa00 4303360
Pointer to relocations 0x0 0
Size of raw data 0x200 512B
Virtual address 0x429000 4362240
Virtual size 0x1000 4.00KB

.rsrc

Entropy 0x4.a09f22d7c1058 4.627428224253
Characteristics 0x40000040 1073741888
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x41ac00 4303872
Pointer to relocations 0x0 0
Size of raw data 0x1c00 7.00KB
Virtual address 0x42a000 4366336
Virtual size 0x1c00 7.00KB

.themida

Entropy 0x0 0
Characteristics 0xe0000060 3758096480
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x41c800 4311040
Pointer to relocations 0x0 0
Size of raw data 0x0 0B
Virtual address 0x42c000 4374528
Virtual size 0x546000 5.27MB

.boot

Entropy 0x7.f3795c8a21f44 7.951070579265392
Characteristics 0x60000060 1610612832
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x41c800 4311040
Pointer to relocations 0x0 0
Size of raw data 0x376400 3.46MB
Virtual address 0x972000 9904128
Virtual size 0x376400 3.46MB

.reloc

Entropy 0x2.797f801e888d4 2.474601752714581
Characteristics 0x40000000 1073741824
Number of line numbers 0x0 0
Number of relocations 0x0 0
Pointer to line numbers 0x0 0
Pointer to raw data 0x792c00 7941120
Pointer to relocations 0x0 0
Size of raw data 0x10 16B
Virtual address 0xce9000 13537280
Virtual size 0x1000 4.00KB