PE check for '2sample01.exe':
Entropy: 4.945071 (Min=0.0, Max=8.0)
MD5     hash: 22450117faa2aa049ac2c59af8c160fb
SHA-1   hash: d537f6b9c6401b25cd7d67a2fe4c2213ce0bd334
SHA-256 hash: 20c8a88fe7f680a0cdaf61fafbc9e6dcaf626f326c5392b4d2660fec9adc2bf1
SHA-512 hash: 84e1dc33d437bf0bd7d6526b5b67fe4b18ec1f9cb8188549998a294a1a3f4ca8056051cbe5b38262292d2e74051bcdbf14c8cfd210cdad0e6a88006ae769a34c
.text entropy: 4.948355 (Min=0.0, Max=8.0)
.rsrc entropy: 3.728244 (Min=0.0, Max=8.0)
.reloc entropy: 0.101910 (Min=0.0, Max=8.0)
Dump Info:
----------DOS_HEADER----------

[IMAGE_DOS_HEADER]
0x0        0x0   e_magic:                       0x5A4D    
0x2        0x2   e_cblp:                        0x90      
0x4        0x4   e_cp:                          0x3       
0x6        0x6   e_crlc:                        0x0       
0x8        0x8   e_cparhdr:                     0x4       
0xA        0xA   e_minalloc:                    0x0       
0xC        0xC   e_maxalloc:                    0xFFFF    
0xE        0xE   e_ss:                          0x0       
0x10       0x10  e_sp:                          0xB8      
0x12       0x12  e_csum:                        0x0       
0x14       0x14  e_ip:                          0x0       
0x16       0x16  e_cs:                          0x0       
0x18       0x18  e_lfarlc:                      0x40      
0x1A       0x1A  e_ovno:                        0x0       
0x1C       0x1C  e_res:                         
0x24       0x24  e_oemid:                       0x0       
0x26       0x26  e_oeminfo:                     0x0       
0x28       0x28  e_res2:                        
0x3C       0x3C  e_lfanew:                      0x80      

----------NT_HEADERS----------

[IMAGE_NT_HEADERS]
0x80       0x0   Signature:                     0x4550    

----------FILE_HEADER----------

[IMAGE_FILE_HEADER]
0x84       0x0   Machine:                       0x14C     
0x86       0x2   NumberOfSections:              0x3       
0x88       0x4   TimeDateStamp:                 0x62448E52 [Wed Mar 30 17:07:30 2022 UTC]
0x8C       0x8   PointerToSymbolTable:          0x0       
0x90       0xC   NumberOfSymbols:               0x0       
0x94       0x10  SizeOfOptionalHeader:          0xE0      
0x96       0x12  Characteristics:               0x12E     
Flags: IMAGE_FILE_32BIT_MACHINE, IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LARGE_ADDRESS_AWARE, IMAGE_FILE_LINE_NUMS_STRIPPED, IMAGE_FILE_LOCAL_SYMS_STRIPPED

----------OPTIONAL_HEADER----------

[IMAGE_OPTIONAL_HEADER]
0x98       0x0   Magic:                         0x10B     
0x9A       0x2   MajorLinkerVersion:            0x6       
0x9B       0x3   MinorLinkerVersion:            0x0       
0x9C       0x4   SizeOfCode:                    0xF9600   
0xA0       0x8   SizeOfInitializedData:         0x600     
0xA4       0xC   SizeOfUninitializedData:       0x0       
0xA8       0x10  AddressOfEntryPoint:           0xFB4BE   
0xAC       0x14  BaseOfCode:                    0x2000    
0xB0       0x18  BaseOfData:                    0xFC000   
0xB4       0x1C  ImageBase:                     0x400000  
0xB8       0x20  SectionAlignment:              0x2000    
0xBC       0x24  FileAlignment:                 0x200     
0xC0       0x28  MajorOperatingSystemVersion:   0x4       
0xC2       0x2A  MinorOperatingSystemVersion:   0x0       
0xC4       0x2C  MajorImageVersion:             0x0       
0xC6       0x2E  MinorImageVersion:             0x0       
0xC8       0x30  MajorSubsystemVersion:         0x4       
0xCA       0x32  MinorSubsystemVersion:         0x0       
0xCC       0x34  Reserved1:                     0x0       
0xD0       0x38  SizeOfImage:                   0x100000  
0xD4       0x3C  SizeOfHeaders:                 0x200     
0xD8       0x40  CheckSum:                      0x0       
0xDC       0x44  Subsystem:                     0x2       
0xDE       0x46  DllCharacteristics:            0x8540    
0xE0       0x48  SizeOfStackReserve:            0x100000  
0xE4       0x4C  SizeOfStackCommit:             0x1000    
0xE8       0x50  SizeOfHeapReserve:             0x100000  
0xEC       0x54  SizeOfHeapCommit:              0x1000    
0xF0       0x58  LoaderFlags:                   0x0       
0xF4       0x5C  NumberOfRvaAndSizes:           0x10      
DllCharacteristics: IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE, IMAGE_DLLCHARACTERISTICS_NO_SEH, IMAGE_DLLCHARACTERISTICS_NX_COMPAT, IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

----------PE Sections----------

[IMAGE_SECTION_HEADER]
0x178      0x0   Name:                          .text
0x180      0x8   Misc:                          0xF94C4   
0x180      0x8   Misc_PhysicalAddress:          0xF94C4   
0x180      0x8   Misc_VirtualSize:              0xF94C4   
0x184      0xC   VirtualAddress:                0x2000    
0x188      0x10  SizeOfRawData:                 0xF9600   
0x18C      0x14  PointerToRawData:              0x200     
0x190      0x18  PointerToRelocations:          0x0       
0x194      0x1C  PointerToLinenumbers:          0x0       
0x198      0x20  NumberOfRelocations:           0x0       
0x19A      0x22  NumberOfLinenumbers:           0x0       
0x19C      0x24  Characteristics:               0x60000020
Flags: IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Entropy: 4.948355 (Min=0.0, Max=8.0)
MD5     hash: 4209f75e10626988ffcaeb2ec1808697
SHA-1   hash: 58bd0ced264122092ca446c549b2a6dc41236faa
SHA-256 hash: 4b167c9c2b2314eb9ec000b2164d862ac2d72931379bd456ef4526dba58f9844
SHA-512 hash: 99b31071d2efff31b6cf28821ffbf1a614600a446b552146ac0cf00620c05c3eb319e53e3f85e0bbcfc18c0d89fb42eb0dd2ae940103d76a0d21ed69dcf694c5

[IMAGE_SECTION_HEADER]
0x1A0      0x0   Name:                          .rsrc
0x1A8      0x8   Misc:                          0x3C4     
0x1A8      0x8   Misc_PhysicalAddress:          0x3C4     
0x1A8      0x8   Misc_VirtualSize:              0x3C4     
0x1AC      0xC   VirtualAddress:                0xFC000   
0x1B0      0x10  SizeOfRawData:                 0x400     
0x1B4      0x14  PointerToRawData:              0xF9800   
0x1B8      0x18  PointerToRelocations:          0x0       
0x1BC      0x1C  PointerToLinenumbers:          0x0       
0x1C0      0x20  NumberOfRelocations:           0x0       
0x1C2      0x22  NumberOfLinenumbers:           0x0       
0x1C4      0x24  Characteristics:               0x40000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
Entropy: 3.728244 (Min=0.0, Max=8.0)
MD5     hash: 4c83b7cc28855a08cfd26a756d3e2de0
SHA-1   hash: 9e1faa825e897cbb7f49571d954b2737d7bae26d
SHA-256 hash: 7cf5027a08a0ca27eef3a4e6484ac975b3d238e01ecd5ed842939d326a230e07
SHA-512 hash: 9a8880d691892fa37b1eb519b5dfe5b61157ad322684c48c53b13c77105deb6b7de8c76c5ad3247d29e438dfb346857b220170956820b880ed4265a2baff863f

[IMAGE_SECTION_HEADER]
0x1C8      0x0   Name:                          .reloc
0x1D0      0x8   Misc:                          0xC       
0x1D0      0x8   Misc_PhysicalAddress:          0xC       
0x1D0      0x8   Misc_VirtualSize:              0xC       
0x1D4      0xC   VirtualAddress:                0xFE000   
0x1D8      0x10  SizeOfRawData:                 0x200     
0x1DC      0x14  PointerToRawData:              0xF9C00   
0x1E0      0x18  PointerToRelocations:          0x0       
0x1E4      0x1C  PointerToLinenumbers:          0x0       
0x1E8      0x20  NumberOfRelocations:           0x0       
0x1EA      0x22  NumberOfLinenumbers:           0x0       
0x1EC      0x24  Characteristics:               0x42000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
Entropy: 0.101910 (Min=0.0, Max=8.0)
MD5     hash: f0608f2a98b48b22733bbdb0d6d3e0fa
SHA-1   hash: 0decd68dd1d84f4e39dddc05819652be52d3ada0
SHA-256 hash: 4258192f54529b4e1e13a9681db3e76b2b91db073b72a1a52d1e8087188726f0
SHA-512 hash: a22405abf1035c512469d129514e05f44dc155d6d4dc1bc14d7e3d9710396662d239581c55ede52a3cf6d626beb3bd72d7defc1fe114d464e8e98bb1a24d3c3d

----------Directories----------

[IMAGE_DIRECTORY_ENTRY_EXPORT]
0xF8       0x0   VirtualAddress:                0x0       
0xFC       0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_IMPORT]
0x100      0x0   VirtualAddress:                0xFB470   
0x104      0x4   Size:                          0x4B      
[IMAGE_DIRECTORY_ENTRY_RESOURCE]
0x108      0x0   VirtualAddress:                0xFC000   
0x10C      0x4   Size:                          0x3C4     
[IMAGE_DIRECTORY_ENTRY_EXCEPTION]
0x110      0x0   VirtualAddress:                0x0       
0x114      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_SECURITY]
0x118      0x0   VirtualAddress:                0x0       
0x11C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_BASERELOC]
0x120      0x0   VirtualAddress:                0xFE000   
0x124      0x4   Size:                          0xC       
[IMAGE_DIRECTORY_ENTRY_DEBUG]
0x128      0x0   VirtualAddress:                0x0       
0x12C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_COPYRIGHT]
0x130      0x0   VirtualAddress:                0x0       
0x134      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_GLOBALPTR]
0x138      0x0   VirtualAddress:                0x0       
0x13C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_TLS]
0x140      0x0   VirtualAddress:                0x0       
0x144      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG]
0x148      0x0   VirtualAddress:                0x0       
0x14C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT]
0x150      0x0   VirtualAddress:                0x0       
0x154      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_IAT]
0x158      0x0   VirtualAddress:                0x2000    
0x15C      0x4   Size:                          0x8       
[IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT]
0x160      0x0   VirtualAddress:                0x0       
0x164      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR]
0x168      0x0   VirtualAddress:                0x2008    
0x16C      0x4   Size:                          0x48      
[IMAGE_DIRECTORY_ENTRY_RESERVED]
0x170      0x0   VirtualAddress:                0x0       
0x174      0x4   Size:                          0x0       

----------Version Information----------

[VS_VERSIONINFO]
0xF98A8    0x0   Length:                        0x31C     
0xF98AA    0x2   ValueLength:                   0x34      
0xF98AC    0x4   Type:                          0x0       

[VS_FIXEDFILEINFO]
0xF98D0    0x0   Signature:                     0xFEEF04BD
0xF98D4    0x4   StrucVersion:                  0x10000   
0xF98D8    0x8   FileVersionMS:                 0x27903DF 
0xF98DC    0xC   FileVersionLS:                 0x35203BE 
0xF98E0    0x10  ProductVersionMS:              0x19B02ED 
0xF98E4    0x14  ProductVersionLS:              0x61037A  
0xF98E8    0x18  FileFlagsMask:                 0x3F      
0xF98EC    0x1C  FileFlags:                     0x0       
0xF98F0    0x20  FileOS:                        0x40004   
0xF98F4    0x24  FileType:                      0x1       
0xF98F8    0x28  FileSubtype:                   0x0       
0xF98FC    0x2C  FileDateMS:                    0x0       
0xF9900    0x30  FileDateLS:                    0x0       

[StringFileInfo]
0xF9904    0x0   Length:                        0x27C     
0xF9906    0x2   ValueLength:                   0x0       
0xF9908    0x4   Type:                          0x1       

  [StringTable]
  0xF9928    0x0   Length:                        0x258     
  0xF992A    0x2   ValueLength:                   0x0       
  0xF992C    0x4   Type:                          0x0       
  LangID: 040904b0

    Comments: KQ2op9T8KBihf4rD9YljFYsN9R
    CompanyName: jeSvDsIhjDbsclmYjqSeAuLZOt
    FileVersion: 633.991.850.958
    InternalName: nkyBP6HbWUkCav5HaMO.exe
    LegalCopyright: j4kMsHV
    OriginalFilename: 39SZHaPfFwIese77ogpocwfNMZg.exe
    ProductName: qn
    ProductVersion: 411.749.97.890

[VarFileInfo]
0xF9B80    0x0   Length:                        0x44      
0xF9B82    0x2   ValueLength:                   0x0       
0xF9B84    0x4   Type:                          0x1       

  [Var]
  0xF9BA0    0x0   Length:                        0x24      
  0xF9BA2    0x2   ValueLength:                   0x4       
  0xF9BA4    0x4   Type:                          0x0       
    Translation: 0x0409 0x0514

----------Imported symbols----------

[IMAGE_IMPORT_DESCRIPTOR]
0xF9670    0x0   OriginalFirstThunk:            0xFB498   
0xF9670    0x0   Characteristics:               0xFB498   
0xF9674    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
0xF9678    0x8   ForwarderChain:                0x0       
0xF967C    0xC   Name:                          0xFB4AE   
0xF9680    0x10  FirstThunk:                    0x2000    

mscoree.dll._CorExeMain Hint[0]

----------Resource directory----------

[IMAGE_RESOURCE_DIRECTORY]
0xF9800    0x0   Characteristics:               0x0       
0xF9804    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
0xF9808    0x8   MajorVersion:                  0x4       
0xF980A    0xA   MinorVersion:                  0x0       
0xF980C    0xC   NumberOfNamedEntries:          0x0       
0xF980E    0xE   NumberOfIdEntries:             0x2       
  Id: [0xE] (RT_GROUP_ICON)
  [IMAGE_RESOURCE_DIRECTORY_ENTRY]
  0xF9810    0x0   Name:                          0xE       
  0xF9814    0x4   OffsetToData:                  0x80000020
    [IMAGE_RESOURCE_DIRECTORY]
    0xF9820    0x0   Characteristics:               0x0       
    0xF9824    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
    0xF9828    0x8   MajorVersion:                  0x4       
    0xF982A    0xA   MinorVersion:                  0x0       
    0xF982C    0xC   NumberOfNamedEntries:          0x0       
    0xF982E    0xE   NumberOfIdEntries:             0x1       
      Id: [0x1]
      [IMAGE_RESOURCE_DIRECTORY_ENTRY]
      0xF9830    0x0   Name:                          0x1       
      0xF9834    0x4   OffsetToData:                  0x80000050
        [IMAGE_RESOURCE_DIRECTORY]
        0xF9850    0x0   Characteristics:               0x0       
        0xF9854    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
        0xF9858    0x8   MajorVersion:                  0x4       
        0xF985A    0xA   MinorVersion:                  0x0       
        0xF985C    0xC   NumberOfNamedEntries:          0x0       
        0xF985E    0xE   NumberOfIdEntries:             0x1       
        \--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
          [IMAGE_RESOURCE_DIRECTORY_ENTRY]
          0xF9860    0x0   Name:                          0x0       
          0xF9864    0x4   OffsetToData:                  0x80      
            [IMAGE_RESOURCE_DATA_ENTRY]
            0xF9880    0x0   OffsetToData:                  0xFC0A0   
            0xF9884    0x4   Size:                          0x6       
            0xF9888    0x8   CodePage:                      0x4E4     
            0xF988C    0xC   Reserved:                      0x0       

  Id: [0x10] (RT_VERSION)
  [IMAGE_RESOURCE_DIRECTORY_ENTRY]
  0xF9818    0x0   Name:                          0x10      
  0xF981C    0x4   OffsetToData:                  0x80000038
    [IMAGE_RESOURCE_DIRECTORY]
    0xF9838    0x0   Characteristics:               0x0       
    0xF983C    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
    0xF9840    0x8   MajorVersion:                  0x4       
    0xF9842    0xA   MinorVersion:                  0x0       
    0xF9844    0xC   NumberOfNamedEntries:          0x0       
    0xF9846    0xE   NumberOfIdEntries:             0x1       
      Id: [0x1]
      [IMAGE_RESOURCE_DIRECTORY_ENTRY]
      0xF9848    0x0   Name:                          0x1       
      0xF984C    0x4   OffsetToData:                  0x80000068
        [IMAGE_RESOURCE_DIRECTORY]
        0xF9868    0x0   Characteristics:               0x0       
        0xF986C    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
        0xF9870    0x8   MajorVersion:                  0x4       
        0xF9872    0xA   MinorVersion:                  0x0       
        0xF9874    0xC   NumberOfNamedEntries:          0x0       
        0xF9876    0xE   NumberOfIdEntries:             0x1       
        \--- LANG [9,1][LANG_ENGLISH,SUBLANG_ENGLISH_US]
          [IMAGE_RESOURCE_DIRECTORY_ENTRY]
          0xF9878    0x0   Name:                          0x409     
          0xF987C    0x4   OffsetToData:                  0x90      
            [IMAGE_RESOURCE_DATA_ENTRY]
            0xF9890    0x0   OffsetToData:                  0xFC0A8   
            0xF9894    0x4   Size:                          0x31C     
            0xF9898    0x8   CodePage:                      0x4E4     
            0xF989C    0xC   Reserved:                      0x0       


----------Base relocations----------

[IMAGE_BASE_RELOCATION]
0xF9C00    0x0   VirtualAddress:                0xFB000   
0xF9C04    0x4   SizeOfBlock:                   0xC       


Signature:
 No signature

PEiD:
Error: signature database missing
Entry point:
ep:          0x000fb4be
ep address:  0x004fb4be
Section:     .text
ep offset:   0x000f96be

TLS Callbacks:
 No TLS

Overlay:
 No overlay
