PE check for '2sample06.exe':
Entropy: 5.497830 (Min=0.0, Max=8.0)
MD5     hash: 6beac8a613035829d1c54dd90fe117b0
SHA-1   hash: 42c54b21c1227947cad24e09ed19b76bed7c0439
SHA-256 hash: 09ae4f8143792568762863fa05571ba43bd08b93d3a64399b59a86b347d3b15b
SHA-512 hash: 1b0f770026b07f2db2e397a64c6d4fd2da5c44522baf9677fb904ad527339335ac80000a725627839fd38f58fa9c6806e79e9e174019b34837dc1ee5fc01a99f
.text entropy: 5.505234 (Min=0.0, Max=8.0)
.rsrc entropy: 3.968405 (Min=0.0, Max=8.0)
.reloc entropy: 0.098004 (Min=0.0, Max=8.0)
Dump Info:
----------DOS_HEADER----------

[IMAGE_DOS_HEADER]
0x0        0x0   e_magic:                       0x5A4D    
0x2        0x2   e_cblp:                        0x90      
0x4        0x4   e_cp:                          0x3       
0x6        0x6   e_crlc:                        0x0       
0x8        0x8   e_cparhdr:                     0x4       
0xA        0xA   e_minalloc:                    0x0       
0xC        0xC   e_maxalloc:                    0xFFFF    
0xE        0xE   e_ss:                          0x0       
0x10       0x10  e_sp:                          0xB8      
0x12       0x12  e_csum:                        0x0       
0x14       0x14  e_ip:                          0x0       
0x16       0x16  e_cs:                          0x0       
0x18       0x18  e_lfarlc:                      0x40      
0x1A       0x1A  e_ovno:                        0x0       
0x1C       0x1C  e_res:                         
0x24       0x24  e_oemid:                       0x0       
0x26       0x26  e_oeminfo:                     0x0       
0x28       0x28  e_res2:                        
0x3C       0x3C  e_lfanew:                      0x80      

----------NT_HEADERS----------

[IMAGE_NT_HEADERS]
0x80       0x0   Signature:                     0x4550    

----------FILE_HEADER----------

[IMAGE_FILE_HEADER]
0x84       0x0   Machine:                       0x14C     
0x86       0x2   NumberOfSections:              0x3       
0x88       0x4   TimeDateStamp:                 0x62312463 [Tue Mar 15 23:42:27 2022 UTC]
0x8C       0x8   PointerToSymbolTable:          0x0       
0x90       0xC   NumberOfSymbols:               0x0       
0x94       0x10  SizeOfOptionalHeader:          0xE0      
0x96       0x12  Characteristics:               0x122     
Flags: IMAGE_FILE_32BIT_MACHINE, IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LARGE_ADDRESS_AWARE

----------OPTIONAL_HEADER----------

[IMAGE_OPTIONAL_HEADER]
0x98       0x0   Magic:                         0x10B     
0x9A       0x2   MajorLinkerVersion:            0x8       
0x9B       0x3   MinorLinkerVersion:            0x0       
0x9C       0x4   SizeOfCode:                    0x78400   
0xA0       0x8   SizeOfInitializedData:         0x600     
0xA4       0xC   SizeOfUninitializedData:       0x0       
0xA8       0x10  AddressOfEntryPoint:           0x7A29E   
0xAC       0x14  BaseOfCode:                    0x2000    
0xB0       0x18  BaseOfData:                    0x7C000   
0xB4       0x1C  ImageBase:                     0x400000  
0xB8       0x20  SectionAlignment:              0x2000    
0xBC       0x24  FileAlignment:                 0x200     
0xC0       0x28  MajorOperatingSystemVersion:   0x4       
0xC2       0x2A  MinorOperatingSystemVersion:   0x0       
0xC4       0x2C  MajorImageVersion:             0x0       
0xC6       0x2E  MinorImageVersion:             0x0       
0xC8       0x30  MajorSubsystemVersion:         0x4       
0xCA       0x32  MinorSubsystemVersion:         0x0       
0xCC       0x34  Reserved1:                     0x0       
0xD0       0x38  SizeOfImage:                   0x80000   
0xD4       0x3C  SizeOfHeaders:                 0x200     
0xD8       0x40  CheckSum:                      0x83EF9   
0xDC       0x44  Subsystem:                     0x2       
0xDE       0x46  DllCharacteristics:            0x8540    
0xE0       0x48  SizeOfStackReserve:            0x100000  
0xE4       0x4C  SizeOfStackCommit:             0x1000    
0xE8       0x50  SizeOfHeapReserve:             0x100000  
0xEC       0x54  SizeOfHeapCommit:              0x1000    
0xF0       0x58  LoaderFlags:                   0x0       
0xF4       0x5C  NumberOfRvaAndSizes:           0x10      
DllCharacteristics: IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE, IMAGE_DLLCHARACTERISTICS_NO_SEH, IMAGE_DLLCHARACTERISTICS_NX_COMPAT, IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

----------PE Sections----------

[IMAGE_SECTION_HEADER]
0x178      0x0   Name:                          .text
0x180      0x8   Misc:                          0x782A4   
0x180      0x8   Misc_PhysicalAddress:          0x782A4   
0x180      0x8   Misc_VirtualSize:              0x782A4   
0x184      0xC   VirtualAddress:                0x2000    
0x188      0x10  SizeOfRawData:                 0x78400   
0x18C      0x14  PointerToRawData:              0x200     
0x190      0x18  PointerToRelocations:          0x0       
0x194      0x1C  PointerToLinenumbers:          0x0       
0x198      0x20  NumberOfRelocations:           0x0       
0x19A      0x22  NumberOfLinenumbers:           0x0       
0x19C      0x24  Characteristics:               0x60000020
Flags: IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Entropy: 5.505234 (Min=0.0, Max=8.0)
MD5     hash: 65b2046ac77d175a3630269dc19f44fb
SHA-1   hash: 3268f3efbf57e8c2791b5593661c4f9184b471de
SHA-256 hash: 1b566f705d080aa3d262800fbe70f191546a7896a541135be1998c3daa720cef
SHA-512 hash: 510392eef2bbf3c2f8df88b960a62afa7e03172ff85f72ffc6bef565dae05b7a2e99828f3b0c3908bc6153ac8a55c693b889438ac6d49031ebe2ca2fe5b1105a

[IMAGE_SECTION_HEADER]
0x1A0      0x0   Name:                          .rsrc
0x1A8      0x8   Misc:                          0x354     
0x1A8      0x8   Misc_PhysicalAddress:          0x354     
0x1A8      0x8   Misc_VirtualSize:              0x354     
0x1AC      0xC   VirtualAddress:                0x7C000   
0x1B0      0x10  SizeOfRawData:                 0x400     
0x1B4      0x14  PointerToRawData:              0x78600   
0x1B8      0x18  PointerToRelocations:          0x0       
0x1BC      0x1C  PointerToLinenumbers:          0x0       
0x1C0      0x20  NumberOfRelocations:           0x0       
0x1C2      0x22  NumberOfLinenumbers:           0x0       
0x1C4      0x24  Characteristics:               0x40000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
Entropy: 3.968405 (Min=0.0, Max=8.0)
MD5     hash: 0320e81af8110426e6aaef9fb828f9e0
SHA-1   hash: 9c15e1f41601341d1d5e02cfcb1729ed0a2070d6
SHA-256 hash: 7548533c9eaf5d347065ea9efb4e28da3bc890633c6c016b360a93862a1c5be6
SHA-512 hash: 3fddcaf027ab264f5745ff3ca33bcdb059a7f76ebedbf90a7b77d10bf7227b511fac0de3a15852341d8377a3f671f368e7a14b36288f81220e757f08b37d3ea7

[IMAGE_SECTION_HEADER]
0x1C8      0x0   Name:                          .reloc
0x1D0      0x8   Misc:                          0xC       
0x1D0      0x8   Misc_PhysicalAddress:          0xC       
0x1D0      0x8   Misc_VirtualSize:              0xC       
0x1D4      0xC   VirtualAddress:                0x7E000   
0x1D8      0x10  SizeOfRawData:                 0x200     
0x1DC      0x14  PointerToRawData:              0x78A00   
0x1E0      0x18  PointerToRelocations:          0x0       
0x1E4      0x1C  PointerToLinenumbers:          0x0       
0x1E8      0x20  NumberOfRelocations:           0x0       
0x1EA      0x22  NumberOfLinenumbers:           0x0       
0x1EC      0x24  Characteristics:               0x42000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
Entropy: 0.098004 (Min=0.0, Max=8.0)
MD5     hash: 511a4cd26de5d41406263c474fc0280d
SHA-1   hash: 90d268e8c115f5db84c484be8ab351a856e969aa
SHA-256 hash: 0ea0bb45c4c4183f09f63e7b19f48af1a326c6036e19f867d5a3ac10a4dc3770
SHA-512 hash: 3c9c4c3664092ac33d020996f9afbebd3ef75c40d6f528ff667c77865aef5be6a0b525d981c45019da93d5a7c0a7d446c556f6084ccf53955aaba9dccc1eb618

----------Directories----------

[IMAGE_DIRECTORY_ENTRY_EXPORT]
0xF8       0x0   VirtualAddress:                0x0       
0xFC       0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_IMPORT]
0x100      0x0   VirtualAddress:                0x7A248   
0x104      0x4   Size:                          0x53      
[IMAGE_DIRECTORY_ENTRY_RESOURCE]
0x108      0x0   VirtualAddress:                0x7C000   
0x10C      0x4   Size:                          0x354     
[IMAGE_DIRECTORY_ENTRY_EXCEPTION]
0x110      0x0   VirtualAddress:                0x0       
0x114      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_SECURITY]
0x118      0x0   VirtualAddress:                0x0       
0x11C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_BASERELOC]
0x120      0x0   VirtualAddress:                0x7E000   
0x124      0x4   Size:                          0xC       
[IMAGE_DIRECTORY_ENTRY_DEBUG]
0x128      0x0   VirtualAddress:                0x0       
0x12C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_COPYRIGHT]
0x130      0x0   VirtualAddress:                0x0       
0x134      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_GLOBALPTR]
0x138      0x0   VirtualAddress:                0x0       
0x13C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_TLS]
0x140      0x0   VirtualAddress:                0x0       
0x144      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG]
0x148      0x0   VirtualAddress:                0x0       
0x14C      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT]
0x150      0x0   VirtualAddress:                0x0       
0x154      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_IAT]
0x158      0x0   VirtualAddress:                0x2000    
0x15C      0x4   Size:                          0x8       
[IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT]
0x160      0x0   VirtualAddress:                0x0       
0x164      0x4   Size:                          0x0       
[IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR]
0x168      0x0   VirtualAddress:                0x2008    
0x16C      0x4   Size:                          0x48      
[IMAGE_DIRECTORY_ENTRY_RESERVED]
0x170      0x0   VirtualAddress:                0x0       
0x174      0x4   Size:                          0x0       

----------Version Information----------

[VS_VERSIONINFO]
0x78658    0x0   Length:                        0x2FC     
0x7865A    0x2   ValueLength:                   0x34      
0x7865C    0x4   Type:                          0x0       

[VS_FIXEDFILEINFO]
0x78680    0x0   Signature:                     0xFEEF04BD
0x78684    0x4   StrucVersion:                  0x10000   
0x78688    0x8   FileVersionMS:                 0x223037F 
0x7868C    0xC   FileVersionLS:                 0x37D00DD 
0x78690    0x10  ProductVersionMS:              0x870389  
0x78694    0x14  ProductVersionLS:              0x1210243 
0x78698    0x18  FileFlagsMask:                 0x3F      
0x7869C    0x1C  FileFlags:                     0x0       
0x786A0    0x20  FileOS:                        0x4       
0x786A4    0x24  FileType:                      0x0       
0x786A8    0x28  FileSubtype:                   0x0       
0x786AC    0x2C  FileDateMS:                    0x0       
0x786B0    0x30  FileDateLS:                    0x0       

[StringFileInfo]
0x786B4    0x0   Length:                        0x25C     
0x786B6    0x2   ValueLength:                   0x0       
0x786B8    0x4   Type:                          0x1       

  [StringTable]
  0x786D8    0x0   Length:                        0x238     
  0x786DA    0x2   ValueLength:                   0x0       
  0x786DC    0x4   Type:                          0x0       
  LangID: 040904b0

    Comments: EfGywr6tdCHj8cuIpUtjIG3Z9
    CompanyName: icEFSl
    FileVersion: 547.895.893.221
    InternalName: eLC9wQ.exe
    LegalCopyright: s5mX6LB1vToKIm7t33i0AInImLHHJ
    OriginalFilename: GjicD3k6P4DfXto.exe
    ProductName: 2DEXtDYc2pN
    ProductVersion: 135.905.289.579

[VarFileInfo]
0x78910    0x0   Length:                        0x44      
0x78912    0x2   ValueLength:                   0x0       
0x78914    0x4   Type:                          0x1       

  [Var]
  0x78930    0x0   Length:                        0x24      
  0x78932    0x2   ValueLength:                   0x4       
  0x78934    0x4   Type:                          0x0       
    Translation: 0x0409 0x0514

----------Imported symbols----------

[IMAGE_IMPORT_DESCRIPTOR]
0x78448    0x0   OriginalFirstThunk:            0x7A270   
0x78448    0x0   Characteristics:               0x7A270   
0x7844C    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
0x78450    0x8   ForwarderChain:                0x0       
0x78454    0xC   Name:                          0x7A28E   
0x78458    0x10  FirstThunk:                    0x2000    

mscoree.dll._CorExeMain Hint[0]

----------Resource directory----------

[IMAGE_RESOURCE_DIRECTORY]
0x78600    0x0   Characteristics:               0x0       
0x78604    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
0x78608    0x8   MajorVersion:                  0x4       
0x7860A    0xA   MinorVersion:                  0x0       
0x7860C    0xC   NumberOfNamedEntries:          0x0       
0x7860E    0xE   NumberOfIdEntries:             0x1       
  Id: [0x10] (RT_VERSION)
  [IMAGE_RESOURCE_DIRECTORY_ENTRY]
  0x78610    0x0   Name:                          0x10      
  0x78614    0x4   OffsetToData:                  0x80000018
    [IMAGE_RESOURCE_DIRECTORY]
    0x78618    0x0   Characteristics:               0x0       
    0x7861C    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
    0x78620    0x8   MajorVersion:                  0x4       
    0x78622    0xA   MinorVersion:                  0x0       
    0x78624    0xC   NumberOfNamedEntries:          0x0       
    0x78626    0xE   NumberOfIdEntries:             0x1       
      Id: [0x1]
      [IMAGE_RESOURCE_DIRECTORY_ENTRY]
      0x78628    0x0   Name:                          0x1       
      0x7862C    0x4   OffsetToData:                  0x80000030
        [IMAGE_RESOURCE_DIRECTORY]
        0x78630    0x0   Characteristics:               0x0       
        0x78634    0x4   TimeDateStamp:                 0x0        [Thu Jan  1 00:00:00 1970 UTC]
        0x78638    0x8   MajorVersion:                  0x4       
        0x7863A    0xA   MinorVersion:                  0x0       
        0x7863C    0xC   NumberOfNamedEntries:          0x0       
        0x7863E    0xE   NumberOfIdEntries:             0x1       
        \--- LANG [9,1][LANG_ENGLISH,SUBLANG_ENGLISH_US]
          [IMAGE_RESOURCE_DIRECTORY_ENTRY]
          0x78640    0x0   Name:                          0x409     
          0x78644    0x4   OffsetToData:                  0x48      
            [IMAGE_RESOURCE_DATA_ENTRY]
            0x78648    0x0   OffsetToData:                  0x7C058   
            0x7864C    0x4   Size:                          0x2FC     
            0x78650    0x8   CodePage:                      0x4E4     
            0x78654    0xC   Reserved:                      0x0       


----------Base relocations----------

[IMAGE_BASE_RELOCATION]
0x78A00    0x0   VirtualAddress:                0x7A000   
0x78A04    0x4   SizeOfBlock:                   0xC       


Signature:
 No signature

PEiD:
Error: signature database missing
Entry point:
ep:          0x0007a29e
ep address:  0x0047a29e
Section:     .text
ep offset:   0x0007849e

TLS Callbacks:
 No TLS

Overlay:
 No overlay
