{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00007684032, "rte": "az", "prob": 0.00007684032 }, { "cls": 0, "raw": 0.00028945008, "rte": "az/native", "prob": 0.00028945008 }, { "cls": 0, "raw": 0.0019753177, "rte": "az/pe", "prob": 0.0019753177 } ], "prob": 0.00007684032, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.00007684031879762188, "type": "pe" } ], "version": "v18.18", "analyzed_at": "2026-09-13T00:01:22Z" }, "path": "Backdoor.Win32.PcControl.21", "raw": { "v": "8", "rev": "c7f7e", "files": [ { "id": 0, "ctx": [ { "b": "o\u003ciRU0@@r31onA4%nJ60XbVHe00000kMy=:0000000000000000000000000000000000000000[bJB*4J\u0026m(0ji6Sa?dLD+]{51x(+zoA=kPhvqNb%vqY$3BrC47aAzQxazCZol@c-7zeS@@e!5l%bME/A00000Ns/t(?qOJ9?qOJ9?qOJ9RV48{*#nA8?qOJ9*U@r7uJ7y5-O{$*ht)?ISP11G?qOG8oA", "ln": 0 }, { "b": "0000000000000000000000000000000000000000Xfag90k\u003c[WKDtM=KDtM=r/uG.0o?2%0rydAsvtBPI]G8vKDtM=KDtM=KDtM=r/uIi7YTKo{cZei0DXSG\u003e\u003c+}U00", "ln": 4064 }, { "b": "1Dgoa.uo\u003e2KB==11POKZGD}Ju002}$r--ah0S\u0026u4@$U2\u003ck(=Mj%8!VZ7)me+(b\u0026#a0bhp)k(*c58uo+}V)rY@000Lz4PhDjd/YN4-0z7jr=!SE74:\u003cV0p7K573[pN0bqN{r3Sp", "ln": 4663 }, { "b": "l)KbV6:c]\u003c0bfrkk(=?}\u003eRTmU0e5h)Jz}euy7Kow@$L/ck(=Mj%8/F#TDt^G\u003eOk0o0e5h)@$Uq@k(+m#u4Zk#ty\u003c.]1POLuI?Av%1POKoOrl8qq0n(G004U\u00262.*58H2A1i0bd2", "ln": 4870 }, { "b": "08@[j6HUj!xK)k\u003e0o**c004U\u00261xksn3}9wY@$Uq@k(+m#u4Zk#ty\u003c.]1POLuI-7z#k(=)rbOTanr3Tql00Ao4qDJ[HI:O*4G$}^@I.bShk(+T1p(N\u003c*g/dcJ!R0U%BrlAnbOjX\u003cqh[K2g?V\u003c(002[#%ji8@bOkWBB\u003e2Z^xYa$r0o=AW004U\u00261zCf7k(*a17YTK", "ln": 5257 }, { "b": "003Y\u003cM{yZ=4G(+iI{HRm^F%nX0T5G6I{HQR^F%nX9%qMzI{Fd$TW8%JIQzF8I-51ik(^VNTW8@BkPBIsy5@2r0000}%ji8qrinB^y5?}=2(\u003c%sLMp::I+$D(%jg(R0@@sV=/!6J004}#\u003e!kBB0bg^5004@6\u003eSd5\u003e0bg*6004@6I}Ekz^F%o9{\u003e}GVy5?#IxIFN", "ln": 10058 }, { "b": "%nL]PJrGpY%55!hej8S5IYDugk(=:E\u003cI#%x%nS9P0001j21R2Wr/Jv#%nS9%I-0gPk(*@oxA?0[0e\u003cnOp(QC*%nS9@%jg\u0026/ni)llrs\u00265/G!SMb%4@:DxA?0[09tetf-RgMqubiCI\u003clZg%nL#RG!SMb%4@.gg^TFdxA?0[0e\u003cLSqh{?{%nS9%I-0EXk(*@oxA?0[0e\u003cnOp(QC*%nS9@%jg\u0026/ni)llrs\u00265/G!SMb%4@:DxA?0[09tetf-RgMqubj9L@eKv%5a\u0026gf-RgMq2.m)lo$Q(mG0h=%nRo{0001Sp4hXI4fcwd0af5pI@!j", "ln": 12254 }, { "b": "1oqvR*C{o/:3xYas9b0fZ=rAy:3xXoMb8T[0001j98P04@$Q[!k(=\u0026rjnTbyI-41\u003ck(+N7q9+g-%jfoHQFO#%0czNY]Iv*Nso3\u0026k.\u003eQhKk(=14xYI#Q09xiKjhW*}:3xYEj.Shsk(+0^!\u0026Q^At/PbgBs.arp^C7.%jfoHQH.zh0cxe[Twzg.so3\u0026k.\u003eQRWk(=0", "ln": 12883 }, { "b": "Ef-dtg.K}vI^l-E{b?bMt7X)+A-F8/[k-v^yb2V59790(G$}^$sby#3Ie@@6I-4C2k(*@oy5%eU4fa[rDLzDZ[th$TGf8Rs0I%aVlLb8}bWUN5GtP9JbVc\u0026cq#WO%k%UHe-{iWZZ*pl!.uZd1k{g(%BQw7/9rc+blQpYG\u003eS2gm0k[2v\u003eL$QvncFe{I#S\u0026UI$c/", "ln": 13326 }, { "b": "k(^V\u003c\u003cuS^DTe/QBrG3i{(\u003exQ60f6Clr-5/NnA8]n@$Q[^k(=Mj0s%(10rr9QZ}G^H004?d1)(l*%3eV=A}CkT]2uyI@@r0vGURW*q=!@U]aenp54onn.fl[I:C)?o)eE4+law3", "ln": 20349 }, { "b": "F+YoD004cBXDh:h08.@[?V9QYsZf1+3\u0026\u003ct(E/PJH@$O{ck(=Mj%dZZik(=0/yijg\u003e\u003eRT)\u003e0e{tHH4XU\u003edouEaaFRj5@$Q5Hk(=ROBqO6x761sms]Pl2k%UH6p6yPi0F}1.uC!M", "ln": 24290 }, { "b": "}#AAoQD[)lZ\u0026QvjmF)e^0095C(J.e9sI{5d\u003e.0EA0e12z%l6B.008mP%nSa1I-23hk(*{xy[\u003cn@%jmict+:N+%jmicoRT(N%jmicetCGh%jgI]rG3j4mf(}DjCthUk(Z[Ag\u003e^uMk(=3\u003es85Po2hYyWI$*Ce%8!PZ5:jG1%nMkp5:myq%nNZn09JxC3Jy\u0026Kk%UF", "ln": 24658 }, { "b": "2lj:ZmG!v-1x^?bs-}kgZ*yzNtuO\u003c@:P7P0%8YH?@$S4ek(=Mj%8!}N6@j8X08R[zTn\u0026i5Guj8gR#Z#Z{cZei0^2pyn38:\u003c-@DLG008jKTPesv00Ju50peq]Z@6fg)1sUjI:W)", "ln": 43191 }, { "b": "@$Rs{k(*}c!qI#yKEc1Ejnh)23@=vDS@J94Guj8Urd/P80^aYG\u003e^c-T%2CGkI-7n}k(=3HyxarR\u003cO]$ok%UHgmg-q}B(-Mqjv8mk%8)A5/6s97EfY%#3JCnf%ji3P5BfKUmDxp]5Du[p%ji8%5mn:F:?}bp(@e*F2V+2w0:Z/:IVXWGBp.o3.VYgi^/otIJEg%", "ln": 43656 }, { "b": "Bxqx%*GcJI0rrbm2\u003em({BQp6i40qOvy5}K%Br?Ah0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 46861 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 81888 }, { "b": "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 102368 }, { "b": "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "ln": 110560 } ], "mol": "Md₂(Bi₂Si)", "sha": "ac5fca57b07cde06af1835bbb2badc01c33b494af3481712e6a4d65237ce9911", "path": "Backdoor.Win32.PcControl.21", "risk": 3, "size": 135168, "type": "pe", "facts": { "sec": [ [ ".text", 4096, 77824, 4.32, "r-x" ], [ ".rdata", 81920, 20480, 0.0, "r--" ], [ ".data", 102400, 8192, 0.0, "rw-" ], [ ".rsrc", 110592, 24576, 0.0, "r--" ] ], "tgt": [ "fcn.00402d50", "fcn.004030da", "fcn.00403255", "fcn.004038eb", "fcn.004039aa", "fcn.004039de", "fcn.004039e5", "fcn.004039ec", "fcn.00403a71", "fcn.00403aea", "fcn.00403c15", "fcn.00403d3a", "fcn.00403d5d", "fcn.00403d66", "fcn.00403d80", "fcn.00403e50", "fcn.00403ed0", "fcn.00403ee2", "fcn.00403f0e", "fcn.00403f89", "fcn.0040410f", "fcn.004041e4", "fcn.00404228", "fcn.00404270", "fcn.004042fb", "fcn.00404310", "fcn.00404450", "fcn.00404475", "fcn.004044e0", "fcn.004044ff", "fcn.0040452a", "fcn.00404557", "fcn.00404568", "fcn.00404579", "fcn.0040461e", "fcn.00404627", "fcn.00404630", "fcn.00404650", "fcn.00404810", "fcn.00404b62", "fcn.00404caa", "fcn.00404cf0", "fcn.00404d36", "fcn.00404ee3", "fcn.00404f2d", "fcn.00404f60", "fcn.00404f89", "fcn.0040510e", "fcn.00405130", "fcn.00405465", "fcn.004054d7", "fcn.0040554a", "fcn.00405553", "fcn.0040555c", "fcn.0040572f", "fcn.004058e2", "fcn.0040598c", "fcn.004059e9", "fcn.00405a9d", "fcn.00405b18", "fcn.00405be5", "fcn.00405c5d", "fcn.00405e21", "fcn.00405e88", "fcn.00405eb0", "fcn.00405efc", "fcn.00405f50", "fcn.00405f63", "fcn.00405fca", "fcn.0040602b", "fcn.00406081", "fcn.004060aa", "fcn.0040610b", "fcn.00406120", "fcn.004061eb", "fcn.00406260", "fcn.00406378", "fcn.00406ab9", "fcn.00406aee", "fcn.00406b1f", "fcn.00406b57", "fcn.00406b64", "fcn.00406b74", "fcn.00406b82", "fcn.00406b9d", "fcn.00406bd9", "fcn.00406c17", "fcn.00406c42", "fcn.00406f6d", "fcn.00407276", "fcn.00407327", "fcn.00407422", "fcn.00407720", "fcn.00407790", "fcn.00407805", "fcn.004078d8", "fcn.00407907", "fcn.0040792a", "fcn.00407959", "fcn.0040797c", "fcn.004079d9", "fcn.00407a5c", "fcn.00407a87", "fcn.00407ab5", "fcn.00407b1a", "fcn.00407bbe", "fcn.00407c4b", "fcn.00407c75", "fcn.00407d80", "fcn.00407dfb", "fcn.00407f6b", "fcn.00408074", "fcn.004081b2", "fcn.004081ec", "fcn.00408244", "fcn.004082fd", "fcn.00408396", "fcn.0040854a", "fcn.0040867c", "fcn.00408838", "fcn.00408871", "fcn.004089d0", "fcn.00408a60", "fcn.00408a70", "fcn.00408b50", "fcn.00408bf0", "fcn.00408cea", "fcn.00408fa4", "fcn.004090f0", "fcn.00409117", "fcn.00409133", "fcn.0040914f", "fcn.00409180", "fcn.004092be", "fcn.00409323", "fcn.00409396", "fcn.004093fb", "fcn.00409586", "fcn.004095ca", "fcn.004095f3", "fcn.0040964c", "fcn.004096b5", "fcn.0040989b", "fcn.004099be", "fcn.00409a3a", "fcn.00409ab9", "fcn.00409afb", "fcn.00409b5a", "fcn.00409b7c", "fcn.00409c0f", "fcn.00409ede", "fcn.00409eef", "fcn.00409f20", "fcn.00409fa9", "fcn.00409fca", "fcn.0040a047", "fcn.0040a1c9", "fcn.0040a31a", "fcn.0040a38e", "fcn.0040a4d7", "fcn.0040a528", "fcn.0040a64d", "fcn.0040a826", "fcn.0040a865", "fcn.0040a8d3", "fcn.0040a919", "fcn.0040ab02", "fcn.0040ad08", "fcn.0040ad69", "fcn.0040afe6", "fcn.0040b011", "fcn.0040b198", "fcn.0040b1f0", "fcn.0040b258", "fcn.0040b360", "fcn.0040b3bd", "fcn.0040b3dd", "fcn.0040b47b", "fcn.0040b4a6", "fcn.0040b88b", "fcn.0040c30d", "fcn.0040c336", "fcn.0040c733", "fcn.0040fdfe", "fcn.0041004c", "fcn.0041054b", "fcn.00410561", "fcn.00410c34", "fcn.004113d5", "fcn.00411d0f", "main" ], "funcs": [ [ "fcn.00401050", 4198480 ], [ "fcn.00401070", 4198512 ], [ "fcn.00401110", 4198672 ], [ "fcn.00401140", 4198720 ], [ "fcn.004011b0", 4198832 ], [ "fcn.00401240", 4198976 ], [ "fcn.00402280", 4203136 ], [ "fcn.00402d50", 4205904 ], [ "fcn.00402f00", 4206336 ], [ "fcn.00402f60", 4206432 ], [ "fcn.004030da", 4206810 ], [ "fcn.00403213", 4207123 ], [ "fcn.00403220", 4207136 ], [ "fcn.00403255", 4207189 ], [ "fcn.0040332d", 4207405 ], [ "fcn.004034eb", 4207851 ], [ "fcn.00403538", 4207928 ], [ "fcn.0040355b", 4207963 ], [ "fcn.004036cf", 4208335 ], [ "fcn.0040371c", 4208412 ], [ "fcn.0040373f", 4208447 ], [ "fcn.004037c3", 4208579 ], [ "fcn.004038c2", 4208834 ], [ "fcn.004038eb", 4208875 ], [ "fcn.00403969", 4209001 ], [ "fcn.004039aa", 4209066 ], [ "fcn.004039de", 4209118 ], [ "fcn.004039e5", 4209125 ], [ "fcn.004039ec", 4209132 ], [ "fcn.00403a71", 4209265 ], [ "fcn.00403aea", 4209386 ], [ "fcn.00403c15", 4209685 ], [ "fcn.00403c90", 4209808 ], [ "fcn.00403cd2", 4209874 ], [ "fcn.00403d3a", 4209978 ], [ "fcn.00403d5d", 4210013 ], [ "fcn.00403d66", 4210022 ], [ "fcn.00403d80", 4210048 ], [ "fcn.00403e50", 4210256 ], [ "fcn.00403e7e", 4210302 ], [ "fcn.00403ed0", 4210384 ], [ "fcn.00403ee2", 4210402 ], [ "fcn.00403f0e", 4210446 ], [ "fcn.00403f5c", 4210524 ], [ "fcn.00403f89", 4210569 ], [ "fcn.004040c8", 4210888 ], [ "fcn.004040de", 4210910 ], [ "fcn.0040410f", 4210959 ], [ "fcn.0040415b", 4211035 ], [ "fcn.00404196", 4211094 ], [ "fcn.004041e4", 4211172 ], [ "fcn.00404215", 4211221 ], [ "fcn.00404228", 4211240 ], [ "fcn.00404270", 4211312 ], [ "fcn.004042fb", 4211451 ], [ "fcn.00404310", 4211472 ], [ "entry0", 4211528 ], [ "fcn.00404450", 4211792 ], [ "fcn.00404475", 4211829 ], [ "fcn.00404499", 4211865 ], [ "fcn.004044e0", 4211936 ], [ "fcn.004044ff", 4211967 ], [ "fcn.0040452a", 4212010 ], [ "fcn.00404557", 4212055 ], [ "fcn.00404568", 4212072 ], [ "fcn.00404579", 4212089 ], [ "fcn.0040461e", 4212254 ], [ "fcn.00404627", 4212263 ], [ "fcn.00404630", 4212272 ], [ "fcn.00404650", 4212304 ], [ "fcn.00404810", 4212752 ], [ "fcn.00404b62", 4213602 ], [ "fcn.00404bf9", 4213753 ], [ "fcn.00404caa", 4213930 ], [ "fcn.00404cf0", 4214000 ], [ "fcn.00404d36", 4214070 ], [ "fcn.00404ee3", 4214499 ], [ "fcn.00404f2d", 4214573 ], [ "fcn.00404f60", 4214624 ], [ "fcn.00404f89", 4214665 ], [ "fcn.0040510e", 4215054 ], [ "fcn.00405130", 4215088 ], [ "fcn.00405465", 4215909 ], [ "fcn.004054d7", 4216023 ], [ "fcn.0040554a", 4216138 ], [ "fcn.00405553", 4216147 ], [ "fcn.0040555c", 4216156 ], [ "fcn.00405694", 4216468 ], [ "fcn.0040572f", 4216623 ], [ "fcn.004058e2", 4217058 ], [ "fcn.0040598c", 4217228 ], [ "fcn.004059e9", 4217321 ], [ "fcn.00405a87", 4217479 ], [ "fcn.00405a9d", 4217501 ], [ "fcn.00405b18", 4217624 ], [ "fcn.00405be5", 4217829 ], [ "fcn.00405c33", 4217907 ], [ "fcn.00405c5d", 4217949 ], [ "fcn.00405e21", 4218401 ], [ "fcn.00405e88", 4218504 ], [ "fcn.00405eb0", 4218544 ], [ "fcn.00405efc", 4218620 ], [ "fcn.00405f50", 4218704 ], [ "fcn.00405f63", 4218723 ], [ "fcn.00405fca", 4218826 ], [ "fcn.0040602b", 4218923 ], [ "fcn.00406081", 4219009 ], [ "fcn.004060aa", 4219050 ], [ "fcn.0040610b", 4219147 ], [ "fcn.00406120", 4219168 ], [ "fcn.004061eb", 4219371 ], [ "fcn.00406260", 4219488 ], [ "fcn.00406378", 4219768 ], [ "fcn.00406ab9", 4221625 ], [ "fcn.00406aee", 4221678 ], [ "fcn.00406b1f", 4221727 ], [ "fcn.00406b57", 4221783 ], [ "fcn.00406b64", 4221796 ], [ "fcn.00406b74", 4221812 ], [ "fcn.00406b82", 4221826 ], [ "fcn.00406b9d", 4221853 ], [ "fcn.00406bd9", 4221913 ], [ "fcn.00406c17", 4221975 ], [ "fcn.00406c42", 4222018 ], [ "fcn.00406f6d", 4222829 ], [ "fcn.00407276", 4223606 ], [ "fcn.00407327", 4223783 ], [ "fcn.00407422", 4224034 ], [ "fcn.00407720", 4224800 ], [ "fcn.00407790", 4224912 ], [ "fcn.00407805", 4225029 ], [ "fcn.004078d8", 4225240 ], [ "fcn.00407907", 4225287 ], [ "fcn.0040792a", 4225322 ], [ "fcn.00407959", 4225369 ], [ "fcn.0040797c", 4225404 ], [ "fcn.004079d9", 4225497 ], [ "fcn.00407a5c", 4225628 ], [ "fcn.00407a87", 4225671 ], [ "fcn.00407ab5", 4225717 ], [ "fcn.00407b11", 4225809 ], [ "fcn.00407b1a", 4225818 ], [ "fcn.00407bbe", 4225982 ], [ "fcn.00407c4b", 4226123 ], [ "fcn.00407c75", 4226165 ], [ "fcn.00407d80", 4226432 ], [ "fcn.00407dfb", 4226555 ], [ "fcn.00407f6b", 4226923 ], [ "fcn.00408074", 4227188 ], [ "fcn.004081b2", 4227506 ], [ "fcn.004081ec", 4227564 ], [ "fcn.00408244", 4227652 ], [ "fcn.004082fd", 4227837 ], [ "fcn.00408396", 4227990 ], [ "fcn.0040854a", 4228426 ], [ "fcn.0040867c", 4228732 ], [ "fcn.00408838", 4229176 ], [ "fcn.00408871", 4229233 ], [ "fcn.004089d0", 4229584 ], [ "fcn.00408a60", 4229728 ], [ "fcn.00408a70", 4229744 ], [ "fcn.00408b50", 4229968 ], [ "fcn.00408bf0", 4230128 ], [ "fcn.00408cea", 4230378 ], [ "fcn.00408fa4", 4231076 ], [ "fcn.004090f0", 4231408 ], [ "fcn.00409117", 4231447 ], [ "fcn.00409133", 4231475 ], [ "fcn.0040914f", 4231503 ], [ "fcn.00409180", 4231552 ], [ "fcn.004092be", 4231870 ], [ "fcn.00409323", 4231971 ], [ "fcn.00409396", 4232086 ], [ "fcn.004093fb", 4232187 ], [ "fcn.00409586", 4232582 ], [ "fcn.004095ca", 4232650 ], [ "fcn.004095f3", 4232691 ], [ "fcn.0040964c", 4232780 ], [ "fcn.004096b5", 4232885 ], [ "fcn.0040989b", 4233371 ], [ "fcn.004099be", 4233662 ], [ "fcn.00409a3a", 4233786 ], [ "fcn.00409ab9", 4233913 ], [ "fcn.00409afb", 4233979 ], [ "fcn.00409b5a", 4234074 ], [ "fcn.00409b7c", 4234108 ], [ "fcn.00409c0f", 4234255 ], [ "fcn.00409ede", 4234974 ], [ "fcn.00409eef", 4234991 ], [ "fcn.00409f20", 4235040 ], [ "fcn.00409fa9", 4235177 ], [ "fcn.00409fca", 4235210 ], [ "fcn.0040a047", 4235335 ], [ "fcn.0040a1c9", 4235721 ], [ "fcn.0040a31a", 4236058 ], [ "fcn.0040a38e", 4236174 ], [ "fcn.0040a4d7", 4236503 ], [ "fcn.0040a528", 4236584 ], [ "fcn.0040a64d", 4236877 ], [ "fcn.0040a826", 4237350 ], [ "fcn.0040a865", 4237413 ], [ "fcn.0040a8d3", 4237523 ], [ "fcn.0040a919", 4237593 ], [ "fcn.0040ab02", 4238082 ], [ "fcn.0040ad08", 4238600 ], [ "fcn.0040ad69", 4238697 ], [ "fcn.0040afe6", 4239334 ], [ "fcn.0040b011", 4239377 ], [ "fcn.0040b198", 4239768 ], [ "fcn.0040b1f0", 4239856 ], [ "fcn.0040b258", 4239960 ], [ "main", 4239984 ], [ "fcn.0040b288", 4240008 ], [ "fcn.0040b2db", 4240091 ], [ "fcn.0040b360", 4240224 ], [ "fcn.0040b380", 4240256 ], [ "fcn.0040b3bd", 4240317 ], [ "fcn.0040b3dd", 4240349 ], [ "fcn.0040b436", 4240438 ], [ "fcn.0040b47b", 4240507 ], [ "fcn.0040b4a6", 4240550 ], [ "fcn.0040b4cf", 4240591 ], [ "fcn.0040b51c", 4240668 ], [ "fcn.0040b535", 4240693 ], [ "fcn.0040b88b", 4241547 ], [ "fcn.0040c30d", 4244237 ], [ "fcn.0040c336", 4244278 ], [ "fcn.0040c733", 4245299 ], [ "fcn.0040fdfe", 4259326 ], [ "fcn.0041004c", 4259916 ], [ "fcn.0041054b", 4261195 ], [ "fcn.00410561", 4261217 ], [ "fcn.00410c34", 4262964 ], [ "fcn.004113d5", 4264917 ], [ "fcn.00411d0f", 4267279 ] ], "metrics": { "pe": { "checksum": 0, "timestamp": 997957114, "image_size": 151552, "headers_size": 4096, "checksum_valid": 0, "file_alignment": 4096, "resource_count": 0, "checksum_stripped": 1, "computed_checksum": 153548, "headers_size_ratio": 0.03, "prose_section_count": 0, "bss_like_section_count": 0, "section_overflow_count": 0, "misaligned_section_count": 0, "rizin_importless_analysis": 1, "declared_data_directory_count": 3, "executable_prose_section_count": 0, "rizin_importless_function_count": 235, "directory_section_mismatch_count": 0 }, "file": { "size": 135168, "entropy": 2.78 }, "binary": { "is_pie": 0, "basic_blocks": 2556, "code_entropy": 4.32, "data_entropy": 0, "string_count": 42, "avg_complexity": 7.09, "max_complexity": 106, "huge_func_count": 7, "leaf_func_count": 42, "tiny_func_count": 62, "avg_basic_blocks": 10.88, "entropy_variance": 3.51, "avg_string_length": 5.88, "max_string_length": 40, "peak_region_bytes": 28672, "code_to_data_ratio": 0.9, "peak_region_entropy": 6.5, "string_length_stddev": 5.5, "largest_section_ratio": 0.58, "sentence_string_count": 1, "sentence_string_ratio": 0.02, "high_entropy_string_count": 0 }, "sections": { "count": 4, "code_size": 77824, "entropy_max": 4.32, "entropy_mean": 1.08, "name_entropy": 2.93, "writable_count": 1, "executable_count": 1, "nonstandard_count": 0, "executable_writable_count": 0 }, "functions": { "count": 235 }, "dependencies": { "count": 0 } } }, "traits": [ { "id": "metadata/binary/metrics/structural::many-huge-functions", "conf": 0.9, "crit": 3, "desc": "4+ functions with 50+ block control-flow graphs", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/binary/layout::pe-checksum-zeroed", "conf": 0.9, "crit": 3, "desc": "PE checksum is zeroed", "spans": [ [ 0, 18 ] ] }, { "id": "metadata/binary/metrics/structural::large-functions", "conf": 0.65, "crit": 3, "desc": "Function with a 50+ block control-flow graph", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/binary/metrics/structural::no-imports", "conf": 0.7, "crit": 3, "desc": "PE has no imported DLL dependencies", "spans": [ [ 0, 25 ] ] }, { "id": "metadata/signed/trust-level::unsigned-missing-signature-record", "conf": 0.9, "crit": 3, "desc": "PE lacks signature record" } ] } ] } }