filename | Patch.exe | |
---|---|---|
size | 192512 (0x2f000) | |
md5 | 11ba53a7077871f1f9a68ee1488b768f | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | Win.Trojan.Agent-361166 FOUND | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xc0 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x6270 | 0x6400 | R-X CODE | |
.rdata | 0x8000 | 0xad4 | 0xc00 | R-- IDATA | |
.data | 0x9000 | 0x132ce | 0x400 | RW- IDATA | |
.rsrc | 0x1d000 | 0x276ec | 0x27800 | R-- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x81b0 | 0xb4 | |
RESOURCE | 0x1d000 | 0x276ec | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0x8000 | 0x1b0 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
kernel32.dll | 564 | SetFileAttributesA | |
kernel32.dll | 566 | SetFilePointer | |
kernel32.dll | 607 | SizeofResource | |
kernel32.dll | 608 | Sleep | |
kernel32.dll | 631 | UnmapViewOfFile | |
kernel32.dll | 655 | WaitForSingleObject | |
kernel32.dll | 660 | WinExec | |
kernel32.dll | 670 | WriteFile | |
kernel32.dll | 693 | lstrcatA | |
kernel32.dll | 699 | lstrcpyA | |
kernel32.dll | 703 | lstrlenA | |
kernel32.dll | 521 | RtlMoveMemory | |
kernel32.dll | 386 | HeapDestroy | |
kernel32.dll | 385 | HeapCreate | |
kernel32.dll | 595 | SetThreadPriority | |
kernel32.dll | 70 | CreateThread | |
kernel32.dll | 387 | HeapFree | |
kernel32.dll | 383 | HeapAlloc | |
kernel32.dll | 289 | GetProcessHeap | |
kernel32.dll | 147 | FindFirstFileA | |
kernel32.dll | 143 | FindClose | |
kernel32.dll | 263 | GetModuleFileNameA | |
kernel32.dll | 503 | ReadFile | |
kernel32.dll | 455 | MultiByteToWideChar | |
kernel32.dll | 439 | LockResource | |
kernel32.dll | 425 | LoadResource | |
kernel32.dll | 366 | GlobalFree | |
kernel32.dll | 359 | GlobalAlloc | |
kernel32.dll | 346 | GetVersionExA | |
kernel32.dll | 287 | GetProcAddress | |
kernel32.dll | 265 | GetModuleHandleA | |
kernel32.dll | 26 | CloseHandle | |
kernel32.dll | 245 | GetFileSize | |
kernel32.dll | 169 | FlushFileBuffers | |
kernel32.dll | 162 | FindResourceA | |
kernel32.dll | 130 | ExpandEnvironmentStringsA | |
kernel32.dll | 128 | ExitProcess | |
kernel32.dll | 83 | DeleteFileA | |
kernel32.dll | 64 | CreateProcessA | |
kernel32.dll | 48 | CreateFileA | |
user32.dll | 535 | SetTimer | |
user32.dll | 507 | SetFocus | |
user32.dll | 504 | SetDlgItemTextA | |
user32.dll | 491 | SetCapture | |
user32.dll | 482 | SendMessageA | |
user32.dll | 477 | SendDlgItemMessageA | |
user32.dll | 467 | ReleaseDC | |
user32.dll | 466 | ReleaseCapture | |
user32.dll | 590 | UpdateWindow | |
user32.dll | 445 | PostMessageA | |
user32.dll | 424 | MoveWindow | |
user32.dll | 413 | MessageBoxA | |
user32.dll | 388 | LoadIconA | |
user32.dll | 384 | LoadCursorA | |
user32.dll | 379 | KillTimer | |
user32.dll | 328 | GetWindowRect | |
user32.dll | 308 | GetSystemMetrics | |
user32.dll | 281 | GetMessageA | |
user32.dll | 578 | TranslateMessage | |
user32.dll | 557 | ShowWindow | |
user32.dll | 546 | SetWindowTextA | |
user32.dll | 456 | RegisterClassExA | |
user32.dll | 544 | SetWindowPos | |
user32.dll | 244 | GetDlgItemTextA | |
user32.dll | 242 | GetDlgItem | |
user32.dll | 237 | GetDC | |
user32.dll | 236 | GetCursorPos | |
user32.dll | 173 | EndDialog | |
user32.dll | 171 | EnableWindow | |
user32.dll | 140 | DispatchMessageA | |
user32.dll | 138 | DialogBoxParamA | |
user32.dll | 126 | DefWindowProcA | |
user32.dll | 84 | CreateWindowExA | |
user32.dll | 447 | PostQuitMessage | |
comctl32.dll | 62 | InitCommonControls | |
gdi32.dll | 39 | CreateDIBSection | |
gdi32.dll | 47 | CreateFontIndirectA | |
gdi32.dll | 72 | DeleteDC | |
gdi32.dll | 75 | DeleteObject | |
gdi32.dll | 205 | GetObjectA | |
gdi32.dll | 34 | CreateCompatibleDC | |
gdi32.dll | 302 | SelectObject | |
gdi32.dll | 308 | SetBkColor | |
gdi32.dll | 309 | SetBkMode | |
gdi32.dll | 345 | SetTextColor | |
gdi32.dll | 362 | TextOutA | |
gdi32.dll | 12 | BitBlt | |
gdi32.dll | 235 | GetTextExtentPointA | |
gdi32.dll | 40 | CreateDIBitmap | |
comdlg32.dll | 10 | GetOpenFileNameA | |
shell32.dll | 103 | ShellExecuteA | |
shlwapi.dll | 92 | PathQuoteSpacesA | |
shlwapi.dll | 114 | PathStripPathA | |
winmm.dll | 181 | waveOutGetPosition | |
winmm.dll | 184 | waveOutOpen | |
winmm.dll | 186 | waveOutPrepareHeader | |
winmm.dll | 187 | waveOutReset | |
winmm.dll | 192 | waveOutUnprepareHeader | |
winmm.dll | 193 | waveOutWrite | |
winmm.dll | 172 | waveOutClose |
offset | size | type | comment | |
---|---|---|---|---|
0 | 192512 | EXE | 02/19/2008 14:36:55 | # |
15c1 | 15 | HTM | # | |
9fa0 | 83968 | PNG | (310 x 300) | # |
1e7a0 | 5177 | PNG | (20 x 144) | # |
1fbdc | 4993 | PNG | (20 x 144) | # |
20f60 | 3959 | PNG | (10 x 152) | # |
21ed8 | 3680 | PNG | (12 x 148) | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK