bicho.exe - Mvwuweht - Mmfyauh aezhuj

info
MZ
PE
resources
strings
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	bicho.exe
size	184320 (0x2d000)
md5	132d56f533f3a074b441cebff98e7742

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x591d982c
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x1e000
SizeOfInitializedData	0x1e000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1eb98
BaseOfCode	0x1000
BaseOfData	0x1f000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x3d000
SizeOfHeaders	0x1000
CheckSum	0x2d91f
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1ddfe	0x1e000	R-X CODE
.rdata	0x1f000	0x14aa	0x2000	R-- IDATA
.data	0x21000	0x1893c	0x9000	RW- IDATA
.rsrc	0x3a000	0x24f8	0x3000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1f88c	0xb4
RESOURCE	0x3a000	0x24f8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1f000	0x240
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
CURSOR	#3	220
CURSOR	#4	748
CURSOR	#5	412
CURSOR	#6	236
ICON	#1	744
ICON	#2	1960
MENU	#89	68
MENU	#572	248
DIALOG	#553	304
DIALOG	#566	260
DIALOG	#588	316
DIALOG	#603	336
DIALOG	#920	264
STRING	#1	528
STRING	#2	236
GROUP_CURSOR	#473	20
GROUP_CURSOR	#758	20
GROUP_CURSOR	#893	20
GROUP_CURSOR	#894	20
GROUP_ICON	#147	20
GROUP_ICON	#586	20
VERSION	#1	708
MANIFEST	#1	346

id	lang	string
0	1033	zQPipmbwFB
1	1033	eqcYoJArUuZgTDNQmqRx
2	1033	gAMqnLOuZLBfnIbwD
3	1033	YULFCqhRfekMcebT
4	1033	hTqxaehjmBELKl
5	1033	EjQLjHJPMhqKPXkMtA
6	1033	hbzHgaQaGymjzThIMY
7	1033	IRShkBGSrZac
8	1033	lOTYJNSDIhIb
9	1033	UJivSsRgfEieIOQzVpS
10	1033	PCxMndGJwwTEgyhw
11	1033	EmwFQWllPCHdqKn
12	1033	BHtUICeKHBupBcBQT
13	1033	nNZVWAZKzQeYd
14	1033	lGhqkBEgwRBO
15	1033	LrcSCIEIwmaqtfNRGnQ
16	1033	LikZBIXuJJjhzwZ
17	1033	YqVXfeYEFYGTHG
18	1033	KYrgvHpObK
19	1033	lCohTnZUIptskqaXOXB
20	1033	kIvVOhadxaR
21	1033	ohXSxaIAgPGaIXmFWV
22	1033	WJvdCdRflQQsgGj

module_name	hint	function_name
GDI32.dll	601	PtInRegion
GDI32.dll	661	SetMapperFlags
GDI32.dll	30	CloseFigure
GDI32.dll	584	Pie
GDI32.dll	600	PolylineTo
GDI32.dll	639	SetBkMode
GDI32.dll	47	CreateCompatibleBitmap
GDI32.dll	634	SetArcDirection
ADVAPI32.dll	594	RegUnLoadKeyA
MSVCRT.dll	881	_strtime
MSVCRT.dll	1323	strtoul
MSVCRT.dll	1161	clock
MSVCRT.dll	1133	_wtol
MSVCRT.dll	488	_ismbbalpha
MSVCRT.dll	1164	ctime
MSVCRT.dll	1187	fputwc
MSVCRT.dll	370	_findfirst64
MSVCRT.dll	1269	putc
MSVCRT.dll	1196	fseek
MSVCRT.dll	1341	ungetc
MSVCRT.dll	65	_CIfmod
MSVCRT.dll	100	_EH_prolog
MSVCRT.dll	914	_toupper
MSVCRT.dll	62	_CIcos
MSVCRT.dll	1338	toupper
MSVCRT.dll	734	_memicmp
MSVCRT.dll	440	_getdcwd
MSVCRT.dll	1176	fgets
MSVCRT.dll	563	_itow
MSVCRT.dll	61	_CIatan2
MSVCRT.dll	1272	putwc
MSVCRT.dll	390	_onexit
MSVCRT.dll	85	__dllonexit
MSVCRT.dll	183	_controlfp
MSVCRT.dll	202	_except_handler3
MSVCRT.dll	129	__set_app_type
MSVCRT.dll	111	__p__fmode
MSVCRT.dll	106	__p__commode
MSVCRT.dll	157	_adjust_fdiv
MSVCRT.dll	131	__setusermatherr
MSVCRT.dll	271	_initterm
MSVCRT.dll	88	__getmainargs
MSVCRT.dll	143	_acmdln
MSVCRT.dll	585	exit
MSVCRT.dll	72	_XcptFilter
MSVCRT.dll	211	_exit
MSVCRT.dll	216	__toascii
MSVCRT.dll	306	_creat
XOLEHLP.dll	3	DtcGetTransactionManagerExA
XOLEHLP.dll	4	DtcGetTransactionManagerExW
XOLEHLP.dll		DtcGetTransactionManager
USER32.dll	797	ValidateRgn
USER32.dll	638	SendNotifyMessageW
USER32.dll	543	NotifyWinEvent
PERFOS.dll	2	OpenOSObject
PERFOS.dll		CloseOSObject
ODBC32.dll	137	SQLSetConnectAttrA
ODBC32.dll	43	SQLColumnsW
ODBC32.dll	92	SQLGetDescFieldW
ODBC32.dll	11	ODBCQualifyFileDSNW
ODBC32.dll	126	SQLPrimaryKeysA
ODBC32.dll	72	SQLFetchScroll
ODBC32.dll	31	SQLCloseCursor
ODBC32.dll	68	SQLExecDirectW
ODBC32.dll	132	SQLProceduresA
ODBC32.dll	60	SQLDriversA
ODBC32.dll	106	SQLGetInfoW
ODBC32.dll	162	SQLStatisticsW
ODBC32.dll	62	SQLEndTran
ODBC32.dll	124	SQLPrepareW
ODBC32.dll	69	SQLExecute
ODBC32.dll	127	SQLPrimaryKeysW
ODBC32.dll	118	SQLNumParams
ODBC32.dll	123	SQLPrepareA
ODBC32.dll	39	SQLColumnPrivilegesA
ODBC32.dll	2	CursorLibLockDbc
ODBC32.dll	7	GetODBCSharedData
ODBC32.dll	171	VFreeErrors
ODBC32.dll	101	SQLGetDiagRecW
ODBC32.dll	97	SQLGetDiagFieldA
ODBC32.dll	75	SQLForeignKeysW
ODBC32.dll	114	SQLMoreResults
ODBC32.dll	89	SQLGetData
ODBC32.dll	77	SQLFreeEnv
ODBC32.dll	133	SQLProceduresW
ODBC32.dll	91	SQLGetDescFieldA
ODBC32.dll	88	SQLGetCursorNameW
ODBC32.dll	170	SearchStatusCode
ODBC32.dll	13	OpenODBCPerfData
ODBC32.dll	85	SQLGetConnectOptionW
ODBC32.dll	81	SQLGetConnectAttrA
ODBC32.dll	95	SQLGetDescRecW
ODBC32.dll	158	SQLSpecialColumnsA
ODBC32.dll	50	SQLDataSourcesW
ODBC32.dll	23	SQLBindParam
ODBC32.dll	87	SQLGetCursorNameA
ODBC32.dll	134	SQLPutData
ODBC32.dll	105	SQLGetInfoA
ODBC32.dll	65	SQLErrorW
ODBC32.dll	49	SQLDataSourcesA
ODBC32.dll	26	SQLBrowseConnectA
ODBC32.dll	54	SQLDescribeParam
ODBC32.dll	100	SQLGetDiagRecA
ODBC32.dll	9	ODBCGetTryWaitValue
ODBC32.dll	173	ValidateErrorQueue
ODBC32.dll	140	SQLSetConnectOptionA
ODBC32.dll	27	SQLBrowseConnectW
ODBC32.dll	16	PostODBCError
ODBC32.dll	64	SQLErrorA
ODBC32.dll	47	SQLCopyDesc
ODBC32.dll	121	SQLParamOptions
ODBC32.dll	144	SQLSetCursorNameW
ODBC32.dll	116	SQLNativeSqlA
ODBC32.dll	119	SQLNumResultCols
ODBC32.dll	14	PostComponentError
ODBC32.dll	71	SQLFetch
ODBC32.dll	152	SQLSetScrollOptions
ODBC32.dll	17	SQLAllocConnect
KERNEL32.dll	294	GetModuleHandleA
KERNEL32.dll	781	LoadLibraryA
KERNEL32.dll	278	FindAtomW
KERNEL32.dll	77	CloseHandle
KERNEL32.dll	1012	SetConsoleCursorPosition
KERNEL32.dll	1008	SetConsoleCtrlHandler
KERNEL32.dll	551	GetProcAddress
KERNEL32.dll	1121	SetUnhandledExceptionFilter
KERNEL32.dll	1181	VirtualAlloc
KERNEL32.dll	93	ConvertDefaultLocale
KERNEL32.dll	1263	lstrcmpA
KERNEL32.dll	503	GetModuleHandleA
KERNEL32.dll	883	QueryPerformanceCounter
KERNEL32.dll	1113	SetThreadPriority
KERNEL32.dll	1062	SetFilePointer
KERNEL32.dll	892	QueueUserWorkItem
KERNEL32.dll	1038	SetCurrentDirectoryA
KERNEL32.dll	336	GetStartupInfoA

StringTable 000C0002

ProductName	Kbyro rao gec
CompanyName	Vfe jmoxg hyry b
LegalCopyright	Copyright © w vctwxfja
InternalName	Mvwuweht
ProductVersion	9.907
FileVersion	9.907
FileDescription	Mmfyauh aezhuj
OriginalFilename	Mvwuweht

VS_FIXEDFILEINFO

FileVersion	9.907.0.0
ProductVersion	9.907.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	184320	EXE	05/18/2017 12:48:44	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

bicho.exe-

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000C0002

VS_FIXEDFILEINFO

bicho.exe
-