filename | ComparingString.exe | |
---|---|---|
size | 5120 (0x1400) | |
md5 | 233e0221b5ce261864ab0e1165ab82ac | |
type | PE32 executable (console) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xc0 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x964 | 0xa00 | R-X CODE | |
.rdata | 0x2000 | 0x308 | 0x400 | R-- IDATA | |
.data | 0x3000 | 0x947 | 0x200 | RW- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x2204 | 0x3c | |
RESOURCE | 0 | 0 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0x2000 | 0x2c | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|
Scanning the drive for archives: 1 file, 5120 bytes (5 KiB) Errors: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=82608896, TimeDateStamp=313832, ForwarderChain=4098213632, Name=0, FirstThunk=539235839, module_name=nil, original_first_thunk=nil, first_thunk=nil>
[?] can't find file_offset of VA 0xf603e800
[?] can't find file_offset of VA 0x96440040
[?] can't find file_offset of VA 0x40303805
[?] can't find file_offset of VA 0x6a006a
[?] can't find file_offset of VA 0x55c3ea00
[?] can't find file_offset of VA 0xfe68036a
[?] can't find file_offset of VA 0x7d830c4d
[?] can't find file_offset of VA 0xff004021
[?] can't find file_offset of VA 0xd74000c
[?] can't find file_offset of VA 0x8c2c9ed
[?] can't find file_offset of VA 0xe814ec83
[?] can't find file_offset of VA 0xec8b5500
[?] can't find file_offset of VA 0x810b7400
[?] can't find file_offset of VA 0x8458b51
[?] can't find file_offset of VA 0xf9
[?] can't find file_offset of VA 0xec8b5500
[?] can't find file_offset of VA 0x41037480
[?] can't find file_offset of VA 0x660c558b
[?] can't find file_offset of VA 0x6600b44a
[?] can't find file_offset of VA 0xb308458b
[?] can't find file_offset of VA 0x66084589
[?] can't find file_offset of VA 0xe8c483ec
[?] can't find file_offset of VA 0x87d83
[?] can't find file_offset of VA 0xffff5be8
[?] can't find file_offset of VA 0x896e8f5
[?] can't find file_offset of VA 0x202c68ff
[?] can't find file_offset of VA 0x45890000
[?] can't find file_offset of VA 0xe8fc75ff
[?] can't find file_offset of VA 0x6a006afc
[?] can't find file_offset of VA 0x892
[?] can't find file_offset of VA 0xec830040
[?] can't find file_offset of VA 0xff08ec83
[?] can't find file_offset of VA 0x87ce804
[?] can't find file_offset of VA 0x30f
[?] can't find file_offset of VA 0x15ff0000
[?] can't find file_offset of VA 0x6a006a
[?] can't find file_offset of VA 0x57e8fc75
[?] can't find file_offset of VA 0x20ce35ff
[?] can't find file_offset of VA 0x83000008
[?] can't find file_offset of VA 0x845e8
[?] can't find file_offset of VA 0x106a08ec
[?] can't find file_offset of VA 0xf445c700
[?] can't find file_offset of VA 0xd3c2774
[?] can't find file_offset of VA 0x5d8b3874
[?] can't find file_offset of VA 0x6a006a00
[?] can't find file_offset of VA 0x428388f4
[?] can't find file_offset of VA 0x50016a00
[?] can't find file_offset of VA 0xf47d83cf
[?] can't find file_offset of VA 0xe8fc75ff
[?] can't find file_offset of VA 0xffc97400
[?] can't find file_offset of VA 0x7d83baeb
[?] can't find file_offset of VA 0x16af44d
[?] can't find file_offset of VA 0x2d7500f4
[?] can't find file_offset of VA 0xff004020
[?] can't find file_offset of VA 0x6a006a
[?] can't find file_offset of VA 0xdbe8fc75
[?] can't find file_offset of VA 0xff004021
[?] can't find file_offset of VA 0xff000007
[?] can't find file_offset of VA 0x84e8fc75
[?] can't find file_offset of VA 0x6a000040
[?] can't find file_offset of VA 0x74fffffe
[?] can't find file_offset of VA 0x806800
[?] can't find file_offset of VA 0x38426880
[?] can't find file_offset of VA 0x36a0000
[?] can't find file_offset of VA 0x7be80040
[?] can't find file_offset of VA 0x21c035ff
[?] can't find file_offset of VA 0x83000007
[?] can't find file_offset of VA 0x84680040
[?] can't find file_offset of VA 0x40202415
[?] can't find file_offset of VA 0xff004021
[?] can't find file_offset of VA 0x681e900
[?] can't find file_offset of VA 0x3d000007
[?] can't find file_offset of VA 0x45890000
[?] can't find file_offset of VA 0x400
[?] can't find file_offset of VA 0xb60f6600
[?] can't find file_offset of VA 0x6a297e
[?] can't find file_offset of VA 0x685066c0
[?] can't find file_offset of VA 0x202415ff
[?] can't find file_offset of VA 0x402139
[?] can't find file_offset of VA 0x44e90040
[?] can't find file_offset of VA 0x40303c
[?] can't find file_offset of VA 0x6a000006
[?] can't find file_offset of VA 0xe8f875ff
[?] can't find file_offset of VA 0x4030
[?] can't find file_offset of VA 0x71a
[?] can't find file_offset of VA 0xe8f875ff
[?] can't find file_offset of VA 0x6afffffd
[?] can't find file_offset of VA 0x6e8
[?] can't find file_offset of VA 0xff006a00
[?] can't find file_offset of VA 0x6f0e8fc
[?] can't find file_offset of VA 0x40394335
[?] can't find file_offset of VA 0xec830000
[?] can't find file_offset of VA 0x6de
[?] can't find file_offset of VA 0x68026a08
[?] can't find file_offset of VA 0x6a006a
[?] can't find file_offset of VA 0xc7000006
[?] can't find file_offset of VA 0xe368106a
[?] can't find file_offset of VA 0xf445
[?] can't find file_offset of VA 0x38740d3c
[?] can't find file_offset of VA 0x15ff0000
[?] can't find file_offset of VA 0x88f45d8b
[?] can't find file_offset of VA 0x6a006a00
[?] can't find file_offset of VA 0x40384283
[?] can't find file_offset of VA 0x75ff5001
[?] can't find file_offset of VA 0x7400f47d
[?] can't find file_offset of VA 0x698e8fc
[?] can't find file_offset of VA 0xf44dffc9
[?] can't find file_offset of VA 0xf47d83
[?] can't find file_offset of VA 0x75ff016a
[?] can't find file_offset of VA 0x6a2d75
[?] can't find file_offset of VA 0xfc75ff00
[?] can't find file_offset of VA 0x35ff006a
[?] can't find file_offset of VA 0x661e8
[?] can't find file_offset of VA 0xfc75ff00
[?] can't find file_offset of VA 0x2415ff00
[?] can't find file_offset of VA 0xfffd0ae8
[?] can't find file_offset of VA 0x68006a00
[?] can't find file_offset of VA 0x8b8774ff
[?] can't find file_offset of VA 0x80
[?] can't find file_offset of VA 0x403842
[?] can't find file_offset of VA 0x6a036a
[?] can't find file_offset of VA 0x601e8
[?] can't find file_offset of VA 0x4021c0
[?] can't find file_offset of VA 0xfff88300
[?] can't find file_offset of VA 0x40218468
[?] can't find file_offset of VA 0xe9004020
[?] can't find file_offset of VA 0xfc75ff00
[?] can't find file_offset of VA 0x507
[?] can't find file_offset of VA 0x4003d00
[?] can't find file_offset of VA 0x6af84589
[?] can't find file_offset of VA 0x297e0000
[?] can't find file_offset of VA 0x66c0b60f
[?] can't find file_offset of VA 0x6a006a
[?] can't find file_offset of VA 0x21396850
[?] can't find file_offset of VA 0x402024
[?] can't find file_offset of VA 0x75ff0040
[?] can't find file_offset of VA 0x4cae9
[?] can't find file_offset of VA 0x75ff0040
[?] can't find file_offset of VA 0x68006a00
[?] can't find file_offset of VA 0x5a0e8f8
[?] can't find file_offset of VA 0x75ff0000
[?] can't find file_offset of VA 0x43a10000
[?] can't find file_offset of VA 0x56ee8f8
[?] can't find file_offset of VA 0x6a006aff
[?] can't find file_offset of VA 0x75ff0000
[?] can't find file_offset of VA 0x4335ff00
[?] can't find file_offset of VA 0x576
[?] can't find file_offset of VA 0x68004039
[?] can't find file_offset of VA 0x6a08ec83
[?] can't find file_offset of VA 0xf4e90000
[?] can't find file_offset of VA 0x21fc6802
[?] can't find file_offset of VA 0x6a000000
[?] can't find file_offset of VA 0x54ce8fc
[?] can't find file_offset of VA 0x6a006a00
[?] can't find file_offset of VA 0x45c70000
[?] can't find file_offset of VA 0x3c2e7408
[?] can't find file_offset of VA 0xf4
[?] can't find file_offset of VA 0x8b3f740d
[?] can't find file_offset of VA 0x6a0040
[?] can't find file_offset of VA 0x8388f45d
[?] can't find file_offset of VA 0x16a006a
[?] can't find file_offset of VA 0xf47d81
[?] can't find file_offset of VA 0xfc75ff53
[?] can't find file_offset of VA 0x75000004
[?] can't find file_offset of VA 0xe8fc75ff
[?] can't find file_offset of VA 0xf47d83c8
[?] can't find file_offset of VA 0xfffffbb7
[?] can't find file_offset of VA 0x6a006a
[?] can't find file_offset of VA 0x5d8bb3eb
[?] can't find file_offset of VA 0xfc68026a
[?] can't find file_offset of VA 0x106a08ec
[?] can't find file_offset of VA 0xff004021
[?] can't find file_offset of VA 0x4020e368