mand1k.exe

info
MZ
PE
imports
exports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	mand1k.exe
size	983 (0x3d7)
md5	23779f268e0843529a438f67ec9e67a2

type	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB) Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x4bbb
blocks_in_file	0x4100
num_relocs	0x8900
header_paragraphs	0x8dd9
min_extra_paragraphs	0xed43
max_extra_paragraphs	0x4550
ss	0
sp	0x14c
checksum	1
ip	0x6a00
cs	0x5904
reloc_table_offset	0x8b44
overlay_number	0x4953
reserved0	0x303007806ebd789
oem_id	0x10b
oem_info	0xb60f
reserved2	0x142b4030
reserved3	0x89128b33
reserved4	0x30eb3314
reserved5	0x10002
reserved6	0x71696dd5
lfanew	0xc

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	1
TimeDateStamp	0x59046a00
PointerToSymbolTable	0x49538b44
NumberOfSymbols	0x6ebd789
SizeOfOptionalHeader	0x78
Characteristics	0x303
Magic	0x10b
LinkerVersion	15.182
SizeOfCode	0x142b4030
SizeOfInitializedData	0x89128b33
SizeOfUninitializedData	0x30eb3314
AddressOfEntryPoint	0x10002
BaseOfCode	0x71696dd5
BaseOfData	0xc
ImageBase	0x400000
SectionAlignment	0x10000
FileAlignment	0x200
OperatingSystemVersion	49114.63
ImageVersion	765.0
SubsystemVersion	4.0
Reserved1	0x420000
SizeOfImage	0x430000
SizeOfHeaders	0x10000
CheckSum	0x5543b3e2
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	1
SizeOfHeapReserve	0
SizeOfHeapCommit	0x46eb
LoaderFlags	0
NumberOfRvaAndSizes	2

Sections

name	va	vsize	raw size	flags
d3dx9_30	0x10000	0x420000	0x200	-W- CODE IDATA UDATA

Data Directory

type	va	size
EXPORT	0x1009c	0x10094
IMPORT	0x10078	0xda0f6

module_name	hint	ord	function_name

ord	entry_va	function_name

module_name
flags	0x5350386a
timestamp	2075-07-16 18:57:03
version	65310.65494
ordinal_base	457723219
nFunctions	1302204497
nNames	629888723
Names(629888723)	0xc1e87bb
Functions(1302204497)	0x1607fa81
NameOrdinals(629888723)	0x1ea7f115

show previews

offset	size	type	comment
15c1	15	HTM		#

Scanning the drive for archives:
1 file, 983 bytes (1 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] unusual size of IMAGE_OPTIONAL_HEADER = 120 (must be 224)

[?] DOS stub offset beyond EOF: 581008

[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=25196784, TimeDateStamp=572618775, ForwarderChain=3012813466, Name=nil, FirstThunk=nil, module_name=nil, original_first_thunk=nil, first_thunk=nil>

[?] can't find file_offset of VA 0x3a000da1

[?] can't find file_offset of VA 0x6a000da1

[?] can't find file_offset of VA 0x5364438d

[?] can't find file_offset of VA 0xfe000da1

[?] can't find file_offset of VA 0x5350386a

[?] can't find file_offset of VA 0x1b484d53

[?] can't find file_offset of VA 0xc683d6ff

[?] can't find file_offset of VA 0x4d9e1051

[?] can't find file_offset of VA 0x1ea7f115

[?] can't find file_offset of VA 0x258b56d3

[?] can't find file_offset of VA 0xb3468ad4

[?] can't find file_offset of VA 0xddc6cd75

[?] can't find file_offset of VA 0xeacb548a

[?] can't find file_offset of VA 0x40483f8d

[?] can't find file_offset of VA 0x3fb5078b

[?] can't find file_offset of VA 0xb04ba111

[?] can't find file_offset of VA 0x9420e7f1

[?] can't find file_offset of VA 0x366cebe2

[?] can't find file_offset of VA 0x2c1eda9e

[?] can't find file_offset of VA 0xb5e8582d

[?] can't find file_offset of VA 0x20da9755

[?] can't find file_offset of VA 0xf79bdef3

[?] can't find file_offset of VA 0xc0d68b44

[?] can't find file_offset of VA 0xcc3bad16

[?] can't find file_offset of VA 0x665b0b0f

[?] can't find file_offset of VA 0xf1f4e597

[?] can't find file_offset of VA 0xb9160dbb

[?] can't find file_offset of VA 0xb7f7d1ea

[?] can't find file_offset of VA 0x3697ebc

[?] can't find file_offset of VA 0x2136544c

[?] can't find file_offset of VA 0x1c58529

[?] can't find file_offset of VA 0x290000bd

[?] can't find file_offset of VA 0x8d9e36e2

[?] can't find file_offset of VA 0x30e58e9

[?] can't find file_offset of VA 0xaed6c5a0

[?] can't find file_offset of VA 0xa94aa667

[?] can't find file_offset of VA 0xe834f0c2

[?] can't find file_offset of VA 0xf8a98ad0

[?] can't find file_offset of VA 0x2f428cf3

[?] can't find file_offset of VA 0xf80b8394

[?] can't find file_offset of VA 0xf8141b7e

[?] can't find file_offset of VA 0xd27513a4

[?] can't find file_offset of VA 0x563366d0

[?] can't find file_offset of VA 0x1f6ddeb0

[?] can't find file_offset of VA 0xcc0c5de7

[?] can't find file_offset of VA 0xa43b9d5e

[?] can't find file_offset of VA 0x6ef38b12

[?] can't find file_offset of VA 0x307cb150

[?] can't find file_offset of VA 0xecc1bd7f

[?] can't find file_offset of VA 0x3279d589

[?] can't find file_offset of VA 0x285fd5a8

[?] can't find file_offset of VA 0xe2d4615c

[?] can't find file_offset of VA 0xcc3db07f

[?] can't find file_offset of VA 0x2de4cf88

[?] can't find file_offset of VA 0xf3a64f47

[?] can't find file_offset of VA 0xdf002bff

[?] can't find file_offset of VA 0x6b94d179

[?] can't find file_offset of VA 0xd791f6ee

[?] can't find file_offset of VA 0x5d15c77e

[?] can't find file_offset of VA 0x465288b5

[?] can't find file_offset of VA 0x4c2cf2ee

[?] can't find file_offset of VA 0xa6cf6583

[?] can't find file_offset of VA 0x3d8eb98

[?] can't find file_offset of VA 0x4a03ae7f

[?] can't find file_offset of VA 0x6ec4ac1a

[?] can't find file_offset of VA 0xde1f7afd

[?] can't find file_offset of VA 0x370e5e7

[?] can't find file_offset of VA 0x50f3e06c

[?] can't find file_offset of VA 0x5fe09d2b

[?] can't find file_offset of VA 0x814f62c1

[?] can't find file_offset of VA 0x3cdc93c0

[?] can't find file_offset of VA 0x8d7a6800

[?] can't find file_offset of VA 0xe3c89a4e

[?] can't find file_offset of VA 0x564af5b1

[?] can't find file_offset of VA 0x9453a58

[?] can't find file_offset of VA 0x3bbab247

[?] can't find file_offset of VA 0x20ff827d

[?] can't find file_offset of VA 0x8d9779a2

[?] can't find file_offset of VA 0x109b2224

[?] can't find file_offset of VA 0x5980e536

[?] can't find file_offset of VA 0x19f4d54d

[?] can't find file_offset of VA 0xecb50591

[?] can't find file_offset of VA 0x3d09989d

[?] can't find file_offset of VA 0x9a4a6be5

[?] can't find file_offset of VA 0x15413ac6

[?] can't find file_offset of VA 0xe4c52c24

[?] can't find file_offset of VA 0xb6af960c

[?] can't find file_offset of VA 0x476104f1

[?] can't find file_offset of VA 0x7e7e4ce1

[?] can't find file_offset of VA 0xdddddfd0

[?] can't find file_offset of VA 0x9926e890

[?] can't find file_offset of VA 0x9784e6c4

[?] can't find file_offset of VA 0x9658994e

[?] can't find file_offset of VA 0x739a88a7

[?] can't find file_offset of VA 0x4c991b2f

[?] can't find file_offset of VA 0xe49b4458

[?] can't find file_offset of VA 0xd7a20c26

[?] can't find file_offset of VA 0x4820fca6

[?] can't find file_offset of VA 0x6260b4c

[?] can't find file_offset of VA 0x4163a4da

[?] can't find file_offset of VA 0x68c84f01

[?] can't find file_offset of VA 0x460639d2

[?] can't find file_offset of VA 0xf10c310f

[?] can't find file_offset of VA 0x2a231e89

[?] can't find file_offset of VA 0xc6c6c72

[?] can't find file_offset of VA 0x6aa9d91e

[?] can't find file_offset of VA 0x169c5578

[?] can't find file_offset of VA 0x9380bacd

[?] can't find file_offset of VA 0x22c44b4

[?] can't find file_offset of VA 0x77ec01bb

[?] can't find file_offset of VA 0x6d9b93fd

[?] can't find file_offset of VA 0x62a83f64

[?] can't find file_offset of VA 0x7da1c0b9

[?] can't find file_offset of VA 0x56d5ee3b

[?] can't find file_offset of VA 0xd6ed0e31

[?] can't find file_offset of VA 0xeb5e1794

[?] can't find file_offset of VA 0xced7ac99

[?] can't find file_offset of VA 0x78e8eaeb

[?] can't find file_offset of VA 0x2b0238b

[?] can't find file_offset of VA 0xbdc35873

[?] can't find file_offset of VA 0x1607fa81

[?] can't find file_offset of VA 0x1ea7f115

[?] can't find file_offset of VA 0xc1e87bb

[?] DOS stub offset beyond EOF: 581008

[?] can't find file_offset of VA 0xc1e87bb

[?] can't find file_offset of VA 0x1607fa81

[?] can't find file_offset of VA 0x1ea7f115