filenamekopassa.exe
size902331 (0xdc4bb)
md5344ea67e38000c062568f7c0c32cc13e
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
1272913
1181683
10816840
14729921
2991781
1980224
008
19803419
10247
11844736
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3f58aea9
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x24200
SizeOfInitializedData0x57c00
SizeOfUninitializedData0
AddressOfEntryPoint0x22cca
BaseOfCode0x1000
BaseOfData0x26000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x80000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v4.x

Sections

namevavsizeraw sizeflags
.text0x10000x241850x24200R-X CODE
.rdata0x260000x21680x2200R-- IDATA
.data0x290000x547380x3200RW- IDATA
.rsrc0x7e0000x10800x1200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x26b380xf0
RESOURCE0x7e0000x1080
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x260000x408
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#27480
BITMAP#1274680
ICON#17440
DIALOG#182400
DIALOG#1144800
DIALOG#1381660
GROUP_CURSOR#152200
GROUP_ICON#101200
MANIFEST#16960
module_namehintordfunction_name
KERNEL32.dll251GetDateFormatA
KERNEL32.dll345GetSystemDirectoryA
KERNEL32.dll381GetWindowsDirectoryA
KERNEL32.dll202GetCommandLineA
KERNEL32.dll373GetVersionExA
KERNEL32.dll63CreateMutexA
KERNEL32.dll308GetPrivateProfileIntA
KERNEL32.dll314GetPrivateProfileStringA
KERNEL32.dll764lstrcmpA
KERNEL32.dll349GetSystemTime
KERNEL32.dll460LocalFree
KERNEL32.dll456LocalAlloc
KERNEL32.dll372GetVersion
KERNEL32.dll347GetSystemInfo
KERNEL32.dll206GetComputerNameA
KERNEL32.dll609SetEndOfFile
KERNEL32.dll447LCMapStringA
KERNEL32.dll342GetStringTypeW
KERNEL32.dll339GetStringTypeA
KERNEL32.dll305GetOEMCP
KERNEL32.dll185GetACP
KERNEL32.dll773lstrcpynA
KERNEL32.dll191GetCPInfo
KERNEL32.dll277GetFileType
KERNEL32.dll338GetStdHandle
KERNEL32.dll621SetHandleCount
KERNEL32.dll264GetEnvironmentStringsW
KERNEL32.dll262GetEnvironmentStrings
KERNEL32.dll179FreeEnvironmentStringsW
KERNEL32.dll178FreeEnvironmentStringsA
KERNEL32.dll685UnhandledExceptionFilter
KERNEL32.dll419HeapSize
KERNEL32.dll418HeapReAlloc
KERNEL32.dll699VirtualAlloc
KERNEL32.dll703VirtualFree
KERNEL32.dll411HeapCreate
KERNEL32.dll413HeapDestroy
KERNEL32.dll336GetStartupInfoA
KERNEL32.dll559RtlUnwind
KERNEL32.dll670TerminateProcess
KERNEL32.dll409HeapAlloc
KERNEL32.dll415HeapFree
KERNEL32.dll267GetExitCodeProcess
KERNEL32.dll620SetFileTime
KERNEL32.dll397GlobalMemoryStatus
KERNEL32.dll334GetShortPathNameA
KERNEL32.dll68CreateProcessA
KERNEL32.dll612SetErrorMode
KERNEL32.dll741WritePrivateProfileStringA
KERNEL32.dll739WritePrivateProfileSectionA
KERNEL32.dll478MoveFileExA
KERNEL32.dll247GetCurrentProcess
KERNEL32.dll125ExitProcess
KERNEL32.dll722WideCharToMultiByte
KERNEL32.dll292GetModuleFileNameA
KERNEL32.dll551RemoveDirectoryA
KERNEL32.dll276GetFileTime
KERNEL32.dll696VerLanguageNameA
KERNEL32.dll32CompareFileTime
KERNEL32.dll40CopyFileA
KERNEL32.dll274GetFileSize
KERNEL32.dll286GetLogicalDriveStringsA
KERNEL32.dll180FreeLibrary
KERNEL32.dll245GetCurrentDirectoryA
KERNEL32.dll605SetCurrentDirectoryA
KERNEL32.dll282GetLastError
KERNEL32.dll448LCMapStringW
KERNEL32.dll484MultiByteToWideChar
KERNEL32.dll616SetFileAttributesA
KERNEL32.dll357GetTempPathA
KERNEL32.dll269GetFileAttributesA
KERNEL32.dll45CreateDirectoryA
KERNEL32.dll284GetLocaleInfoA
KERNEL32.dll148FindFirstFileA
KERNEL32.dll767lstrcmpiA
KERNEL32.dll157FindNextFileA
KERNEL32.dll144FindClose
KERNEL32.dll260GetDriveTypeA
KERNEL32.dll761lstrcatA
KERNEL32.dll294GetModuleHandleA
KERNEL32.dll450LoadLibraryA
KERNEL32.dll318GetProcAddress
KERNEL32.dll365GetTickCount
KERNEL32.dll662Sleep
KERNEL32.dll249GetCurrentThread
KERNEL32.dll519QueryPerformanceFrequency
KERNEL32.dll518QueryPerformanceCounter
KERNEL32.dll361GetThreadPriority
KERNEL32.dll647SetThreadPriority
KERNEL32.dll399GlobalReAlloc
KERNEL32.dll403GlobalUnlock
KERNEL32.dll392GlobalFree
KERNEL32.dll385GlobalAlloc
KERNEL32.dll396GlobalLock
KERNEL32.dll483MulDiv
KERNEL32.dll776lstrlenA
KERNEL32.dll735WriteFile
KERNEL32.dll536ReadFile
KERNEL32.dll770lstrcpyA
KERNEL32.dll618SetFilePointer
KERNEL32.dll52CreateFileA
KERNEL32.dll27CloseHandle
KERNEL32.dll87DeleteFileA
USER32.dll213FindWindowA
USER32.dll396IsIconic
USER32.dll478PostMessageA
USER32.dll498RegisterClassA
USER32.dll240GetClientRect
USER32.dll458MsgWaitForMultipleObjects
USER32.dll476PeekMessageA
USER32.dll298GetMessageA
USER32.dll642TranslateMessage
USER32.dll149DispatchMessageA
USER32.dll211ExitWindowsEx
USER32.dll677WaitMessage
USER32.dll405KillTimer
USER32.dll603SetWindowPos
USER32.dll408LoadBitmapA
USER32.dll260GetDlgItemTextA
USER32.dll79CreateDialogParamA
USER32.dll556SetDlgItemTextA
USER32.dll527SendDlgItemMessageA
USER32.dll326GetSystemMetrics
USER32.dll499RegisterClassExA
USER32.dll55ChildWindowFromPoint
USER32.dll342GetWindowLongA
USER32.dll392IsDialogMessageA
USER32.dll253GetDC
USER32.dll515ReleaseDC
USER32.dll221GetActiveWindow
USER32.dll446MessageBoxA
USER32.dll68CopyRect
USER32.dll212FillRect
USER32.dll165DrawEdge
USER32.dll185EndDialog
USER32.dll142DestroyWindow
USER32.dll132DefWindowProcA
USER32.dll348GetWindowRect
USER32.dll581SetRectEmpty
USER32.dll255GetDesktopWindow
USER32.dll197EnumDisplaySettingsA
USER32.dll594SetTimer
USER32.dll625SystemParametersInfoA
USER32.dll560SetForegroundWindow
USER32.dll147DialogBoxParamA
USER32.dll183EnableWindow
USER32.dll550SetCursor
USER32.dll378InvalidateRect
USER32.dll414LoadIconA
USER32.dll416LoadImageA
USER32.dll480PostQuitMessage
USER32.dll532SendMessageA
USER32.dll522ScreenToClient
USER32.dll252GetCursorPos
USER32.dll323GetSysColor
USER32.dll351GetWindowTextLengthA
USER32.dll350GetWindowTextA
USER32.dll258GetDlgItem
USER32.dll89CreateWindowExA
USER32.dll600SetWindowLongA
USER32.dll559SetFocus
USER32.dll325GetSystemMenu
USER32.dll135DeleteMenu
USER32.dll7AppendMenuA
USER32.dll618ShowWindow
USER32.dll606SetWindowTextA
USER32.dll410LoadCursorA
GDI32.dll448SaveDC
GDI32.dll482SetMapMode
GDI32.dll502SetViewportOrgEx
GDI32.dll441RestoreDC
GDI32.dll508StartDocA
GDI32.dll517TextOutA
GDI32.dll462SetBkMode
GDI32.dll455SelectObject
GDI32.dll54CreateFontA
GDI32.dll293GetDeviceCaps
GDI32.dll17BitBlt
GDI32.dll80DeleteDC
GDI32.dll83DeleteObject
GDI32.dll77CreateSolidBrush
GDI32.dll351GetStockObject
GDI32.dll461SetBkColor
GDI32.dll499SetTextColor
GDI32.dll41CreateCompatibleBitmap
GDI32.dll42CreateCompatibleDC
GDI32.dll513StretchDIBits
GDI32.dll366GetTextExtentPoint32A
GDI32.dll36CreateBitmap
GDI32.dll48CreateDIBitmap
GDI32.dll66CreatePalette
GDI32.dll3AddFontResourceA
GDI32.dll75CreateScalableFontResourceA
GDI32.dll433RemoveFontResourceA
GDI32.dll90EndDoc
GDI32.dll511StartPage
GDI32.dll92EndPage
comdlg32.dll9GetOpenFileNameA
comdlg32.dll16PrintDlgA
ADVAPI32.dll347RegCloseKey
ADVAPI32.dll370RegOpenKeyExA
ADVAPI32.dll23AdjustTokenPrivileges
ADVAPI32.dll245LookupPrivilegeValueA
ADVAPI32.dll356RegDeleteValueA
ADVAPI32.dll374RegQueryInfoKeyA
ADVAPI32.dll359RegEnumKeyExA
ADVAPI32.dll329OpenThreadToken
ADVAPI32.dll123DuplicateToken
ADVAPI32.dll24AllocateAndInitializeSid
ADVAPI32.dll223InitializeSecurityDescriptor
ADVAPI32.dll173GetLengthSid
ADVAPI32.dll222InitializeAcl
ADVAPI32.dll11AddAccessAllowedAce
ADVAPI32.dll421SetSecurityDescriptorDacl
ADVAPI32.dll422SetSecurityDescriptorGroup
ADVAPI32.dll423SetSecurityDescriptorOwner
ADVAPI32.dll232IsValidSecurityDescriptor
ADVAPI32.dll2AccessCheck
ADVAPI32.dll157FreeSid
ADVAPI32.dll215GetUserNameA
ADVAPI32.dll390RegSetValueExA
ADVAPI32.dll351RegCreateKeyExA
ADVAPI32.dll322OpenProcessToken
ADVAPI32.dll379RegQueryValueExA
SHELL32.dll63SHFileOperationA
SHELL32.dll57SHBrowseForFolderA
SHELL32.dll83SHGetSpecialFolderLocation
SHELL32.dll80SHGetPathFromIDListA
SHELL32.dll75SHGetMalloc
SHELL32.dll114ShellExecuteA
SHELL32.dll59SHChangeNotify
ole32.dll83CoUninitialize
ole32.dll45CoInitialize
ole32.dll224OleUninitialize
ole32.dll13CoCreateInstance
ole32.dll201OleInitialize
OLEAUT32.dll163
OLEAUT32.dll161
WINMM.dll178waveOutGetNumDevs
WINMM.dll83midiOutGetNumDevs
WINMM.dll30joyGetPos
COMCTL32.dll17
COMCTL32.dll33ImageList_Create
COMCTL32.dll28ImageList_Add
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
offsetsizetypecomment
0175104EXE09/05/2003 15:41:29#
15c115HTM#
69702824PNG(24 x 24)#
69a9e1786PNG(24 x 24)#
6a1fc673PNG(71 x 47)#
6a5043160PNG(71 x 47)#
6b1bf684PNG(24 x 24)#
6b4d11036PNG(24 x 24)#
6b940976PNG(24 x 24)#
6bd741172PNG(24 x 24)#
6c26b943PNG(24 x 24)#
6c6801790PNG(24 x 24)#
6cde81695PNG(24 x 24)#
6d4eb815PNG(24 x 24)#
6d883136PNG(11 x 24)#
6d970892PNG(24 x 24)#
6dd4e825PNG(71 x 47)#
6e0e9658PNG(24 x 24)#
6e3df647PNG(24 x 24)#
6e6d1649PNG(24 x 24)#
6e9c3649PNG(24 x 24)#
6ecb01171PNG(24 x 24)#
6f1a9627PNG(24 x 24)#
6f47f905PNG(24 x 24)#
6f870869PNG(24 x 24)#
6fc3a712PNG(24 x 24)#
6ff6a1081PNG(24 x 24)#
70408311PNG(12 x 15)#
705ab1273PNG(26 x 26)#
70b09467PNG(24 x 24)#
70d3f622PNG(24 x 24)#
76509662PNG(71 x 47)#
7679f417052BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 902331 bytes (882 KiB)


--
Type = gzip
ERRORS:
There are data after the end of archive
Offset = 194639
Physical Size = 165203
Tail Size = 542489
Headers Size = 10
Streams = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....       665946       165203  data~
------------------- ----- ------------ ------------  ------------------------
                                665946       165203  1 files

Warnings: 1

Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK