paypalcc.exe - MARS PRO-PAYPAL CREDIT CARD PROCESSING SOFTWARE

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	paypalcc.exe
size	815104 (0xc7000)
md5	345f456e558349248652755c482fbfef

type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4df21fb7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x9c000
SizeOfInitializedData	0x2a000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x9d72e
BaseOfCode	0x2000
BaseOfData	0x9e000
ImageBase	0x400000
SectionAlignment	0x2000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xca000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0x8540
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C# / Basic .NET

Sections

name	va	vsize	raw size	flags
.text	0x2000	0x9b734	0x9c000	R-X CODE
.sdata	0x9e000	0x94	0x1000	RW- IDATA
.rsrc	0xa0000	0x27e20	0x28000	R-- IDATA
.reloc	0xc8000	0xc	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x9d6d4	0x57
RESOURCE	0xa0000	0x27e20
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xc8000	0xc
DEBUG	0x9e000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	8
Delay_IAT	0	0
CLR_Header	0x2008	0x48

show previews

type	name	size
ICON	#2	1128
ICON	#3	2440
ICON	#4	4264
ICON	#5	9640
ICON	#6	16936
ICON	#7	21640
ICON	#8	38056
ICON	#9	67624
GROUP_ICON	#32512	118
VERSION	#1	940

module_name	hint	ord	function_name
mscoree.dll			_CorExeMain

StringTable 000004b0

Comments	PAYPAL CREDIT CARD PROCESSING SOFTWARE
CompanyName	MARSOFT, LLC.
FileDescription	MARS PRO-PAYPAL CREDIT CARD PROCESSING SOFTWARE
FileVersion	3.5.1.0
InternalName	paypalcc.exe
LegalCopyright	Copyright © 2009-2011
OriginalFilename	paypalcc.exe
ProductName	MARS PRO
ProductVersion	3.5.1.0
Assembly Version	3.5.1.0

VS_FIXEDFILEINFO

FileVersion	3.5.1.0
ProductVersion	3.5.1.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	815104	EXE	06/10/2011 13:44:23	#
15c1	15	HTM		#
3eec6	25844	JPG		#
4545d	10302	JPG		#
47d3e	2197	JPG		#
48676	2400	JPG		#
49079	315	GIF	(32 x 32)	#
49257	4986	PNG	(48 x 48)	#
4a674	3235	JPG		#
4b3ba	815	GIF	(41 x 41)	#
4b78c	4441	JPG		#
4c988	5932	JPG		#
4e157	5264	JPG		#
4f68a	5513	JPG		#
50cb6	4499	JPG		#
51eec	4121	JPG		#
52fa8	5513	JPG		#
545d4	1981	JPG		#
54e34	856	GIF	(25 x 25)	#
5522f	806	GIF	(25 x 25)	#
555f8	1997	JPG		#
55e68	856	GIF	(25 x 25)	#
56263	788	GIF	(25 x 25)	#
5661a	8731	GIF	(355 x 185)	#
80da5	4520	PNG	(56 x 56)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

paypalcc.exe- MARS PRO-PAYPAL CREDIT CARD PROCESSING SOFTWARE

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

paypalcc.exe
- MARS PRO-PAYPAL CREDIT CARD PROCESSING SOFTWARE