MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

offsetsizetypecomment
0194560EXE05/28/2011 16:04:29#
2f800575355RAREncrypted Headers!#
bbf7b4385BINoverlay data past EOF#
Type = Rar
Solid = -
Blocks = 6
Multivolume = -
Volumes = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2012-05-14 12:47:33 ....A        20167         5873  Readme.txt
2012-05-15 11:45:04 ....A        76690        65051  Smadav.loov
2010-02-19 17:26:20 ....A        97792        44967  SmadExtc.dll
2011-07-10 17:45:57 ....A        73728        15410  Smadav-Updater.exe
2012-05-14 12:26:41 ....A       103936        50207  SmadEngine.dll
2012-05-14 12:43:13 ....A      1511424       395613  Smadav 2012 Rev. 9.0.exe
------------------- ----- ------------ ------------  ------------------------
                               1883737       577121  6 files, 0 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x0