filename | out.exe | |
---|---|---|
size | 28875 (0x70cb) | |
md5 | 3f467df28c5709c518931880a7341082 | |
type | PE32 executable (console) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x7fa | 0 | RWX CODE | |
.rdata | 0x2000 | 0x544 | 0 | RW- IDATA | |
.data | 0x3000 | 0x39c | 0 | RW- IDATA | |
.hdata | 0x1000 | 0x7000 | 0x6200 | RWX CODE IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x2194 | 0x3c | |
RESOURCE | 0 | 0 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0x4000 | 0x148 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0x20d0 | 0x40 | |
Bound_IAT | 0 | 0 | |
IAT | 0x2000 | 0xa8 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
50654145 | |||
184549376 | |||
1800565596 | |||
2088600354 | |||
1406110716 | |||
1199784672 | |||
2018871560 | |||
2139346947 | |||
199127555 | |||
923756614 | |||
709903620 | |||
1267400766 | |||
191383295 | |||
1807837262 | |||
942174995 | |||
462227179 |
Scanning the drive for archives: 1 file, 28875 bytes (29 KiB) Errors: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=135, TimeDateStamp=1931542403, ForwarderChain=614763817, Name=0, FirstThunk=16547203, module_name=nil, original_first_thunk=nil, first_thunk=nil>
[?] can't find file_offset of VA 0xc708458b
[?] can't find file_offset of VA 0xe9000000
[?] can't find file_offset of VA 0xabdc1840
[?] can't find file_offset of VA 0x484e890f
[?] can't find file_offset of VA 0x22e9003e
[?] can't find file_offset of VA 0x1506c7
[?] can't find file_offset of VA 0x24a48d29
[?] can't find file_offset of VA 0x468b0000
[?] can't find file_offset of VA 0xfc4dff02
[?] can't find file_offset of VA 0xfc7d83
[?] can't find file_offset of VA 0xe0d3cf8b
[?] can't find file_offset of VA 0x4e8bde72
[?] can't find file_offset of VA 0x8c78342
[?] can't find file_offset of VA 0x1b848
[?] can't find file_offset of VA 0x8e01ebd3
[?] can't find file_offset of VA 0xe0d30000
[?] can't find file_offset of VA 0x8b000000
[?] can't find file_offset of VA 0x89404e8b
[?] can't find file_offset of VA 0x1b8584e
[?] can't find file_offset of VA 0x88048b50
[?] can't find file_offset of VA 0xd3000000
[?] can't find file_offset of VA 0xe9c1c88b
[?] can't find file_offset of VA 0xfc7d83
[?] can't find file_offset of VA 0xc9b60f08
[?] can't find file_offset of VA 0x3e7840f
[?] can't find file_offset of VA 0x42584e8b
[?] can't find file_offset of VA 0xb60f0000
[?] can't find file_offset of VA 0x308c783
[?] can't find file_offset of VA 0x2348f855
[?] can't find file_offset of VA 0x1b8d8
[?] can't find file_offset of VA 0x81048bc3
[?] can't find file_offset of VA 0xa8c177cf
[?] can't find file_offset of VA 0xe9c1c88b
[?] can't find file_offset of VA 0xb0850ff0
[?] can't find file_offset of VA 0x4d89c9b6
[?] can't find file_offset of VA 0x8b000000
[?] can't find file_offset of VA 0xc8b60fe4
[?] can't find file_offset of VA 0xe44d8be0
[?] can't find file_offset of VA 0x89e44d03
[?] can't find file_offset of VA 0xd3c32348
[?] can't find file_offset of VA 0x48b5046
[?] can't find file_offset of VA 0xf44d8be8
[?] can't find file_offset of VA 0x4db60f88
[?] can't find file_offset of VA 0x5676c73b
[?] can't find file_offset of VA 0xf44589d4
[?] can't find file_offset of VA 0xfc7d83
[?] can't find file_offset of VA 0xdc4d8be0
[?] can't find file_offset of VA 0x357840f
[?] can't find file_offset of VA 0x42fc4dff
[?] can't find file_offset of VA 0x1b8c8
[?] can't find file_offset of VA 0xb60fd803
[?] can't find file_offset of VA 0xe0d30000
[?] can't find file_offset of VA 0xb70fe8d3
[?] can't find file_offset of VA 0x83e44d8b
[?] can't find file_offset of VA 0xc103de4d
[?] can't find file_offset of VA 0x3c0b60f
[?] can't find file_offset of VA 0x8b504e8b
[?] can't find file_offset of VA 0xc73be445
[?] can't find file_offset of VA 0xc48e01f9
[?] can't find file_offset of VA 0xb60faa77
[?] can't find file_offset of VA 0x8b00001b
[?] can't find file_offset of VA 0x2bebd300
[?] can't find file_offset of VA 0x8e9c1c8
[?] can't find file_offset of VA 0xe44d89f9
[?] can't find file_offset of VA 0x72e9003e
[?] can't find file_offset of VA 0xf7440a8
[?] can't find file_offset of VA 0x8b000002
[?] can't find file_offset of VA 0x48468944
[?] can't find file_offset of VA 0xc0b60fc8
[?] can't find file_offset of VA 0x1706c7
[?] can't find file_offset of VA 0xfc7d8322
[?] can't find file_offset of VA 0x468b0000
[?] can't find file_offset of VA 0xa6840f00
[?] can't find file_offset of VA 0xc78342e0
[?] can't find file_offset of VA 0xf000002
[?] can't find file_offset of VA 0xf8558908
[?] can't find file_offset of VA 0xd3000000
[?] can't find file_offset of VA 0x7e3bd803
[?] can't find file_offset of VA 0x48f92be0
[?] can't find file_offset of VA 0x1806c700
[?] can't find file_offset of VA 0x4601c323
[?] can't find file_offset of VA 0x83000000
[?] can't find file_offset of VA 0x8bf04d2b
[?] can't find file_offset of VA 0xf00f07d
[?] can't find file_offset of VA 0xc13b4446
[?] can't find file_offset of VA 0x1bc0be83
[?] can't find file_offset of VA 0xc12b5476
[?] can't find file_offset of VA 0x74000000
[?] can't find file_offset of VA 0x1d5
[?] can't find file_offset of VA 0x84d8b0f
[?] can't find file_offset of VA 0x3b304e8b
[?] can't find file_offset of VA 0xc82bf445
[?] can't find file_offset of VA 0x2b0f76c1
[?] can't find file_offset of VA 0x4e8b0beb
[?] can't find file_offset of VA 0x89404e8b
[?] can't find file_offset of VA 0x3c82b34
[?] can't find file_offset of VA 0xc13bdc4d
[?] can't find file_offset of VA 0x4d894046
[?] can't find file_offset of VA 0xc18b1576
[?] can't find file_offset of VA 0xdc4589d4
[?] can't find file_offset of VA 0x2bf44589
[?] can't find file_offset of VA 0x8bf44589
[?] can't find file_offset of VA 0xf04d89c8
[?] can't find file_offset of VA 0x4589404e
[?] can't find file_offset of VA 0x2bdc4d8b
[?] can't find file_offset of VA 0x8b03ebd4
[?] can't find file_offset of VA 0x4dff4008
[?] can't find file_offset of VA 0x4d8bd445
[?] can't find file_offset of VA 0xe84589f4
[?] can't find file_offset of VA 0x1406c7
[?] can't find file_offset of VA 0x7e83e975
[?] can't find file_offset of VA 0x48e90000
[?] can't find file_offset of VA 0xe8458b00
[?] can't find file_offset of VA 0x83000001
[?] can't find file_offset of VA 0x88404e8a
[?] can't find file_offset of VA 0x24e90000
[?] can't find file_offset of VA 0x4dff4008
[?] can't find file_offset of VA 0x83000001
[?] can't find file_offset of VA 0x7d832273
[?] can't find file_offset of VA 0xf00087e
[?] can't find file_offset of VA 0x840f00fc
[?] can't find file_offset of VA 0x8342e0d3
[?] can't find file_offset of VA 0x165
[?] can't find file_offset of VA 0x558908c7
[?] can't find file_offset of VA 0x4d8bf045
[?] can't find file_offset of VA 0x83d803f8
[?] can't find file_offset of VA 0x14410108
[?] can't find file_offset of VA 0x18740010
[?] can't find file_offset of VA 0x891c4601
[?] can't find file_offset of VA 0x2be84d8b
[?] can't find file_offset of VA 0x9aae8e0
[?] can't find file_offset of VA 0x18468bc8
[?] can't find file_offset of VA 0x10eb0000
[?] can't find file_offset of VA 0x2f8
[?] can't find file_offset of VA 0x8be0458b
[?] can't find file_offset of VA 0x8bf8558b
[?] can't find file_offset of VA 0x89f0458b
[?] can't find file_offset of VA 0x4689084d
[?] can't find file_offset of VA 0xc38be045
[?] can't find file_offset of VA 0xcb8bc103
[?] can't find file_offset of VA 0x252375
[?] can't find file_offset of VA 0x8108e9c1
[?] can't find file_offset of VA 0x318e9c1
[?] can't find file_offset of VA 0xff00e1
[?] can't find file_offset of VA 0x18463bc1
[?] can't find file_offset of VA 0xdb335beb
[?] can't find file_offset of VA 0x458b0c74
[?] can't find file_offset of VA 0x6c7ff33
[?] can't find file_offset of VA 0x7e830000
[?] can't find file_offset of VA 0x1b
[?] can't find file_offset of VA 0x840f0010