out.exe

info
MZ
PE
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	out.exe
size	28875 (0x70cb)
md5	67097c7d4e9a75b48aa1366f381c96c9

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
147	30729	2
156	30319	3
1	0	40
158	30319	1
171	30319	2
170	30319	20
157	30319	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x511930a1
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0x800
SizeOfInitializedData	0xc00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x12a4
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x7200
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x7fa	0	RWX CODE
.rdata	0x2000	0x544	0	RW- IDATA
.data	0x3000	0x39c	0	RW- IDATA
.hdata	0x1000	0x7000	0x6200	RWX CODE IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x2194	0x3c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x4000	0x148
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x20d0	0x40
Bound_IAT	0	0
IAT	0x2000	0xa8
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
		50654145
		184549376
		1800565596
		2088600354
		1406110716
		1199784672
		2018871560
		2139346947
		199127555
		923756614
		709903620
		1267466089
		191383295
		1807837262
		942174995
		462227179

show previews

offset	size	type	comment
0	26112	EXE	02/11/2013 17:55:45	#
15c1	15	HTM		#
6600	2763	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 28875 bytes (29 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=135, TimeDateStamp=1931542403, ForwarderChain=614763817, Name=0, FirstThunk=16547203, module_name=nil, original_first_thunk=nil, first_thunk=nil>

[?] can't find file_offset of VA 0xc708458b

[?] can't find file_offset of VA 0xe9000000

[?] can't find file_offset of VA 0xabdc1840

[?] can't find file_offset of VA 0x484e890f

[?] can't find file_offset of VA 0x22e9ff69

[?] can't find file_offset of VA 0x1506c7

[?] can't find file_offset of VA 0x24a48d29

[?] can't find file_offset of VA 0x468b0000

[?] can't find file_offset of VA 0xfc4dff02

[?] can't find file_offset of VA 0xfc7d83

[?] can't find file_offset of VA 0xe0d3cf8b

[?] can't find file_offset of VA 0x4e8bde72

[?] can't find file_offset of VA 0x8c78342

[?] can't find file_offset of VA 0x1b848

[?] can't find file_offset of VA 0x8e01ebd3

[?] can't find file_offset of VA 0xe0d30000

[?] can't find file_offset of VA 0x8b000000

[?] can't find file_offset of VA 0x89404e8b

[?] can't find file_offset of VA 0x1b8584e

[?] can't find file_offset of VA 0x88048b50

[?] can't find file_offset of VA 0xd3000000

[?] can't find file_offset of VA 0xe9c1c88b

[?] can't find file_offset of VA 0xfc7d83

[?] can't find file_offset of VA 0xc9b60f08

[?] can't find file_offset of VA 0x3e7840f

[?] can't find file_offset of VA 0x42584e8b

[?] can't find file_offset of VA 0xb60f0000

[?] can't find file_offset of VA 0x308c783

[?] can't find file_offset of VA 0x2348f855

[?] can't find file_offset of VA 0x1b8d8

[?] can't find file_offset of VA 0x81048bc3

[?] can't find file_offset of VA 0xa8c177cf

[?] can't find file_offset of VA 0xe9c1c88b

[?] can't find file_offset of VA 0xb0850ff0

[?] can't find file_offset of VA 0x4d89c9b6

[?] can't find file_offset of VA 0x8b000000

[?] can't find file_offset of VA 0xc8b60fe4

[?] can't find file_offset of VA 0xe44d8be0

[?] can't find file_offset of VA 0x89e44d03

[?] can't find file_offset of VA 0xd3c32348

[?] can't find file_offset of VA 0x48b5046

[?] can't find file_offset of VA 0xf44d8be8

[?] can't find file_offset of VA 0x4db60f88

[?] can't find file_offset of VA 0x5676c73b

[?] can't find file_offset of VA 0xf44589d4

[?] can't find file_offset of VA 0xfc7d83

[?] can't find file_offset of VA 0xdc4d8be0

[?] can't find file_offset of VA 0x357840f

[?] can't find file_offset of VA 0x42fc4dff

[?] can't find file_offset of VA 0x1b8c8

[?] can't find file_offset of VA 0xb60fd803

[?] can't find file_offset of VA 0xe0d30000

[?] can't find file_offset of VA 0xb70fe8d3

[?] can't find file_offset of VA 0x83e44d8b

[?] can't find file_offset of VA 0xc103de4d

[?] can't find file_offset of VA 0x3c0b60f

[?] can't find file_offset of VA 0x8b504e8b

[?] can't find file_offset of VA 0xc73be445

[?] can't find file_offset of VA 0xc48e01f9

[?] can't find file_offset of VA 0xb60faa77

[?] can't find file_offset of VA 0x8b00001b

[?] can't find file_offset of VA 0x2bebd300

[?] can't find file_offset of VA 0x8e9c1c8

[?] can't find file_offset of VA 0xe44d89f9

[?] can't find file_offset of VA 0x72e9ff69

[?] can't find file_offset of VA 0xf7440a8

[?] can't find file_offset of VA 0x8b000002

[?] can't find file_offset of VA 0x48468944

[?] can't find file_offset of VA 0xc0b60fc8

[?] can't find file_offset of VA 0x1706c7

[?] can't find file_offset of VA 0xfc7d8322

[?] can't find file_offset of VA 0x468b0000

[?] can't find file_offset of VA 0xa6840f00

[?] can't find file_offset of VA 0xc78342e0

[?] can't find file_offset of VA 0xf000002

[?] can't find file_offset of VA 0xf8558908

[?] can't find file_offset of VA 0xd3000000

[?] can't find file_offset of VA 0x7e3bd803

[?] can't find file_offset of VA 0x48f92be0

[?] can't find file_offset of VA 0x1806c700

[?] can't find file_offset of VA 0x4601c323

[?] can't find file_offset of VA 0x83000000

[?] can't find file_offset of VA 0x8bf04d2b

[?] can't find file_offset of VA 0xf00f07d

[?] can't find file_offset of VA 0xc13b4446

[?] can't find file_offset of VA 0x1bc0be83

[?] can't find file_offset of VA 0xc12b5476

[?] can't find file_offset of VA 0x74000000

[?] can't find file_offset of VA 0x1d5

[?] can't find file_offset of VA 0x84d8b0f

[?] can't find file_offset of VA 0x3b304e8b

[?] can't find file_offset of VA 0xc82bf445

[?] can't find file_offset of VA 0x2b0f76c1

[?] can't find file_offset of VA 0x4e8b0beb

[?] can't find file_offset of VA 0x89404e8b

[?] can't find file_offset of VA 0x3c82b34

[?] can't find file_offset of VA 0xc13bdc4d

[?] can't find file_offset of VA 0x4d894046

[?] can't find file_offset of VA 0xc18b1576

[?] can't find file_offset of VA 0xdc4589d4

[?] can't find file_offset of VA 0x2bf44589

[?] can't find file_offset of VA 0x8bf44589

[?] can't find file_offset of VA 0xf04d89c8

[?] can't find file_offset of VA 0x4589404e

[?] can't find file_offset of VA 0x2bdc4d8b

[?] can't find file_offset of VA 0x8b03ebd4

[?] can't find file_offset of VA 0x4dff4008

[?] can't find file_offset of VA 0x4d8bd445

[?] can't find file_offset of VA 0xe84589f4

[?] can't find file_offset of VA 0x1406c7

[?] can't find file_offset of VA 0x7e83e975

[?] can't find file_offset of VA 0x48e90000

[?] can't find file_offset of VA 0xe8458b00

[?] can't find file_offset of VA 0x83000001

[?] can't find file_offset of VA 0x88404e8a

[?] can't find file_offset of VA 0x24e90000

[?] can't find file_offset of VA 0x4dff4008

[?] can't find file_offset of VA 0x83000001

[?] can't find file_offset of VA 0x7d832273

[?] can't find file_offset of VA 0xf00087e

[?] can't find file_offset of VA 0x840f00fc

[?] can't find file_offset of VA 0x8342e0d3

[?] can't find file_offset of VA 0x165

[?] can't find file_offset of VA 0x558908c7

[?] can't find file_offset of VA 0x4d8bf045

[?] can't find file_offset of VA 0x83d803f8

[?] can't find file_offset of VA 0x14410108

[?] can't find file_offset of VA 0x18740010

[?] can't find file_offset of VA 0x891c4601

[?] can't find file_offset of VA 0x2be84d8b

[?] can't find file_offset of VA 0x9aae8e0

[?] can't find file_offset of VA 0x18468bc8

[?] can't find file_offset of VA 0x10eb0000

[?] can't find file_offset of VA 0x2f8

[?] can't find file_offset of VA 0x8be0458b

[?] can't find file_offset of VA 0x8bf8558b

[?] can't find file_offset of VA 0x89f0458b

[?] can't find file_offset of VA 0x4689084d

[?] can't find file_offset of VA 0xc38be045

[?] can't find file_offset of VA 0xcb8bc103

[?] can't find file_offset of VA 0x252375

[?] can't find file_offset of VA 0x8108e9c1

[?] can't find file_offset of VA 0x318e9c1

[?] can't find file_offset of VA 0xff00e1

[?] can't find file_offset of VA 0x18463bc1

[?] can't find file_offset of VA 0xdb335beb

[?] can't find file_offset of VA 0x458b0c74

[?] can't find file_offset of VA 0x6c7ff33

[?] can't find file_offset of VA 0x7e830000

[?] can't find file_offset of VA 0x1b

[?] can't find file_offset of VA 0x840f0010