filename | arisx06.exe | |
---|---|---|
size | 1563060 (0x17d9b4) | |
md5 | 6806e5edf2166450c4f5c0be21223eed | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x100 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| 00000040: eb ae 85 68 90 cf eb 3b af aa bb 3b af cf eb 3b |...h...;...;...;| 00000050: 6c c0 b6 3b a7 cf eb 3b 2c d3 e5 3b ae cf eb 3b |l..;...;,..;...;| 00000060: c0 d0 e0 3b ae cf eb 3b c0 d0 e1 3b a4 cf eb 3b |...;...;...;...;| 00000070: c0 d0 ef 3b ad cf eb 3b 99 e9 e0 3b ac cf eb 3b |...;...;...;...;| 00000080: ff e9 ef 3b ac cf eb 3b af cf ea 3b 46 cf eb 3b |...;...;...;F..;| 00000090: 47 d0 e0 3b a9 cf eb 3b 68 c9 ed 3b ae cf eb 3b |G..;...;h..;...;| 000000a0: 9d 69 63 68 af cf eb 3b 00 00 00 00 00 00 00 00 |.ich...;........| 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x1790 | 0x2000 | --X CODE IDATA UDATA SHARED | |
.rdata | 0x3000 | 0x134f | 0x2000 | R-- UDATA | |
.data Q | 0x5000 | 0xd9c | 0xf00 | RW- IDATA | |
.src | 0x6000 | 0x11ff | 0x1f00 | R-- IDATA |
Data Directory
id | lang | string |
---|---|---|
128 | 2067 | |
57627 | 2067 | Open this document |
57628 | 2067 | Open this document |
57629 | 2067 | Open this document |
57630 | 2067 | Open this document |
57631 | 2067 | Open this document |
57632 | 2067 | Erase the selection Erase |
57633 | 2067 | Erase everything Erase All |
57634 | 2067 | Copy the selection and put it on the Clipboard Copy |
57635 | 2067 | Cut the selection and put it on the Clipboard Cut |
57636 | 2067 | Find the specified text Find |
57637 | 2067 | Insert Clipboard contents Paste |
57640 | 2067 | Repeat the last action Repeat |
57641 | 2067 | Replace specific text with different text Replace |
57642 | 2067 | Select the entire document Select All |
57643 | 2067 | Undo the last action Undo |
57644 | 2067 | Redo the previously undone action Redo |
57653 | 2067 | Split造the active window into panes Split |
57664 | 2067 | Display program information, version number and copyright About4Quit the application; prompts to save documents Exit 退 退 |
61440 | 2067 |