base.exe

info
MZ
PE
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	base.exe
size	1056 (0x420)
md5	8a3af894b70929413c4ed83f4efdca74

type	MS-DOS executable PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x454b
blocks_in_file	0x4e52
num_relocs	0x4c45
header_paragraphs	0x3233
min_extra_paragraphs	0x442e
max_extra_paragraphs	0x4c4c
ss	0
sp	0x4550
checksum	0
ip	0x14c
cs	3
reloc_table_offset	0xb0be
overlay_number	0x11
reserved0	0x7ceb3476ff50ad10
oem_id	0x148
oem_info	0x10f
reserved2	0x6f4c010b
reserved3	0x694c6461
reserved4	0x72617262
reserved5	0x4179
reserved6	0x1018
lfanew	0x10

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x11b0be
PointerToSymbolTable	0xff50ad10
NumberOfSymbols	0x7ceb3476
SizeOfOptionalHeader	0x148
Characteristics	0x10f
Magic	0x10b
LinkerVersion	76.111
SizeOfCode	0x694c6461
SizeOfInitializedData	0x72617262
SizeOfUninitializedData	0x4179
AddressOfEntryPoint	0x1018
BaseOfCode	0x10
BaseOfData	0x2000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.57
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xd000
SizeOfHeaders	0x200
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0xa

Packer / Compiler

Upack v0.36 (Dwing)

Sections

name	va	vsize	raw size	flags
PS��	0x1000	0x3000	0x1f0	RWX CODE IDATA
�@	0x4000	0x8000	0x220	RWX CODE IDATA
^0�	0xc000	0x1000	0x1f0	RWX CODE IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xc1ee	0x14
RESOURCE	0	0
EXCEPTION	0xad3876ff	0xbe3e8b50
SECURITY	0x1000c0f0	0xf359276a
BASERELOC	0x476ffa5	0x8bffc883
DEBUG	0x1cebabdf	0
ARCHITECTURE	0x50746547	0x41636f72
GLOBALPTR	0x65726464	0x7373
TLS	0	0

module_name	hint	ord	function_name

show previews

offset	size	type	comment
15c1	15	HTM		#

Scanning the drive for archives:
1 file, 1056 bytes (2 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] unusual size of IMAGE_OPTIONAL_HEADER = 328 (must be 224)

[?] 104 spare bytes after IMAGE_OPTIONAL_HEADER

[?] DOS stub offset beyond EOF: 205616

[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=1392590867, TimeDateStamp=nil, ForwarderChain=nil, Name=nil, FirstThunk=nil, module_name=nil, original_first_thunk=nil, first_thunk=nil>

[?] can't find file_offset of VA 0xef2413b7

[?] can't find file_offset of VA 0xc3511e8

[?] can't find file_offset of VA 0x8ca50adb

[?] can't find file_offset of VA 0x1e835b2b

[?] can't find file_offset of VA 0x6bfb8b32

[?] can't find file_offset of VA 0x68b4af4e

[?] can't find file_offset of VA 0x3e1478c8

[?] can't find file_offset of VA 0xa7a51981

[?] can't find file_offset of VA 0xc19faad4

[?] can't find file_offset of VA 0xb3e0896d

[?] can't find file_offset of VA 0x8aefe39e

[?] can't find file_offset of VA 0xfcd1a593

[?] can't find file_offset of VA 0xa1fe33f1

[?] can't find file_offset of VA 0x5a407cc8

[?] can't find file_offset of VA 0x76aaf5fc

[?] can't find file_offset of VA 0x4240b9ed

[?] can't find file_offset of VA 0x75c1226a

[?] can't find file_offset of VA 0x8895b6d7

[?] can't find file_offset of VA 0xe1aad0a9

[?] can't find file_offset of VA 0xa1d764a0

[?] can't find file_offset of VA 0x9d0ca110

[?] can't find file_offset of VA 0x1316ff00

[?] can't find file_offset of VA 0x75c2f6

[?] can't find file_offset of VA 0x72c13bc0

[?] can't find file_offset of VA 0xff0b7301

[?] can't find file_offset of VA 0xc3c12bf4

[?] can't find file_offset of VA 0x7309b016

[?] can't find file_offset of VA 0xc5035d4c

[?] can't find file_offset of VA 0x5e1c105

[?] can't find file_offset of VA 0x38b50c3

[?] can't find file_offset of VA 0x4532bca

[?] can't find file_offset of VA 0xbe8c152

[?] can't find file_offset of VA 0x765ac23b

[?] can't find file_offset of VA 0xdeb0201

[?] can't find file_offset of VA 0x3303890f

[?] can't find file_offset of VA 0x29044301

[?] can't find file_offset of VA 0x7500037b

[?] can't find file_offset of VA 0xc1028b03

[?] can't find file_offset of VA 0xfc43ff0a

[?] can't find file_offset of VA 0x16ff5883

[?] can't find file_offset of VA 0x80463c1

[?] can't find file_offset of VA 0xfd044f72

[?] can't find file_offset of VA 0x5edc1ff

[?] can't find file_offset of VA 0xc222d21a

[?] can't find file_offset of VA 0xed6966

[?] can't find file_offset of VA 0x87b2b1f

[?] can't find file_offset of VA 0xabac8d03

[?] can't find file_offset of VA 0x950f0f84

[?] can't find file_offset of VA 0x2a0e74e9

[?] can't find file_offset of VA 0x8dc4fec4

[?] can't find file_offset of VA 0x1e480e0

[?] can't find file_offset of VA 0xf2e9

[?] can't find file_offset of VA 0xc933e675

[?] can't find file_offset of VA 0x1af90400

[?] can't find file_offset of VA 0x427316ff

[?] can't find file_offset of VA 0x2430b1c0

[?] can't find file_offset of VA 0x16ffd103

[?] can't find file_offset of VA 0x8432bc7

[?] can't find file_offset of VA 0xd1031472

[?] can't find file_offset of VA 0x8a80b1

[?] can't find file_offset of VA 0x16ffd103

[?] can't find file_offset of VA 0xc283ceeb

[?] can't find file_offset of VA 0x73106b87

[?] can't find file_offset of VA 0x5d5456ff

[?] can't find file_offset of VA 0x146b8703

[?] can't find file_offset of VA 0x8fe991

[?] can't find file_offset of VA 0xbc0

[?] can't find file_offset of VA 0x87480000

[?] can't find file_offset of VA 0xff146b89

[?] can't find file_offset of VA 0xf640b1c1

[?] can't find file_offset of VA 0x36a5456

[?] can't find file_offset of VA 0x83ac8de1

[?] can't find file_offset of VA 0xd1ed335a

[?] can't find file_offset of VA 0x378

[?] can't find file_offset of VA 0x2d583e8

[?] can't find file_offset of VA 0x2b760000

[?] can't find file_offset of VA 0xe5d39148

[?] can't find file_offset of VA 0x3304e980

[?] can't find file_offset of VA 0x3bc00304

[?] can't find file_offset of VA 0xfc538bc0

[?] can't find file_offset of VA 0x8b067213

[?] DOS stub offset beyond EOF: 205616

[?] can't find file_offset of VA 0xad3876ff

[?] can't find file_offset of VA 0x476ffa5

[?] can't find file_offset of VA 0x1cebabdf

[?] can't find file_offset of VA 0x50746547

[?] can't find file_offset of VA 0x65726464