filenamesurfspypersonal.exe
size1185280 (0x121600)
md5991a6b65de80656efaeb1bebc0a31d68
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xc8

Rich Header

lib idversiontimes used
00141
616681
273031

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x3a5b1b81
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.10
SizeOfCode0x5600
SizeOfInitializedData0x2a00
SizeOfUninitializedData0
AddressOfEntryPoint0x3f8f
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x125000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x7d00
SizeOfStackCommit0x1000
SizeOfHeapReserve0x7d00
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

WinZip 32-bit SFX v8.x module

Sections

namevavsizeraw sizeflags
.text0x10000x54860x5600R-X CODE
.rdata0x70000xbd20xc00R-- IDATA
.data0x80000x17350xe00RW- IDATA
.rsrc0xa0000x5080x600R-- IDATA
_winzip_0xb0000x11a0000x119c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x7ba00x32
IMPORT0x71ec0x50
RESOURCE0xa0000x508
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x70000x1e0
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
GROUP_ICON#1340
module_namehintordfunction_name
USER32.dll317GetWindowRect
USER32.dll492SetCursor
USER32.dll180EndDialog
USER32.dll128DefWindowProcA
USER32.dll324GetWindowWord
USER32.dll547SetWindowWord
USER32.dll9BeginPaint
USER32.dll297GetSysColor
USER32.dll228GetClientRect
USER32.dll520SetRect
USER32.dll182EndPaint
USER32.dll446RegisterClassA
USER32.dll374LoadIconA
USER32.dll418OemToCharBuffA
USER32.dll370LoadCursorA
USER32.dll264GetLastActivePopup
USER32.dll557ShowWindow
USER32.dll433PostMessageA
USER32.dll178EnableWindow
USER32.dll305GetTopWindow
USER32.dll138DestroyWindow
USER32.dll314GetWindowLongA
USER32.dll539SetWindowLongA
USER32.dll545SetWindowTextA
USER32.dll502SetForegroundWindow
USER32.dll482SetActiveWindow
USER32.dll33CharNextA
USER32.dll534SetTimer
USER32.dll277GetMessageA
USER32.dll435PostQuitMessage
USER32.dll365KillTimer
USER32.dll139DialogBoxIndirectParamA
USER32.dll245GetDlgItemTextA
USER32.dll474SendMessageA
USER32.dll300GetSystemMetrics
USER32.dll542SetWindowPos
USER32.dll431PeekMessageA
USER32.dll581TranslateMessage
USER32.dll144DispatchMessageA
USER32.dll285GetParent
USER32.dll498SetDlgItemTextA
USER32.dll472SendDlgItemMessageA
USER32.dll243GetDlgItem
USER32.dll338InvalidateRect
USER32.dll593UpdateWindow
USER32.dll612wsprintfA
USER32.dll405MessageBoxA
KERNEL32.dll654_lopen
KERNEL32.dll623WinExec
KERNEL32.dll61CreateProcessA
KERNEL32.dll651_lclose
KERNEL32.dll335GetVolumeInformationA
KERNEL32.dll485RtlUnwind
KERNEL32.dll170GetCommandLineA
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll107ExitProcess
KERNEL32.dll135FindNextFileA
KERNEL32.dll423MoveFileExA
KERNEL32.dll49CreateFileA
KERNEL32.dll237GetFileSize
KERNEL32.dll50CreateFileMappingA
KERNEL32.dll420MapViewOfFile
KERNEL32.dll595UnmapViewOfFile
KERNEL32.dll24CloseHandle
KERNEL32.dll537SetFilePointer
KERNEL32.dll528SetEndOfFile
KERNEL32.dll479RemoveDirectoryA
KERNEL32.dll535SetFileAttributesA
KERNEL32.dll78DeleteFileA
KERNEL32.dll157GetACP
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll531SetErrorMode
KERNEL32.dll332GetVersion
KERNEL32.dll400LoadLibraryA
KERNEL32.dll278GetProcAddress
KERNEL32.dll244GetLastError
KERNEL32.dll147FormatMessageA
KERNEL32.dll152FreeLibrary
KERNEL32.dll618WaitForSingleObject
KERNEL32.dll325GetTickCount
KERNEL32.dll337GetWindowsDirectoryA
KERNEL32.dll126FindClose
KERNEL32.dll130FindFirstFileA
KERNEL32.dll524SetCurrentDirectoryA
KERNEL32.dll673lstrlenA
KERNEL32.dll42CreateDirectoryA
KERNEL32.dll658lstrcatA
KERNEL32.dll538SetFileTime
KERNEL32.dll408LocalFileTimeToFileTime
KERNEL32.dll83DosDateTimeToFileTime
KERNEL32.dll652_lcreat
KERNEL32.dll667lstrcpyA
KERNEL32.dll406LocalAlloc
KERNEL32.dll228GetEnvironmentVariableA
KERNEL32.dll431OpenFile
KERNEL32.dll656_lwrite
KERNEL32.dll655_lread
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll653_llseek
KERNEL32.dll410LocalFree
KERNEL32.dll352GlobalLock
KERNEL32.dll341GlobalAlloc
KERNEL32.dll348GlobalFree
KERNEL32.dll358GlobalUnlock
KERNEL32.dll351GlobalHandle
GDI32.dll261GetTextExtentPoint32A
GDI32.dll336SetBkColor
GDI32.dll370SetTextColor
GDI32.dll368SetTextAlign
GDI32.dll173GetBkColor
GDI32.dll70DeleteObject
GDI32.dll98ExtTextOutA
GDI32.dll32CreateDCA
GDI32.dll199GetDeviceCaps
GDI32.dll44CreateFontIndirectA
GDI32.dll67DeleteDC
GDI32.dll330SelectObject
ordentry_vafunction_name
module_nameSI32E.SFX
flags0
timestamp2001-01-09 14:09:05
version0.0
ordinal_base1
nFunctions0
nNames0
Names(0)0x7bc8
Functions(0)0x7bc8
NameOrdinals(0)0x7bc8
offsetsizetypecomment
01185280EXE01/09/2001 14:09:05#
15c115HTM#
7a661153900ZIP#
Scanning the drive for archives:
1 file, 1185280 bytes (1158 KiB)


--
Type = PE
Physical Size = 1185280
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2001-01-09 14:09:05
Headers Size = 1024
Checksum = 0
Image Size = 1200128
Section Alignment = 4096
File Alignment = 512
Code Size = 22016
Initialized Data Size = 10752
Uninitialized Data Size = 0
Linker Version = 5.10
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 32000
Stack Commit = 4096
Heap Reserve = 32000
Heap Commit = 4096
Image Base = 4194304
----
Path = _winzip_
Size = 1154048
Packed Size = 1154048
Virtual Size = 1155072
Characteristics = InitializedData Discardable Read
Offset = 31232
Virtual Address = 0xB000
--
Path = _winzip_
Type = zip
WARNINGS:
There are data after the end of archive
Offset = -31232
Physical Size = 1185234
Tail Size = 46
Embedded Stub Size = 31334

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2002-07-17 18:15:38 ....A          108          102  DATA.TAG
2002-07-17 18:15:38 ....A       624587       622179  data1.cab
1997-05-30 12:31:50 ....A         4557         2067  lang.dat
2002-07-17 18:15:38 ....A          334           69  layout.bin
1997-05-06 15:15:20 ....A          417          160  os.dat
1997-11-19 17:09:20 ....A        59904        30750  SETUP.EXE
2002-07-17 18:15:38 ....A           74           74  SETUP.INI
2001-12-30 01:14:42 .R..A        56127        14256  setup.ins
2002-07-17 18:15:38 ....A           49           45  setup.lid
1997-11-19 17:05:06 ....A       300178       299571  _INST32I.EX_
1997-11-19 17:05:50 ....A         8192         3775  _ISDEL.EXE
1997-11-19 17:08:54 ....A        11264         3102  _setup.dll
2002-07-17 18:15:38 ....A       186302       163684  _sys1.cab
2002-07-17 18:15:38 ....A        46591        12724  _user1.cab
------------------- ----- ------------ ------------  ------------------------
2002-07-17 18:15:38            1298684      1152558  14 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK