filename | Camou121.exe | |
---|---|---|
size | 2718208 (0x297a00) | |
md5 | c62b050117c2cba3518e5a734fedef1f | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | scan pending | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xc8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x49b6 | 0x4a00 | R-X CODE | |
.rdata | 0x6000 | 0xa52 | 0xc00 | R-- IDATA | |
.data | 0x7000 | 0x16d5 | 0xe00 | RW- IDATA | |
.rsrc | 0x9000 | 0x508 | 0x600 | R-- IDATA | |
_winzip_ | 0xa000 | 0x291000 | 0x290c00 | R-- IDATA DISCARDABLE |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0x6a20 | 0x32 | |
IMPORT | 0x61ac | 0x78 | |
RESOURCE | 0x9000 | 0x508 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0x6000 | 0x19c | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
SHELL32.dll | 97 | ShellExecuteA | |
SHELL32.dll | 33 | FindExecutableA | |
USER32.dll | 33 | CharNextA | |
USER32.dll | 128 | DefWindowProcA | |
USER32.dll | 324 | GetWindowWord | |
USER32.dll | 547 | SetWindowWord | |
USER32.dll | 9 | BeginPaint | |
USER32.dll | 297 | GetSysColor | |
USER32.dll | 228 | GetClientRect | |
USER32.dll | 520 | SetRect | |
USER32.dll | 182 | EndPaint | |
USER32.dll | 446 | RegisterClassA | |
USER32.dll | 418 | OemToCharBuffA | |
USER32.dll | 370 | LoadCursorA | |
USER32.dll | 264 | GetLastActivePopup | |
USER32.dll | 557 | ShowWindow | |
USER32.dll | 433 | PostMessageA | |
USER32.dll | 178 | EnableWindow | |
USER32.dll | 138 | DestroyWindow | |
USER32.dll | 545 | SetWindowTextA | |
USER32.dll | 502 | SetForegroundWindow | |
USER32.dll | 482 | SetActiveWindow | |
USER32.dll | 317 | GetWindowRect | |
USER32.dll | 534 | SetTimer | |
USER32.dll | 365 | KillTimer | |
USER32.dll | 139 | DialogBoxIndirectParamA | |
USER32.dll | 245 | GetDlgItemTextA | |
USER32.dll | 180 | EndDialog | |
USER32.dll | 474 | SendMessageA | |
USER32.dll | 257 | GetKeyState | |
USER32.dll | 431 | PeekMessageA | |
USER32.dll | 581 | TranslateMessage | |
USER32.dll | 144 | DispatchMessageA | |
USER32.dll | 285 | GetParent | |
USER32.dll | 498 | SetDlgItemTextA | |
USER32.dll | 472 | SendDlgItemMessageA | |
USER32.dll | 243 | GetDlgItem | |
USER32.dll | 338 | InvalidateRect | |
USER32.dll | 593 | UpdateWindow | |
USER32.dll | 612 | wsprintfA | |
USER32.dll | 405 | MessageBoxA | |
USER32.dll | 492 | SetCursor | |
USER32.dll | 300 | GetSystemMetrics | |
USER32.dll | 542 | SetWindowPos | |
KERNEL32.dll | 42 | CreateDirectoryA | |
KERNEL32.dll | 651 | _lclose | |
KERNEL32.dll | 654 | _lopen | |
KERNEL32.dll | 358 | GlobalUnlock | |
KERNEL32.dll | 485 | RtlUnwind | |
KERNEL32.dll | 170 | GetCommandLineA | |
KERNEL32.dll | 254 | GetModuleHandleA | |
KERNEL32.dll | 107 | ExitProcess | |
KERNEL32.dll | 157 | GetACP | |
KERNEL32.dll | 252 | GetModuleFileNameA | |
KERNEL32.dll | 531 | SetErrorMode | |
KERNEL32.dll | 332 | GetVersion | |
KERNEL32.dll | 400 | LoadLibraryA | |
KERNEL32.dll | 278 | GetProcAddress | |
KERNEL32.dll | 152 | FreeLibrary | |
KERNEL32.dll | 664 | lstrcmpiA | |
KERNEL32.dll | 337 | GetWindowsDirectoryA | |
KERNEL32.dll | 228 | GetEnvironmentVariableA | |
KERNEL32.dll | 406 | LocalAlloc | |
KERNEL32.dll | 410 | LocalFree | |
KERNEL32.dll | 351 | GlobalHandle | |
KERNEL32.dll | 667 | lstrcpyA | |
KERNEL32.dll | 348 | GlobalFree | |
KERNEL32.dll | 341 | GlobalAlloc | |
KERNEL32.dll | 352 | GlobalLock | |
KERNEL32.dll | 623 | WinExec | |
KERNEL32.dll | 653 | _llseek | |
KERNEL32.dll | 223 | GetDriveTypeA | |
KERNEL32.dll | 655 | _lread | |
KERNEL32.dll | 656 | _lwrite | |
KERNEL32.dll | 335 | GetVolumeInformationA | |
KERNEL32.dll | 126 | FindClose | |
KERNEL32.dll | 130 | FindFirstFileA | |
KERNEL32.dll | 209 | GetCurrentDirectoryA | |
KERNEL32.dll | 524 | SetCurrentDirectoryA | |
KERNEL32.dll | 673 | lstrlenA | |
KERNEL32.dll | 658 | lstrcatA | |
KERNEL32.dll | 538 | SetFileTime | |
KERNEL32.dll | 408 | LocalFileTimeToFileTime | |
KERNEL32.dll | 83 | DosDateTimeToFileTime | |
KERNEL32.dll | 652 | _lcreat | |
GDI32.dll | 173 | GetBkColor | |
GDI32.dll | 336 | SetBkColor | |
GDI32.dll | 370 | SetTextColor | |
GDI32.dll | 368 | SetTextAlign | |
GDI32.dll | 70 | DeleteObject | |
GDI32.dll | 261 | GetTextExtentPoint32A | |
GDI32.dll | 98 | ExtTextOutA | |
GDI32.dll | 32 | CreateDCA | |
GDI32.dll | 199 | GetDeviceCaps | |
GDI32.dll | 44 | CreateFontIndirectA | |
GDI32.dll | 67 | DeleteDC | |
GDI32.dll | 330 | SelectObject | |
ADVAPI32.dll | 309 | RegQueryValueA |
ord | entry_va | function_name |
---|
Scanning the drive for archives: 1 file, 2718208 bytes (2655 KiB) -- Type = PE Physical Size = 2718208 CPU = x86 Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms Created = 2001-01-09 14:08:41 Headers Size = 1024 Checksum = 0 Image Size = 2732032 Section Alignment = 4096 File Alignment = 512 Code Size = 18944 Initialized Data Size = 10752 Uninitialized Data Size = 0 Linker Version = 5.10 OS Version = 4.0 Image Version = 0.0 Subsystem Version = 4.0 Subsystem = Windows GUI Stack Reserve = 32000 Stack Commit = 4096 Heap Reserve = 32000 Heap Commit = 4096 Image Base = 4194304 ---- Path = _winzip_ Size = 2690048 Packed Size = 2690048 Virtual Size = 2691072 Characteristics = InitializedData Discardable Read Offset = 28160 Virtual Address = 0xA000 -- Path = _winzip_ Type = zip WARNINGS: There are data after the end of archive Offset = -28160 Physical Size = 2718194 Tail Size = 14 Embedded Stub Size = 28223 Date Time Attr Size Compressed Name ------------------- ----- ------------ ------------ ------------------------ 2001-03-29 22:14:10 ....A 4046 1253 _sys1.hdr 1998-10-27 13:06:48 ....A 27648 10300 _ISDel.exe 1998-09-29 16:34:56 ....A 34816 12629 _Setup.dll 2001-03-29 22:14:10 ....A 175466 174816 _sys1.cab 1999-02-23 11:45:46 ....A 296674 295840 _inst32i.ex_ 2001-03-29 22:14:12 ....A 48095 47758 _user1.cab 2001-03-29 22:14:12 ....A 4531 1414 _user1.hdr 2001-03-29 22:14:12 ....A 113 109 DATA.TAG 2001-03-29 22:14:12 ....A 1895352 1892939 data1.cab 2001-03-29 22:14:12 ....A 6637 2318 data1.hdr 1999-01-12 11:34:42 ....A 23541 8133 lang.dat 2001-03-29 22:14:14 ....A 629 249 layout.bin 1998-07-27 17:41:06 ....A 450 169 os.dat 2001-11-05 21:40:58 ....A 10914 3702 Readme.txt 2000-12-01 20:13:40 ....A 229254 187402 Setup.bmp 1999-01-12 12:42:20 ....A 73728 34108 Setup.exe 2001-03-29 22:14:12 ....A 100 100 SETUP.INI 2001-03-29 22:14:16 ....A 59860 14871 setup.ins 2001-03-29 22:14:12 ....A 49 45 setup.lid ------------------- ----- ------------ ------------ ------------------------ 2001-11-05 21:40:58 2891903 2688155 19 files Warnings: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK