fax_23-06-2014-TX6381A7481.exe

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	fax_23-06-2014-TX6381A7481.exe
size	117248 (0x1ca00)
md5	02e2deffcf98f19dbf09c9cca0384fb2

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000a0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4dff6a44
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x8a00
SizeOfInitializedData	0x13c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x78c2
BaseOfCode	0x1000
BaseOfData	0xa000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x13b000
SizeOfHeaders	0x400
CheckSum	0x2005f
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x8889	0x8a00	R-X CODE
.data�	0xa000	0x126aa8	0xac00	RW- IDATA SHARED
.rdata�	0x131000	0x5789	0x5800	RW- IDATA
.rsrc	0x137000	0x3688	0x3800	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x135118	0x78
RESOURCE	0x137000	0x3688
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0xebdc	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0xed8c	0x40
Bound_IAT	0	0
IAT	0x135000	0x118
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
CURSOR	#1850	56
CURSOR	#1855	56
CURSOR	#1362	56
CURSOR	#1911	56
CURSOR	#1080	56
CURSOR	#1941	56
CURSOR	#1666	56
CURSOR	#1132	56
CURSOR	#1939	56
CURSOR	#1290	56
CURSOR	#1269	56
CURSOR	#1645	56
CURSOR	#1873	56
CURSOR	#1064	56
CURSOR	#1282	56
CURSOR	#1373	56
CURSOR	#1718	56
CURSOR	#1669	56
CURSOR	#1819	56
CURSOR	#1013	56
CURSOR	#2000	56
CURSOR	#1112	56
CURSOR	#1432	56
CURSOR	#1752	56
CURSOR	#1008	56
CURSOR	#1226	56
CURSOR	#1859	56
CURSOR	#1283	56
CURSOR	#1453	56
CURSOR	#1505	56
CURSOR	#1552	56
CURSOR	#1424	56
CURSOR	#1250	56
CURSOR	#1179	56
CURSOR	#1195	56
CURSOR	#1314	56
CURSOR	#1491	56
CURSOR	#1712	56
CURSOR	#1936	56
CURSOR	#1857	56
CURSOR	#1227	56
CURSOR	#1859	56
CURSOR	#1964	56
CURSOR	#1636	56
CURSOR	#1295	56
CURSOR	#1503	56
CURSOR	#1214	56
CURSOR	#1645	56
CURSOR	#1145	56
CURSOR	#1062	56
CURSOR	#1499	56
CURSOR	#1912	56
CURSOR	#1561	56
CURSOR	#1435	56
CURSOR	#1029	56
CURSOR	#1604	56
ICON	#1	1736
ICON	#2	3752
#13	#54160	164
#13	#14012	136
#13	#8931	140
GROUP_ICON	#1	34
VERSION	#1	308

module_name	hint	ord	function_name
KERNEL32.dll			Sleep
KERNEL32.dll			VirtualAlloc
OLE32.dll			CoCreateInstance
OLE32.dll			CoInitialize
OLE32.dll			CoUninitialize
WINSPOOL.drv			FindClosePrinterChangeNotification
WINSPOOL.drv			DeletePortW
WINSPOOL.drv			ConnectToPrinterDlg
WINSPOOL.drv			EnumJobsA
ADVAPI32.dll			RegOpenKeyExW
ADVAPI32.dll			SetSecurityInfo
ADVAPI32.dll			GetAce
ADVAPI32.dll			CryptCreateHash
ADVAPI32.dll			GetSecurityInfo
ADVAPI32.dll			CryptAcquireContextW
ADVAPI32.dll			RegCloseKey
ADVAPI32.dll			RegDeleteKeyW
ADVAPI32.dll			RegNotifyChangeKeyValue
ADVAPI32.dll			CryptGetHashParam
ADVAPI32.dll			RegCreateKeyExW
ADVAPI32.dll			RegSetValueExW
ADVAPI32.dll			CryptHashData
ADVAPI32.dll			CryptDestroyHash
ADVAPI32.dll			CryptReleaseContext
ADVAPI32.dll			RegQueryValueExW
USER32.dll			SetWindowPos
USER32.dll			GetClientRect
USER32.dll			DestroyWindow
USER32.dll			SetWindowLongW
USER32.dll			LoadStringW
USER32.dll			GetDlgItem
USER32.dll			GetMonitorInfoW
USER32.dll			GetSystemMetrics
USER32.dll			DialogBoxParamW
USER32.dll			GetMessageW
USER32.dll			ShowWindow
USER32.dll			MonitorFromRect
USER32.dll			CallWindowProcW
USER32.dll			MessageBoxW
USER32.dll			PostQuitMessage
USER32.dll			GetParent
USER32.dll			FindWindowW
USER32.dll			IsDlgButtonChecked
USER32.dll			LoadIconW
USER32.dll			GetSysColorBrush
USER32.dll			RegisterClassW
USER32.dll			TranslateMessage
USER32.dll			SendDlgItemMessageW
USER32.dll			DispatchMessageW
USER32.dll			EndDialog
USER32.dll			SetForegroundWindow
USER32.dll			GetWindowLongW
USER32.dll			KillTimer
USER32.dll			DefWindowProcW
USER32.dll			SystemParametersInfoW
USER32.dll			CharNextW
USER32.dll			SendMessageW
USER32.dll			SetWindowTextW
USER32.dll			GetDesktopWindow
USER32.dll			SetTimer
USER32.dll			DefDlgProcA
USER32.dll			CreateWindowExW
USER32.dll			CheckDlgButton
USER32.dll			PostMessageW
USER32.dll			GetWindowRect

StringTable 040904B0

CompanyName

Insight Software Solutions

VS_FIXEDFILEINFO

FileVersion	7.4.0.0
ProductVersion	7.4.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	117248	EXE	06/20/2011 15:41:56	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER