VocALign (2).exe - VocALign.EXE - VocALign Project

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	VocALign (2).exe
size	578944 (0x8d580)
md5	042a3a3dfb39af88c322998422926a0d

type	PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
mimetype	application/x-dosexec

clamav	Win.Trojan.2160538-1 FOUND
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
95	4035	11
126	50327	2
125	50727	61
109	50727	195
93	4035	29
1	0	657
110	50727	328
124	50727	1
0	0	2
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	2
TimeDateStamp	0x47bedb97
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x15f000
SizeOfInitializedData	0xab000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x160000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x210000
SizeOfHeaders	0x400
CheckSum	0x98957
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PeCompact 2.xx (BitSum Technologies / v2.0)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x20a000	0x87e00	RWX CODE
.rsrc	0x20b000	0x5000	0x4600	RWX CODE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x20e5bc	0x36b
RESOURCE	0x20b000	0x33b8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0x1bc000	0x40
CLR_Header	0	0

show previews

type	name	size
CURSOR	#7	308
CURSOR	#8	308
CURSOR	#9	308
CURSOR	#10	748
CURSOR	#11	308
CURSOR	#12	180
CURSOR	#13	512
CURSOR	#14	180
CURSOR	#15	512
CURSOR	#16	180
CURSOR	#17	512
CURSOR	#18	180
CURSOR	#19	512
CURSOR	#20	180
CURSOR	#21	308
CURSOR	#22	180
CURSOR	#23	308
CURSOR	#24	180
CURSOR	#25	308
CURSOR	#26	308
CURSOR	#27	308
CURSOR	#28	308
CURSOR	#29	308
CURSOR	#30	308
CURSOR	#31	308
CURSOR	#32	308
CURSOR	#33	308
CURSOR	#34	308
CURSOR	#35	308
CURSOR	#36	308
CURSOR	#37	308
CURSOR	#38	308
BITMAP	#4	584
BITMAP	#109	704
BITMAP	#136	1904
BITMAP	#151	171780
BITMAP	#157	49194
BITMAP	#159	10182
BITMAP	#165	2204
BITMAP	#173	2144
BITMAP	#30994	184
BITMAP	#30996	324
ICON	#1	2216
ICON	#2	1384
ICON	#3	2216
ICON	#4	1384
ICON	#5	744
ICON	#6	744
MENU	#4	1252
MENU	#5	1194
MENU	#109	1714
MENU	#129	1476
MENU	#130	1884
DIALOG	#100	504
DIALOG	#101	280
DIALOG	#130	228
DIALOG	#133	408
DIALOG	#134	968
DIALOG	#137	150
DIALOG	#140	256
DIALOG	#169	138
DIALOG	#10134	850
DIALOG	#10135	1442
DIALOG	#10136	1378
DIALOG	#10137	488
DIALOG	#30721	232
DIALOG	#30734	52
STRING	#7	954
STRING	#9	1296
STRING	#10	496
STRING	#11	488
STRING	#19	386
STRING	#20	1322
STRING	#21	1454
STRING	#22	1110
STRING	#23	1120
STRING	#26	482
STRING	#635	2602
STRING	#636	4128
STRING	#690	390
STRING	#2049	848
STRING	#2050	1376
STRING	#2051	132
STRING	#2052	626
STRING	#2053	210
STRING	#2054	146
STRING	#3585	58
STRING	#3585	62
STRING	#3601	634
STRING	#3602	608
STRING	#3603	840
STRING	#3604	112
STRING	#3605	664
STRING	#3606	218
STRING	#3697	70
STRING	#3713	198
STRING	#3825	504
STRING	#3826	134
STRING	#3841	154
STRING	#3842	42
STRING	#3843	402
STRING	#3849	94
GROUP_ICON	#109	34
VERSION	#1	784
VERSION	#1	868
MANIFEST	#1	146

module_name	ord	function_name
kernel32.dll		LoadLibraryA
kernel32.dll		GetProcAddress
kernel32.dll		VirtualAlloc
kernel32.dll		VirtualFree
WINMM.dll		waveOutOpen
VERSION.dll		GetFileVersionInfoSizeA
USER32.dll		GetMessageA
GDI32.dll		GetPixel
comdlg32.dll		GetSaveFileNameA
WINSPOOL.DRV		GetJobA
ADVAPI32.dll		SetFileSecurityA
SHELL32.dll		SHGetFileInfoA
SHLWAPI.dll		PathIsUNCA
oledlg.dll	8
ole32.dll		RevokeDragDrop
OLEAUT32.dll	184
NETAPI32.dll		Netbios

StringTable 040904b0

CompanyName	Synchro Arts Ltd
FileDescription	VocALign Project
FileVersion	2, 9, 1, 0
InternalName	VocALign
LegalCopyright	Copyright © 1995-2008 Synchro Arts Ltd
OriginalFilename	VocALign.EXE
ProductName	VocALign Project
ProductVersion	2, 9, 1, 0

StringTable 080904b0

Comments
CompanyName	Synchro Arts Ltd
FileDescription	Security
FileVersion	1, 0, 0, 1
InternalName	Security
LegalCopyright	Copyright © 2001
LegalTrademarks
OriginalFilename	Security.lib
PrivateBuild
ProductName	Synchro Arts Ltd Security
ProductVersion	1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	2.9.1.0
ProductVersion	2.9.1.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	7
FileSubtype	0

show previews

offset	size	type	comment
0	575488	EXE	02/22/2008 14:26:31	#
15c1	15	HTM		#
8c800	3456	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 578944 bytes (566 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x1bd000

[?] can't find file_offset of VA 0x1bd138

[?] can't find file_offset of VA 0x1bd270

[?] can't find file_offset of VA 0x1bd3a8

[?] can't find file_offset of VA 0x1bd698

[?] can't find file_offset of VA 0x1bd7d0

[?] can't find file_offset of VA 0x1bd888

[?] can't find file_offset of VA 0x1bda88

[?] can't find file_offset of VA 0x1bdb40

[?] can't find file_offset of VA 0x1bdd40

[?] can't find file_offset of VA 0x1bddf8

[?] can't find file_offset of VA 0x1bdff8

[?] can't find file_offset of VA 0x1be0b0

[?] can't find file_offset of VA 0x1be2b0

[?] can't find file_offset of VA 0x1be368

[?] can't find file_offset of VA 0x1be4a0

[?] can't find file_offset of VA 0x1be558

[?] can't find file_offset of VA 0x1be690

[?] can't find file_offset of VA 0x1be748

[?] can't find file_offset of VA 0x1be880

[?] can't find file_offset of VA 0x1be9b8

[?] can't find file_offset of VA 0x1beaf0

[?] can't find file_offset of VA 0x1bec28

[?] can't find file_offset of VA 0x1bed60

[?] can't find file_offset of VA 0x1bee98

[?] can't find file_offset of VA 0x1befd0

[?] can't find file_offset of VA 0x1bf108

[?] can't find file_offset of VA 0x1bf240

[?] can't find file_offset of VA 0x1bf378

[?] can't find file_offset of VA 0x1bf4b0

[?] can't find file_offset of VA 0x1bf5e8

[?] can't find file_offset of VA 0x1bf720

[?] can't find file_offset of VA 0x1bf858

[?] can't find file_offset of VA 0x1bfaa0

[?] can't find file_offset of VA 0x1bfd60

[?] can't find file_offset of VA 0x1c04d0

[?] can't find file_offset of VA 0x1ea3d8

[?] can't find file_offset of VA 0x1f6408

[?] can't find file_offset of VA 0x1f8bd0

[?] can't find file_offset of VA 0x1f9470

[?] can't find file_offset of VA 0x1f9cd0

[?] can't find file_offset of VA 0x1f9d88

[?] can't find file_offset of VA 0x1f9ed0

[?] can't find file_offset of VA 0x1fa778

[?] can't find file_offset of VA 0x1face0

[?] can't find file_offset of VA 0x1fafc8

[?] can't find file_offset of VA 0x1fb2b0

[?] can't find file_offset of VA 0x1fb798

[?] can't find file_offset of VA 0x1fbc48

[?] can't find file_offset of VA 0x1fc300

[?] can't find file_offset of VA 0x1fc8c8

[?] can't find file_offset of VA 0x1fd028

[?] can't find file_offset of VA 0x1fd220

[?] can't find file_offset of VA 0x1fd338

[?] can't find file_offset of VA 0x1fd420

[?] can't find file_offset of VA 0x1fd5b8

[?] can't find file_offset of VA 0x1fd980

[?] can't find file_offset of VA 0x1fda18

[?] can't find file_offset of VA 0x1fdb18

[?] can't find file_offset of VA 0x1fdba8

[?] can't find file_offset of VA 0x1fdf00

[?] can't find file_offset of VA 0x1fe4a8

[?] can't find file_offset of VA 0x1fea10

[?] can't find file_offset of VA 0x1febf8

[?] can't find file_offset of VA 0x1fece0

[?] can't find file_offset of VA 0x1fed18

[?] can't find file_offset of VA 0x1ff0d8

[?] can't find file_offset of VA 0x1ff5e8

[?] can't find file_offset of VA 0x1ff7d8

[?] can't find file_offset of VA 0x1ff9c0

[?] can't find file_offset of VA 0x1ffb48

[?] can't find file_offset of VA 0x200078

[?] can't find file_offset of VA 0x200628

[?] can't find file_offset of VA 0x200a80

[?] can't find file_offset of VA 0x200ee0

[?] can't find file_offset of VA 0x2010c8

[?] can't find file_offset of VA 0x201af8

[?] can't find file_offset of VA 0x202b18

[?] can't find file_offset of VA 0x202ca0

[?] can't find file_offset of VA 0x202ff0

[?] can't find file_offset of VA 0x203550

[?] can't find file_offset of VA 0x2035d8

[?] can't find file_offset of VA 0x203850

[?] can't find file_offset of VA 0x203928

[?] can't find file_offset of VA 0x2039c0

[?] can't find file_offset of VA 0x2039fa

[?] can't find file_offset of VA 0x203a38

[?] can't find file_offset of VA 0x203cb8

[?] can't find file_offset of VA 0x203f18

[?] can't find file_offset of VA 0x204260

[?] can't find file_offset of VA 0x2042d0

[?] can't find file_offset of VA 0x204568

[?] can't find file_offset of VA 0x204648

[?] can't find file_offset of VA 0x204690

[?] can't find file_offset of VA 0x204758

[?] can't find file_offset of VA 0x204950

[?] can't find file_offset of VA 0x2049d8

[?] can't find file_offset of VA 0x204a78

[?] can't find file_offset of VA 0x204aa8

[?] can't find file_offset of VA 0x204c40

[?] can't find file_offset of VA 0x204ca0

[?] too many errors getting resource data, stopped on 0 of 1

[?] can't find file_offset of VA 0x1bc000

VocALign (2).exe- VocALign.EXE - VocALign Project- Win.Trojan.2160538-1

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

StringTable 080904b0

VS_FIXEDFILEINFO

VS_FIXEDFILEINFO

VocALign (2).exe
- VocALign.EXE - VocALign Project
- Win.Trojan.2160538-1