filenameMotherload Goldium.exe
size13171413 (0xc8fad5)
md506055ae5c0fd6d718c94a10e847e6d1b
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1980223
10285
19904921
1184477
0010
1089661
118966194
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x3f57ad38
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0xc0000
SizeOfInitializedData0xf3000
SizeOfUninitializedData0
AddressOfEntryPoint0x86df0
BaseOfCode0x1000
BaseOfData0xc1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1b4000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
.text0x10000xbfb460xc0000R-X CODE
.rdata0xc10000xc4080xd000R-- IDATA
.data0xce0000xcf6000xd000RW- IDATA
.data10x19e0000x3c00x1000RW- IDATA
.CRT0x19f00040x1000RW- IDATA
.rsrc0x1a00000x13f900x14000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xcbc100xf0
RESOURCE0x1a00000x13f90
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xc10000x480
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#193080
CURSOR#201800
CURSOR#213080
CURSOR#221800
CURSOR#233080
ICON#12960
ICON#213840
ICON#311280
ICON#47440
ICON#522160
ICON#642640
ICON#716400
ICON#837520
ICON#996400
ICON#102960
ICON#1113840
ICON#1211280
ICON#137440
ICON#1422160
ICON#1542640
ICON#1616400
ICON#1737520
ICON#1896400
MENU#6026400
MENU#6028480
MENU#6027540
MENU#6028440
MENU#6028540
MENU#6027040
MENU#6027080
MENU#6026460
MENU#6028220
MENU#6042780
MENU#6045220
MENU#6044660
MENU#6045440
MENU#6045100
MENU#6043260
MENU#6043240
MENU#6043020
MENU#6045000
MENU#6101060
MENU#6101560
MENU#6101120
MENU#6101440
MENU#6101360
MENU#6101200
MENU#6101200
MENU#6101060
MENU#6101400
MENU#613340
MENU#613740
MENU#613520
MENU#613620
MENU#613660
MENU#613400
MENU#613360
MENU#613340
MENU#613600
DIALOG#4014220
DIALOG#4014220
DIALOG#4014220
DIALOG#4014220
DIALOG#4014220
DIALOG#4014140
DIALOG#4014220
DIALOG#4014220
DIALOG#4014300
DIALOG#4033200
DIALOG#4034720
DIALOG#4034580
DIALOG#4034440
DIALOG#4033960
DIALOG#4033540
DIALOG#4033240
DIALOG#4033120
DIALOG#4034620
STRING#12380
STRING#12660
STRING#12600
STRING#12780
STRING#12680
STRING#12520
STRING#12400
STRING#12380
STRING#12780
STRING#72100
STRING#75160
STRING#74260
STRING#75220
STRING#74280
STRING#72780
STRING#72560
STRING#72240
STRING#74240
ACCELERATORS#6021280
GROUP_CURSOR#500340
GROUP_CURSOR#501340
GROUP_CURSOR#502200
GROUP_ICON#2001320
GROUP_ICON#6081320
VERSION#19360
idlangstring
21028Macromedia Flash Player 7
31028Macromedia Flash movie (*.swf)|*.swf;*.spl|所有檔案 (*.*)|*.*||
41028放映檔 (*.exe)|*.exe||
21031Macromedia Flash Player 7
31031Macromedia Flash movie (*.swf)|*.swf;*.spl|Alle Dateien (*.*)|*.*||
41031Projektor (*.exe)|*.exe||
21033Macromedia Flash Player 7
31033Macromedia Flash movie (*.swf)|*.swf;*.spl|All Files (*.*)|*.*||
41033Projector (*.exe)|*.exe||
21036Macromedia Flash Player 7
31036Macromedia Flash movie (*.swf)|*.swf;*.spl|Tous les fichiers (*.*)|*.*||
41036Projection (*.exe)|*.exe||
21040Macromedia Flash Player 7
31040Macromedia Flash movie (*.swf)|*.swf;*.spl|Tutti i file (*.*)|*.*||
41040Proiettore (*.exe)|*.exe||
21041Macromedia Flash Player 7
31041Macromedia Flash movie (*.swf)|*.swf;*.spl|すべてのファイル (*.*)|*.*||
41041プロジェクタ (*.exe)|*.exe||
21042Macromedia Flash Player 7
31042Macromedia Flash movie (*.swf)|*.swf;*.spl|모든 파일(*.*)|*.*||
41042프로젝터 (*.exe)|*.exe||
22052Macromedia Flash Player 7
32052Macromedia Flash movie (*.swf)|*.swf;*.spl|所有文件 (*.*)|*.*||
42052播放器 (*.exe)|*.exe||
23082Macromedia Flash Player 7
33082Macromedia Flash movie (*.swf)|*.swf;*.spl|Todos los archivos (*.*)|*.*||
43082Proyector (*.exe)|*.exe||
1041028影片中有一個 Script 會讓 Flash Player 的速度變慢，如果繼續執行它，電腦可能會停止回應，你要停止這個腳本嗎?
1051028Macromedia Flash Player 7
1041031Macromedia Flash Player 7 wird durch ein Skript in diesem Film verlangsamt. Wenn das Skript weiterhin ausgeführt wird, reagiert der Computer möglicherweise nicht mehr. Möchten Sie die Ausführung des Skripts abbrechen?
1051031Macromedia Flash Player 7
1041033A script in this movie is causing Macromedia Flash Player 7 to run slowly. If it continues to run, your computer may become unresponsive. Do you want to abort the script?
1051033Macromedia Flash Player 7
1041036Un script de cette animation ralentit l’exécution de Macromedia Flash Player 7. Si l’exécution n’est pas suspendue, il est possible que votre ordinateur ne réagisse plus. Souhaitez-vous abandonner l’exécution du script ?
1051036Macromedia Flash Player 7
1041040Uno script del filmato sta rallentando la riproduzione di Macromedia Flash Player 7. Se non viene interrotto potrebbe causare il blocco del computer. Interrompere lo script?
1051040Macromedia Flash Player 7
1041041ムービー内のスクリプトが原因で Macromedia Flash Player 7 の実行速度が遅くなっています。このまま継続すると、応答しなくなることがあります。スクリプトの実行を中止しますか?
1051041Macromedia Flash Player 7
1041042이 동영상의 스크립트로 인해 Flash 플레이어의 실행 속도가 느립니다. 계속 실행하면 컴퓨터에서 응답하지 않을 수도 있습니다. 스크립트를 중단하시겠습니까?
1051042Macromedia Flash Player 7
1042052影片中的某个脚本导致 Macromedia Flash Player 7 速度降低。如果继续运行，电脑将有一段时间没有响应。是否要终止此脚本？
1052052Macromedia Flash Player 7
1043082Un script de esta película está provocando que el Reproductor de Flash se ejecute lentamente. Si continua ejecutándose, su PC podría no responder. ¿Desea anular el script?
1053082Macromedia Flash Player 7
module_namehintordfunction_name
WSOCK32.dll21
WSOCK32.dll115
WSOCK32.dll116
WSOCK32.dll9
WSOCK32.dll8
WSOCK32.dll52
WSOCK32.dll10
ole32.dll89CoUninitialize
ole32.dll27CoFreeUnusedLibraries
ole32.dll84CoTaskMemAlloc
ole32.dll85CoTaskMemFree
ole32.dll49CoInitialize
ole32.dll15CoCreateInstance
OLEAUT32.dll6
WININET.dll136InternetOpenA
WININET.dll107InternetConnectA
WININET.dll82HttpOpenRequestA
WININET.dll86HttpSendRequestA
WININET.dll144InternetReadFile
WININET.dll101InternetCloseHandle
KERNEL32.dll159FindClose
KERNEL32.dll368GetSystemDirectoryA
KERNEL32.dll66CreateMutexA
KERNEL32.dll585ReleaseMutex
KERNEL32.dll734UnmapViewOfFile
KERNEL32.dll501MapViewOfFile
KERNEL32.dll56CreateFileMappingA
KERNEL32.dll390GetTickCount
KERNEL32.dll765WaitForSingleObject
KERNEL32.dll769WideCharToMultiByte
KERNEL32.dll312GetModuleFileNameA
KERNEL32.dll172FindNextFileA
KERNEL32.dll77CreateThread
KERNEL32.dll141ExitThread
KERNEL32.dll430GlobalUnlock
KERNEL32.dll423GlobalLock
KERNEL32.dll469IsDBCSLeadByteEx
KERNEL32.dll821lstrlenA
KERNEL32.dll652SetEndOfFile
KERNEL32.dll43CopyFileA
KERNEL32.dll140ExitProcess
KERNEL32.dll314GetModuleHandleA
KERNEL32.dll218GetCommandLineA
KERNEL32.dll346GetProcessTimes
KERNEL32.dll265GetCurrentProcess
KERNEL32.dll692SetThreadPriority
KERNEL32.dll52CreateEventA
KERNEL32.dll656SetEvent
KERNEL32.dll459InterlockedIncrement
KERNEL32.dll456InterlockedDecrement
KERNEL32.dll594ResetEvent
KERNEL32.dll763WaitForMultipleObjects
KERNEL32.dll386GetThreadPriority
KERNEL32.dll267GetCurrentThread
KERNEL32.dll163FindFirstFileA
KERNEL32.dll293GetFileSize
KERNEL32.dll661SetFilePointer
KERNEL32.dll382GetTempPathA
KERNEL32.dll380GetTempFileNameA
KERNEL32.dll782WriteFile
KERNEL32.dll573ReadFile
KERNEL32.dll55CreateFileA
KERNEL32.dll48CreateDirectoryA
KERNEL32.dll587RemoveDirectoryA
KERNEL32.dll507MoveFileA
KERNEL32.dll92DeleteFileA
KERNEL32.dll288GetFileAttributesA
KERNEL32.dll712SystemTimeToFileTime
KERNEL32.dll372GetSystemTime
KERNEL32.dll478LeaveCriticalSection
KERNEL32.dll393GetTimeZoneInformation
KERNEL32.dll366GetSystemDefaultLangID
KERNEL32.dll195FreeLibrary
KERNEL32.dll395GetUserDefaultLangID
KERNEL32.dll301GetLastError
KERNEL32.dll358GetStartupInfoA
KERNEL32.dll71CreateProcessA
KERNEL32.dll30CloseHandle
KERNEL32.dll268GetCurrentThreadId
KERNEL32.dll655SetErrorMode
KERNEL32.dll479LoadLibraryA
KERNEL32.dll339GetProcAddress
KERNEL32.dll555QueryPerformanceCounter
KERNEL32.dll556QueryPerformanceFrequency
KERNEL32.dll468IsDBCSLeadByte
KERNEL32.dll201GetACP
KERNEL32.dll207GetCPInfo
KERNEL32.dll514MultiByteToWideChar
KERNEL32.dll399GetVersionExA
KERNEL32.dll419GlobalFree
KERNEL32.dll412GlobalAlloc
KERNEL32.dll90DeleteCriticalSection
KERNEL32.dll453InitializeCriticalSection
KERNEL32.dll111EnterCriticalSection
KERNEL32.dll707Sleep
USER32.dll189EndPaint
USER32.dll12BeginPaint
USER32.dll287GetMenu
USER32.dll144DestroyWindow
USER32.dll266GetFocus
USER32.dll90CreateWindowExA
USER32.dll403IsWindow
USER32.dll134DefWindowProcA
USER32.dll346GetWindowLongA
USER32.dll61CloseClipboard
USER32.dll245GetClipboardData
USER32.dll394IsClipboardFormatAvailable
USER32.dll472OpenClipboard
USER32.dll551SetClipboardData
USER32.dll182EmptyClipboard
USER32.dll608SetWindowPos
USER32.dll352GetWindowRect
USER32.dll342GetWindow
USER32.dll656UnregisterClassA
USER32.dll151DispatchMessageA
USER32.dll647TranslateMessage
USER32.dll644TranslateAcceleratorA
USER32.dll301GetMessageA
USER32.dll410LoadAcceleratorsA
USER32.dll502RegisterClassA
USER32.dll418LoadIconA
USER32.dll662UpdateWindow
USER32.dll623ShowWindow
USER32.dll485PostQuitMessage
USER32.dll149DialogBoxParamA
USER32.dll187EndDialog
USER32.dll462MoveWindow
USER32.dll258GetDesktopWindow
USER32.dll560SetDlgItemTextA
USER32.dll185EnableWindow
USER32.dll263GetDlgItemTextA
USER32.dll355GetWindowTextLengthA
USER32.dll261GetDlgItem
USER32.dll570SetMenu
USER32.dll486PostThreadMessageA
USER32.dll319GetQueueStatus
USER32.dll481PeekMessageA
USER32.dll463MsgWaitForMultipleObjects
USER32.dll516RegisterWindowMessageA
USER32.dll414LoadCursorA
USER32.dll554SetCursor
USER32.dll409KillTimer
USER32.dll599SetTimer
USER32.dll214FillRect
USER32.dll325GetSubMenu
USER32.dll518ReleaseCapture
USER32.dll630SystemParametersInfoA
USER32.dll526ScreenToClient
USER32.dll426LoadMenuA
USER32.dll294GetMenuItemID
USER32.dll137DeleteMenu
USER32.dll59ClientToScreen
USER32.dll641TrackPopupMenu
USER32.dll143DestroyMenu
USER32.dll563SetFocus
USER32.dll545SetCapture
USER32.dll231GetCapture
USER32.dll255GetCursorPos
USER32.dll688WindowFromPoint
USER32.dll243GetClientRect
USER32.dll431LoadStringA
USER32.dll183EnableMenuItem
USER32.dll52CheckMenuItem
USER32.dll382InvalidateRect
USER32.dll605SetWindowLongA
USER32.dll682WaitForInputIdle
USER32.dll442MapVirtualKeyA
USER32.dll277GetKeyState
USER32.dll293GetMenuItemCount
USER32.dll295GetMenuItemInfoA
USER32.dll377InsertMenuItemA
USER32.dll329GetSystemMetrics
USER32.dll114DdeInitializeA
USER32.dll103DdeCreateStringHandleA
USER32.dll100DdeConnect
USER32.dll98DdeClientTransaction
USER32.dll105DdeDisconnect
USER32.dll109DdeFreeStringHandle
USER32.dll127DdeUninitialize
USER32.dll278GetKeyboardLayout
USER32.dll256GetDC
USER32.dll519ReleaseDC
USER32.dll265GetDoubleClickTime
USER32.dll451MessageBoxA
USER32.dll483PostMessageA
GDI32.dll518StartPage
GDI32.dll294GetCurrentObject
GDI32.dll459SelectClipPath
GDI32.dll172FillPath
GDI32.dll157ExtCreatePen
GDI32.dll522StrokePath
GDI32.dll91EndDoc
GDI32.dll94EndPath
GDI32.dll468SetBkColor
GDI32.dll515StartDocA
GDI32.dll395LPtoDP
GDI32.dll290GetClipBox
GDI32.dll78CreateSolidBrush
GDI32.dll363GetSystemPaletteEntries
GDI32.dll67CreatePalette
GDI32.dll271GetBkColor
GDI32.dll422PolyBezierTo
GDI32.dll397LineTo
GDI32.dll401MoveToEx
GDI32.dll498SetPolyFillMode
GDI32.dll17BeginPath
GDI32.dll448RestoreDC
GDI32.dll455SaveDC
GDI32.dll223GdiFlush
GDI32.dll84DeleteObject
GDI32.dll462SelectObject
GDI32.dll520StretchDIBits
GDI32.dll478SetDIBitsToDevice
GDI32.dll42CreateCompatibleBitmap
GDI32.dll343GetObjectA
GDI32.dll81DeleteDC
GDI32.dll48CreateDIBSection
GDI32.dll301GetDeviceCaps
GDI32.dll43CreateCompatibleDC
GDI32.dll18BitBlt
GDI32.dll435RealizePalette
GDI32.dll463SelectPalette
GDI32.dll142EnumFontFamiliesA
GDI32.dll469SetBkMode
GDI32.dll504SetTextAlign
GDI32.dll393IntersectClipRect
GDI32.dll460SelectClipRgn
GDI32.dll162ExtTextOutA
GDI32.dll163ExtTextOutW
GDI32.dll506SetTextColor
GDI32.dll382GetTextMetricsA
GDI32.dll56CreateFontIndirectA
GDI32.dll69CreatePen
GDI32.dll291GetClipRgn
GDI32.dll73CreateRectRgn
GDI32.dll365GetTextAlign
GDI32.dll272GetBkMode
GDI32.dll369GetTextColor
GDI32.dll79DPtoLP
GDI32.dll374GetTextExtentPoint32A
GDI32.dll375GetTextExtentPoint32W
GDI32.dll93EndPage
comdlg32.dll9GetOpenFileNameA
comdlg32.dll11GetSaveFileNameA
comdlg32.dll16PrintDlgA
ADVAPI32.dll391RegCreateKeyA
ADVAPI32.dll423RegQueryValueExA
ADVAPI32.dll413RegOpenKeyExA
ADVAPI32.dll433RegSetValueA
ADVAPI32.dll388RegCloseKey
ADVAPI32.dll434RegSetValueExA
SHELL32.dll21DragQueryFileA
SHELL32.dll18DragAcceptFiles
WINMM.dll188waveOutReset
WINMM.dll194waveOutWrite
WINMM.dll187waveOutPrepareHeader
WINMM.dll158waveInGetDevCapsA
WINMM.dll179waveOutGetNumDevs
WINMM.dll193waveOutUnprepareHeader
WINMM.dll173waveOutClose
WINMM.dll185waveOutOpen
WINMM.dll174waveOutGetDevCapsA
WINMM.dll163waveInGetNumDevs
WINMM.dll169waveInStart
WINMM.dll156waveInAddBuffer
WINMM.dll170waveInStop
WINMM.dll167waveInPrepareHeader
WINMM.dll166waveInOpen
WINMM.dll157waveInClose
WINMM.dll171waveInUnprepareHeader
WINMM.dll168waveInReset
WINMM.dll153timeGetTime
WINMM.dll150timeEndPeriod
WINMM.dll149timeBeginPeriod
WINMM.dll151timeGetDevCaps
WINMM.dll155timeSetEvent
WINMM.dll154timeKillEvent

StringTable 040904b0

CompanyNameMacromedia, Inc.
FileDescriptionMacromedia Flash Player 7.0 r14
FileVersion7,0,14,0
InternalNameMacromedia Flash Player 7.0
LegalCopyrightCopyright © 1996-2003 Macromedia, Inc.
LegalTrademarksMacromedia Flash Player
OriginalFilenameSAFlashPlayer.exe
ProductNameShockwave Flash
ProductVersion7,0,14,0

VS_FIXEDFILEINFO

FileVersion7.0.14.0
ProductVersion7.0.14.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0987136EXE09/04/2003 21:23:04#
15c115HTM#
f100012184277BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 13171413 bytes (13 MiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK