filenamephotronlamp.com_m39ska.mal
size162816 (0x27c00)
md50bbdd9fe374151073c54310d687431d3
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1272912
1197821
14729923
9340357
10100
10978291
0033
2297826
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x56fb6b83
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion9.0
SizeOfCode0xf200
SizeOfInitializedData0x19800
SizeOfUninitializedData0
AddressOfEntryPoint0x7506
BaseOfCode0x1000
BaseOfData0x11000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x2e000
SizeOfHeaders0x400
CheckSum0x2c34e
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000xf1360xf200R-X CODE
.rdata0x110000x865e0x8800R-- IDATA
.data0x1a0000x441c0x3400RW- IDATA
.data30x1f0000x2500x400R-- IDATA
.rsrc0x200000xb2700xb400R-- IDATA
.reloc0x2c0000x10c40x1200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x177640x17c
RESOURCE0x200000xb270
EXCEPTION00
SECURITY00
BASERELOC0x2c0000xc30
DEBUG0x8c700x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x110000x588
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP3681+11169040
BITMAP#368170080
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#996400
ICON#1042640
ICON#1124400
ICON#1211280
GROUP_ICON#37211740
VERSION#19480
module_namehintordfunction_name
KERNEL32.dll168CreateProcessW
KERNEL32.dll97CompareStringA
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll214DeleteFileW
KERNEL32.dll831LoadLibraryW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll269EnumSystemLocalesA
KERNEL32.dll901OpenThread
KERNEL32.dll1266VirtualQueryEx
KERNEL32.dll333FindResourceExW
KERNEL32.dll659GetTickCount
KERNEL32.dll612GetStdHandle
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll567GetOEMCP
KERNEL32.dll813LCMapStringW
KERNEL32.dll703GlobalMemoryStatus
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1069SetConsoleCtrlHandler
KERNEL32.dll1260VirtualFree
KERNEL32.dll1048RtlUnwind
KERNEL32.dll661GetTimeFormatA
KERNEL32.dll918Process32FirstW
KERNEL32.dll586GetProcessHeap
KERNEL32.dll281ExitProcess
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll921ProcessIdToSessionId
KERNEL32.dll1323WritePrivateProfileStringW
KERNEL32.dll1201SizeofResource
KERNEL32.dll158CreateMutexW
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll454GetDateFormatA
KERNEL32.dll143CreateFileW
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll325FindNextFileW
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll391GetCommandLineW
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll889OpenFileMappingW
KERNEL32.dll1126SetFilePointer
KERNEL32.dll499GetFileType
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll360GetACP
KERNEL32.dll82CloseHandle
KERNEL32.dll864MoveFileExW
KERNEL32.dll920Process32NextW
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll1135SetHandleCount
KERNEL32.dll581GetProcAddress
KERNEL32.dll1216TerminateProcess
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll1222TlsFree
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll679GetVolumeInformationW
KERNEL32.dll1317WriteFile
KERNEL32.dll722HeapReAlloc
KERNEL32.dll576GetPrivateProfileSectionW
KERNEL32.dll724HeapSize
KERNEL32.dll344FlushInstructionCache
KERNEL32.dll133CreateEventW
KERNEL32.dll575GetPrivateProfileSectionNamesW
KERNEL32.dll676GetVersionExW
KERNEL32.dll1139SetLastError
KERNEL32.dll833LoadResource
KERNEL32.dll811LCMapStringA
KERNEL32.dll370GetCPInfo
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll221DeviceIoControl
KERNEL32.dll855MapViewOfFile
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll462GetDiskFreeSpaceExW
KERNEL32.dll136CreateFileA
KERNEL32.dll1223TlsGetValue
KERNEL32.dll960ReadFile
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll778IsValidCodePage
KERNEL32.dll452GetCurrentThread
KERNEL32.dll945RaiseException
KERNEL32.dll288FatalAppExitA
KERNEL32.dll828LoadLibraryA
KERNEL32.dll1357lstrlenA
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll840LocalFree
KERNEL32.dll717HeapCreate
KERNEL32.dll578GetPrivateProfileStringW
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll718HeapDestroy
KERNEL32.dll476GetEnvironmentVariableW
KERNEL32.dll689GlobalAddAtomA
KERNEL32.dll71CancelWaitableTimer
KERNEL32.dll1264VirtualProtectEx
KERNEL32.dll903OpenWaitableTimerA
KERNEL32.dll904OpenWaitableTimerW
KERNEL32.dll4AddAtomW
KERNEL32.dll66CancelIo
KERNEL32.dll829LoadLibraryExA
KERNEL32.dll674GetVersion
KERNEL32.dll690GlobalAddAtomW
KERNEL32.dll21AreFileApisANSI
KERNEL32.dll1358lstrlenW
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll334FindResourceW
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll852LockResource
KERNEL32.dll719HeapFree
KERNEL32.dll410GetConsoleCP
KERNEL32.dll181CreateThread
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll748InterlockedExchange
KERNEL32.dll432GetConsoleOutputCP
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll963ReadProcessMemory
KERNEL32.dll617GetStringTypeW
KERNEL32.dll1221TlsAlloc
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll514GetLastError
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll645GetTempPathW
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll1202Sleep
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll428GetConsoleMode
KERNEL32.dll140CreateFileMappingW
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll715HeapAlloc
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll614GetStringTypeA
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll780IsValidLocale
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll572GetPrivateProfileIntW
KERNEL32.dll1306WriteConsoleA
KERNEL32.dll190CreateToolhelp32Snapshot
KERNEL32.dll100CompareStringW
KERNEL32.dll1113SetEvent
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll1224TlsSetValue
KERNEL32.dll496GetFileSize
KERNEL32.dll282ExitThread
KERNEL32.dll515GetLocalTime
KERNEL32.dll354FreeLibrary
KERNEL32.dll859Module32FirstW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll521GetLogicalDrives
KERNEL32.dll896OpenProcess
KERNEL32.dll497GetFileSizeEx
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll861Module32NextW
USER32.dll208DrawTextW
USER32.dll175DispatchMessageW
USER32.dll288GetCursorPos
USER32.dll505LoadStringA
USER32.dll483KillTimer
USER32.dll337GetMenuItemCount
USER32.dll715SetWindowTextW
USER32.dll49CharNextW
USER32.dll223EnumChildWindows
USER32.dll735ShowWindow
USER32.dll658SetFocus
USER32.dll764TranslateMessage
USER32.dll710SetWindowPos
USER32.dll156DefWindowProcW
USER32.dll699SetTimer
USER32.dll351GetMonitorInfoW
USER32.dll648SetCursor
USER32.dll495LoadImageW
USER32.dll536MonitorFromPoint
USER32.dll576PtInRect
USER32.dll621ScreenToClient
USER32.dll300GetFocus
USER32.dll340GetMenuItemInfoW
USER32.dll419GetWindowTextW
USER32.dll398GetWindow
USER32.dll782UpdateLayeredWindow
USER32.dll10AppendMenuW
USER32.dll567PostQuitMessage
USER32.dll506LoadStringW
USER32.dll525MessageBeep
USER32.dll636SendMessageW
USER32.dll615RemoveMenu
USER32.dll757TrackMouseEvent
USER32.dll402GetWindowDC
USER32.dll30CallWindowProcW
USER32.dll162DestroyCursor
USER32.dll773UnregisterClassA
USER32.dll412GetWindowRect
USER32.dll242EnumWindows
USER32.dll762TranslateAcceleratorW
USER32.dll107CreatePopupMenu
USER32.dll356GetParent
USER32.dll276GetClientRect
USER32.dll566PostMessageW
USER32.dll538MonitorFromWindow
USER32.dll491LoadCursorW
USER32.dll349GetMessageW
USER32.dll420GetWindowThreadProcessId
USER32.dll659SetForegroundWindow
USER32.dll492LoadIconA
USER32.dll57CharUpperA
USER32.dll819wsprintfW
USER32.dll301GetForegroundWindow
USER32.dll291GetDesktopWindow
USER32.dll480IsWindowVisible
USER32.dll759TrackPopupMenuEx
USER32.dll406GetWindowLongW
USER32.dll274GetClassNameW
USER32.dll164DestroyMenu
USER32.dll446InvalidateRect
USER32.dll475IsWindow
USER32.dll503LoadMenuW
USER32.dll563PeekMessageW
USER32.dll708SetWindowLongW
USER32.dll613ReleaseDC
USER32.dll521MapWindowPoints
GDI32.dll624SaveDC
GDI32.dll423GetBitmapBits
GDI32.dll617RestoreDC
GDI32.dll227DeleteDC
GDI32.dll65CreateFontW
GDI32.dll47CreateCompatibleBitmap
GDI32.dll230DeleteObject
GDI32.dll53CreateDIBSection
GDI32.dll48CreateCompatibleDC
GDI32.dll631SelectObject
GDI32.dll678SetTextColor
GDI32.dll639SetBkMode
GDI32.dll636SetBitmapBits
ADVAPI32.dll124CreateProcessAsUserW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll612RegOpenKeyW
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll322GetNamedSecurityInfoW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll288FreeSid
ADVAPI32.dll218DeleteService
ADVAPI32.dll706SetTokenInformation
ADVAPI32.dll92ControlService
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll129CreateServiceW
ADVAPI32.dll656RevertToSelf
ADVAPI32.dll678SetEntriesInAclW
ADVAPI32.dll507OpenServiceW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll552QueryServiceStatus
ADVAPI32.dll713StartServiceW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll223DuplicateTokenEx
ADVAPI32.dll689SetNamedSecurityInfoW
SHELL32.dll207SHGetMalloc
SHELL32.dll172SHFileOperationW
SHELL32.dll225SHGetSpecialFolderPathW
ole32.dll64CoInitializeSecurity
ole32.dll108CoUninitialize
ole32.dll103CoTaskMemAlloc
ole32.dll105CoTaskMemRealloc
ole32.dll99CoSetProxyBlanket
ole32.dll15CoCreateGuid
ole32.dll104CoTaskMemFree
ole32.dll16CoCreateInstance
ole32.dll62CoInitialize
OLEAUT32.dll150
OLEAUT32.dll201
OLEAUT32.dll8
OLEAUT32.dll9
OLEAUT32.dll6
OLEAUT32.dll277
OLEAUT32.dll7
OLEAUT32.dll200
OLEAUT32.dll2
OLEAUT32.dll12
OLEAUT32.dll202
WINHTTP.dll22WinHttpReceiveResponse
WINHTTP.dll7WinHttpCloseHandle
WINHTTP.dll8WinHttpConnect
WINHTTP.dll15WinHttpOpen
WINHTTP.dll26WinHttpSetOption
WINHTTP.dll19WinHttpQueryHeaders
WINHTTP.dll21WinHttpReadData
WINHTTP.dll23WinHttpSendRequest
WINHTTP.dll16WinHttpOpenRequest
COMCTL32.dll123InitCommonControlsEx
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll325StrStrIW
SHLWAPI.dll52PathAppendW
SHLWAPI.dll91PathIsDirectoryW
SHLWAPI.dll137PathRemoveExtensionW
SHLWAPI.dll69PathFileExistsW
SHLWAPI.dll179SHDeleteKeyW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll85PathGetDriveNumberW
SHLWAPI.dll149PathStripPathW
SHLWAPI.dll139PathRemoveFileSpecW
MSIMG32.dllAlphaBlend
MSIMG32.dll2GradientFill
VERSION.dll14VerQueryValueW
VERSION.dll6GetFileVersionInfoW
VERSION.dll5GetFileVersionInfoSizeW
IPHLPAPI.DLL87GetIpForwardTable
oledlg.dll8
WTSAPI32.dll17WTSEnumerateSessionsW
WTSAPI32.dll18WTSFreeMemory
PSAPI.DLL25QueryWorkingSet
PSAPI.DLL17GetModuleInformation
PSAPI.DLL21GetProcessMemoryInfo
PSAPI.DLL16GetModuleFileNameExW
msvcrt.dll655exit
msvcrt.dll66_CIsin
msvcrt.dll237_except_handler3
msvcrt.dll152__set_app_type
USERENV.dll4DestroyEnvironmentBlock
USERENV.dllCreateEnvironmentBlock

StringTable 040904b0

CompanyNameDoubtsoftware.com
FileDescriptionAdvanced Task Scheduler 32-bit Edition
FileVersion4.1.0.612
InternalName#dvenced Task Scheduler 32-bit Edition
LegalCopyrightCopyright © Southsoftware.com, 2002-2015
OriginalFilenameBifscheduler_edmin.exe
ProductNameAdvanced Task Scheduler 32-bit Edition
ProductVersion4.1.0.612

VS_FIXEDFILEINFO

FileVersion4.1.0.612
ProductVersion4.1.0.612
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0162816EXE03/30/2016 06:00:35#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK