filename | malware.unpacked.exe | |
---|---|---|
size | 592896 (0x90c00) | |
md5 | 0c37b1030207544189cb961d7fbac34c | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe8 |
Rich Header
lib id | version | times used |
---|---|---|
149 | 30729 | 17 |
131 | 30729 | 112 |
138 | 30729 | 6 |
109 | 50727 | 1 |
123 | 50727 | 19 |
1 | 0 | 188 |
132 | 30729 | 55 |
148 | 21022 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x21cac | 0xc8 | |
RESOURCE | 0x27000 | 0x6b0b8 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0x206b8 | 0x40 | |
Bound_IAT | 0 | 0 | |
IAT | 0 | 0 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
id | lang | string |
---|---|---|
128 | 1033 | VirtualDriveManager |
57345 | 1033 | Ready |
57600 | 1033 | Create a new document New |
57601 | 1033 | Open an existing document Open |
57602 | 1033 | Close the active document Close |
57603 | 1033 | Save the active document Save |
57604 | 1033 | Save the active document with a new name Save As |
57605 | 1033 | Change the printing options Page Setup |
57606 | 1033 | Change the printer and printing options Print Setup |
57607 | 1033 | Print the active document Print |
57609 | 1033 | Display full pages Print Preview |
57632 | 1033 | Erase the selection Erase |
57633 | 1033 | Erase everything Erase All |
57634 | 1033 | Copy the selection and put it on the Clipboard Copy |
57635 | 1033 | Cut the selection and put it on the Clipboard Cut |
57636 | 1033 | Find the specified text Find |
57637 | 1033 | Insert Clipboard contents Paste |
57640 | 1033 | Repeat the last action Repeat |
57641 | 1033 | Replace specific text with different text Replace |
57642 | 1033 | Select the entire document Select All |
57643 | 1033 | Undo the last action Undo |
57644 | 1033 | Redo the previously undone action Redo |
57648 | 1033 | Open another window for the active document New Window |
57649 | 1033 | Arrange icons at the bottom of the window Arrange Icons |
57650 | 1033 | Arrange windows so they overlap Cascade Windows |
57651 | 1033 | Arrange windows as non-overlapping tiles Tile Windows |
57652 | 1033 | Arrange windows as non-overlapping tiles Tile Windows |
57653 | 1033 | Split the active window into panes Split |
57664 | 1033 | Display program information, version number and copyright About |
57665 | 1033 | Quit the application; prompts to save documents Exit |
57680 | 1033 | Switch to the next window pane Next Pane |
57681 | 1033 | Switch back to the previous window pane Previous Pane |
61184 | 1033 | Change the window size |
61185 | 1033 | Change the window position |
61186 | 1033 | Reduce the window to an icon |
61187 | 1033 | Enlarge the window to full size |
61188 | 1033 | Switch to the next document window |
61189 | 1033 | Switch to the previous document window |
61190 | 1033 | Close the active window and prompts to save the documents |
61202 | 1033 | Restore the window to normal size |
61203 | 1033 | Activate Task List |
61215 | 1033 | Activate this window |
61402 | 1033 | Open this document |
StringTable 040904b0
Comments | SysProgs.org |
FileDescription | Portable WinCDEmu [BETA] |
FileVersion | 3, 4, 0, 1 |
InternalName | Portable WinCDEmu |
LegalCopyright | SysProgs.org |
OriginalFilename | PortableWinCDEmu.exe |
ProductName | Portable WinCDEmu |
ProductVersion | 3, 4, 0, 1 |
SpecialBuild | beta |
VS_FIXEDFILEINFO
FileVersion | 3.4.0.1 |
ProductVersion | 3.4.0.1 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0x20 |
FileOS | 4 |
FileType | 2 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK