filename2241.exe
size207872 (0x32c00)
md50e900c3f221315b66f0a92d5bc7b6208
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
1492102234
13121022131
1473072913
10247
1322102236
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x54eda8d4
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion9.0
SizeOfCode0x24200
SizeOfInitializedData0x1c008000
SizeOfUninitializedData0
AddressOfEntryPoint0xf592
BaseOfCode0x1000
BaseOfData0x26000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x3c000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 2005

Sections

namevavsizeraw sizeflags
.text0x10000x240ce0x24200R-X CODE
.rdata0x260000x7d9c0x7e00R-- IDATA
.data0x2e0000x8ee40x2000RW- IDATA
.rsrc0x370000x46bc0x4800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2c8640x8c
RESOURCE0x370000x46bc
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x2c3000x40
Bound_IAT00
IAT0x260000x3dc
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#1033241252
DIALOG#1055821252
DIALOG#1062601252
DIALOG#1071601252
DIALOG#1112381252
#15#88148311252
VERSION#18281252
MANIFEST#13811252
module_namehintordfunction_name
USER32.dll483KillTimer
USER32.dll715SetWindowTextW
USER32.dll506LoadStringW
USER32.dll505LoadStringA
USER32.dll60CharUpperW
USER32.dll57CharUpperA
USER32.dll218EndDialog
USER32.dll533MessageBoxW
USER32.dll172DialogBoxParamW
USER32.dll107CreatePopupMenu
USER32.dll216EnableWindow
USER32.dll220EndPaint
USER32.dll246FillRect
USER32.dll276GetClientRect
USER32.dll288GetCursorPos
USER32.dll289GetDC
USER32.dll291GetDesktopWindow
USER32.dll294GetDlgCtrlID
USER32.dll171DialogBoxParamA
USER32.dll297GetDlgItemTextA
USER32.dll317GetKeyState
USER32.dll379GetSysColor
USER32.dll382GetSystemMetrics
USER32.dll405GetWindowLongA
USER32.dll411GetWindowPlacement
USER32.dll412GetWindowRect
USER32.dll486LoadBitmapA
USER32.dll492LoadIconA
USER32.dll155DefWindowProcA
USER32.dll166DestroyWindow
USER32.dll295GetDlgItem
USER32.dll526MessageBoxA
USER32.dll565PostMessageA
USER32.dll567PostQuitMessage
USER32.dll588RegisterClassExA
USER32.dll613ReleaseDC
USER32.dll626SendDlgItemMessageA
USER32.dll631SendMessageA
USER32.dll639SetActiveWindow
USER32.dll655SetDlgItemTextA
USER32.dll658SetFocus
USER32.dll659SetForegroundWindow
USER32.dll664SetLayeredWindowAttributes
USER32.dll672SetMenuItemBitmaps
USER32.dll689SetScrollPos
USER32.dll690SetScrollRange
USER32.dll699SetTimer
USER32.dll707SetWindowLongA
USER32.dll710SetWindowPos
USER32.dll714SetWindowTextA
USER32.dll735ShowWindow
USER32.dll758TrackPopupMenu
USER32.dll785UpdateWindow
USER32.dll109CreateWindowExA
USER32.dll98CreateDialogParamA
USER32.dll77CloseWindow
USER32.dll35ChangeDisplaySettingsA
USER32.dll14BeginPaint
USER32.dll9AppendMenuA
USER32.dll818wsprintfA
USER32.dll686SetRect
COMDLG32.dllChooseColorA
COMDLG32.dll11GetOpenFileNameA
COMDLG32.dll13GetSaveFileNameA
SHELL32.dll288ShellExecuteExA
SHELL32.dll286ShellExecuteA
SHELL32.dll127SHChangeNotify
GDI32.dll60CreateFontA
GDI32.dll75CreatePen
GDI32.dll84CreateSolidBrush
GDI32.dll227DeleteDC
GDI32.dll230DeleteObject
GDI32.dll566LineTo
GDI32.dll570MoveToEx
GDI32.dll48CreateCompatibleDC
GDI32.dll631SelectObject
GDI32.dll638SetBkColor
GDI32.dll639SetBkMode
GDI32.dll668SetPixelFormat
GDI32.dll678SetTextColor
GDI32.dll695SwapBuffers
GDI32.dll696TextOutA
GDI32.dll47CreateCompatibleBitmap
GDI32.dll25ChoosePixelFormat
GDI32.dll598Polygon
GDI32.dll19BitBlt
COMCTL32.dll104ImageList_LoadImageA
COMCTL32.dll17
KERNEL32.dll352FreeEnvironmentStringsA
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll1048RtlUnwind
KERNEL32.dll617GetStringTypeW
KERNEL32.dll614GetStringTypeA
KERNEL32.dll780IsValidLocale
KERNEL32.dll269EnumSystemLocalesA
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll719HeapFree
KERNEL32.dll370GetCPInfo
KERNEL32.dll1222TlsFree
KERNEL32.dll1224TlsSetValue
KERNEL32.dll472GetEnvironmentStrings
KERNEL32.dll1223TlsGetValue
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll499GetFileType
KERNEL32.dll1135SetHandleCount
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll391GetCommandLineW
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll1039ResetEvent
KERNEL32.dll1113SetEvent
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll717HeapCreate
KERNEL32.dll130CreateEventA
KERNEL32.dll1271WaitForMultipleObjects
KERNEL32.dll612GetStdHandle
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll410GetConsoleCP
KERNEL32.dll428GetConsoleMode
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll811LCMapStringA
KERNEL32.dll813LCMapStringW
KERNEL32.dll715HeapAlloc
KERNEL32.dll722HeapReAlloc
KERNEL32.dll945RaiseException
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1306WriteConsoleA
KERNEL32.dll432GetConsoleOutputCP
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll724HeapSize
KERNEL32.dll100CompareStringW
KERNEL32.dll97CompareStringA
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll1221TlsAlloc
KERNEL32.dll446GetCurrentDirectoryA
KERNEL32.dll82CloseHandle
KERNEL32.dll124CreateDirectoryA
KERNEL32.dll668GetUserDefaultLangID
KERNEL32.dll674GetVersion
KERNEL32.dll686GetWindowsDirectoryA
KERNEL32.dll691GlobalAlloc
KERNEL32.dll698GlobalFree
KERNEL32.dll702GlobalLock
KERNEL32.dll704GlobalMemoryStatusEx
KERNEL32.dll17AllocateUserPhysicalPages
KERNEL32.dll709GlobalUnlock
KERNEL32.dll828LoadLibraryA
KERNEL32.dll833LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll853MapUserPhysicalPages
KERNEL32.dll855MapViewOfFile
KERNEL32.dll888OpenFileMappingA
KERNEL32.dll896OpenProcess
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll936QueryPerformanceFrequency
KERNEL32.dll960ReadFile
KERNEL32.dll136CreateFileA
KERNEL32.dll137CreateFileMappingA
KERNEL32.dll164CreateProcessA
KERNEL32.dll181CreateThread
KERNEL32.dll211DeleteFileA
KERNEL32.dll221DeviceIoControl
KERNEL32.dll281ExitProcess
KERNEL32.dll282ExitThread
KERNEL32.dll331FindResourceA
KERNEL32.dll354FreeLibrary
KERNEL32.dll358FreeUserPhysicalPages
KERNEL32.dll390GetCommandLineA
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll452GetCurrentThread
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll496GetFileSize
KERNEL32.dll514GetLastError
KERNEL32.dll515GetLocalTime
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll570GetPriorityClass
KERNEL32.dll581GetProcAddress
KERNEL32.dll623GetSystemDirectoryA
KERNEL32.dll1126SetFilePointer
KERNEL32.dll627GetSystemInfo
KERNEL32.dll644GetTempPathA
KERNEL32.dll654GetThreadPriority
KERNEL32.dll1357lstrlenA
KERNEL32.dll1351lstrcpyA
KERNEL32.dll1348lstrcmpiA
KERNEL32.dll1342lstrcatA
KERNEL32.dll1317WriteFile
KERNEL32.dll1260VirtualFree
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll659GetTickCount
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll1217TerminateThread
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1202Sleep
KERNEL32.dll1177SetThreadPriority
KERNEL32.dll1168SetThreadAffinityMask
KERNEL32.dll1150SetProcessAffinityMask
KERNEL32.dll1149SetPriorityClass
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll675GetVersionExA
KERNEL32.dll1100SetCurrentDirectoryA
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll21AreFileApisANSI
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll840LocalFree
KERNEL32.dll349FormatMessageA
KERNEL32.dll350FormatMessageW
KERNEL32.dll1130SetFileTime
KERNEL32.dll143CreateFileW
KERNEL32.dll1139SetLastError
KERNEL32.dll1118SetFileAttributesA
KERNEL32.dll1024RemoveDirectoryA
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll214DeleteFileW
KERNEL32.dll504GetFullPathNameA
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll642GetTempFileNameA
KERNEL32.dll302FindClose
KERNEL32.dll306FindFirstFileA
KERNEL32.dll313FindFirstFileW
KERNEL32.dll323FindNextFileA

StringTable 040904E4

CompanyNameBush visitor - www.Reader.com
FileDescriptionMad refer tax arrange explore
FileVersion1.0.0.3
Internal NameBurn.exe
Legal TrademarksReader
Original FilenameBurn.exe
ProductNameReader
ProductVersion2.0
LegalCopyrightCopyright (C) Reader 2001-2013

VS_FIXEDFILEINFO

FileVersion5.1.0.0
ProductVersion8.3.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10001
FileType1
FileSubtype0
offsetsizetypecomment
0207872EXE02/25/2015 10:49:56#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK