filenameevrika.exe
size318976 (0x4de00)
md50f724e916f68c75ff76f651da7b8bda4
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
2252042635
2232042616
22420426105
203655019
10203
2292061731
219206171
15101
222206171

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x529763a4
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x18800
SizeOfInitializedData0x51000
SizeOfUninitializedData0
AddressOfEntryPoint0xe088
BaseOfCode0x1000
BaseOfData0x1a000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x6d000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x187d60x18800R-X CODE
.rdata0x1a0000x70160x7200R-- IDATA
.data0x220000x1f9c40x3c00RW- IDATA
.rsrc0x420000x257a00x25800R-- IDATA
.reloc0x680000x4a460x4c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x201840x64
RESOURCE0x420000x257a0
EXCEPTION00
SECURITY00
BASERELOC0x680000x1fc0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1f5400x40
Bound_IAT00
IAT0x1a0000x2b4
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAPTABLE108400
BITMAPTOOLBAR266640
ICON#1297620
ICON#2676240
ICON#396400
ICON#442640
ICON#524400
ICON#611280
GROUP_ICONAPPLICATION900
MANIFEST#13810
module_namehintordfunction_name
MSIMG32.dll2GradientFill
MSIMG32.dllAlphaBlend
KERNEL32.dll1071RaiseException
KERNEL32.dll1273SetLastError
KERNEL32.dll851InterlockedIncrement
KERNEL32.dll524GetCurrentThreadId
KERNEL32.dll672GetProcessHeap
KERNEL32.dll702GetStdHandle
KERNEL32.dll572GetFileType
KERNEL32.dll260DeleteCriticalSection
KERNEL32.dll700GetStartupInfoW
KERNEL32.dll608GetModuleFileNameA
KERNEL32.dll609GetModuleFileNameW
KERNEL32.dll1053QueryPerformanceCounter
KERNEL32.dll520GetCurrentProcessId
KERNEL32.dll724GetSystemTimeAsFileTime
KERNEL32.dll549GetEnvironmentStringsW
KERNEL32.dll411FreeEnvironmentStringsW
KERNEL32.dll1391UnhandledExceptionFilter
KERNEL32.dll1328SetUnhandledExceptionFilter
KERNEL32.dll838InitializeCriticalSectionAndSpinCount
KERNEL32.dll1343Sleep
KERNEL32.dll519GetCurrentProcess
KERNEL32.dll1358TerminateProcess
KERNEL32.dll1376TlsAlloc
KERNEL32.dll1378TlsGetValue
KERNEL32.dll1379TlsSetValue
KERNEL32.dll1377TlsFree
KERNEL32.dll613GetModuleHandleW
KERNEL32.dll869IsDebuggerPresent
KERNEL32.dll813HeapAlloc
KERNEL32.dll927LeaveCriticalSection
KERNEL32.dll1180RtlUnwind
KERNEL32.dll932LoadLibraryExW
KERNEL32.dll879IsValidCodePage
KERNEL32.dll418GetACP
KERNEL32.dll644GetOEMCP
KERNEL32.dll433GetCPInfo
KERNEL32.dll820HeapReAlloc
KERNEL32.dll915LCMapStringW
KERNEL32.dll1015OutputDebugStringW
KERNEL32.dll707GetStringTypeW
KERNEL32.dll400FlushFileBuffers
KERNEL32.dll474GetConsoleCP
KERNEL32.dll492GetConsoleMode
KERNEL32.dll1295SetStdHandle
KERNEL32.dll1259SetFilePointerEx
KERNEL32.dll1485WriteConsoleW
KERNEL32.dll193CreateFileW
KERNEL32.dll874IsProcessorFeaturePresent
KERNEL32.dll822HeapSize
KERNEL32.dll1466WideCharToMultiByte
KERNEL32.dll610GetModuleHandleA
KERNEL32.dll974MultiByteToWideChar
KERNEL32.dll667GetProcAddress
KERNEL32.dll612GetModuleHandleExW
KERNEL32.dll335ExitProcess
KERNEL32.dll847InterlockedDecrement
KERNEL32.dll817HeapFree
KERNEL32.dll590GetLastError
KERNEL32.dll454GetCommandLineA
KERNEL32.dll253DecodePointer
KERNEL32.dll287EncodePointer
KERNEL32.dll807GlobalUnlock
KERNEL32.dll789GlobalAlloc
KERNEL32.dll800GlobalLock
KERNEL32.dll804GlobalSize
KERNEL32.dll973MulDiv
KERNEL32.dll126CloseHandle
KERNEL32.dll591GetLocalTime
KERNEL32.dll1087ReadFile
KERNEL32.dll1486WriteFile
KERNEL32.dll1258SetFilePointer
KERNEL32.dll185CreateFileA
KERNEL32.dll291EnterCriticalSection
USER32.dll546LoadIconA
USER32.dll824TrackMouseEvent
USER32.dll339GetKeyState
USER32.dll704SetCapture
USER32.dll285GetClassInfoExA
USER32.dll337GetKeyNameTextA
USER32.dll825TrackPopupMenu
USER32.dll648RegisterClassExA
USER32.dll489InsertMenuItemA
USER32.dll459GetWindowRect
USER32.dll685ScreenToClient
USER32.dll367GetMessageA
USER32.dll713SetCursor
USER32.dll173DestroyWindow
USER32.dll73ClientToScreen
USER32.dll233EndPaint
USER32.dll57CharUpperA
USER32.dll498IsCharAlphaA
USER32.dll204DrawFrameControl
USER32.dll548LoadImageA
USER32.dll202DrawFocusRect
USER32.dll211DrawTextA
USER32.dll710SetClipboardData
USER32.dll606OpenClipboard
USER32.dll223EmptyClipboard
USER32.dll296GetClipboardData
USER32.dll507IsClipboardFormatAvailable
USER32.dll75CloseClipboard
USER32.dll293GetClientRect
USER32.dll109CreateMenu
USER32.dll724SetFocus
USER32.dll695SendMessageA
USER32.dll14BeginPaint
USER32.dll281GetCapture
USER32.dll831TranslateMessage
USER32.dll353GetMenu
USER32.dll463GetWindowTextA
USER32.dll573MapVirtualKeyA
USER32.dll780SetWindowLongA
USER32.dll495InvalidateRect
USER32.dll16BringWindowToTop
USER32.dll452GetWindowLongA
USER32.dll112CreateWindowExA
USER32.dll160DefWindowProcA
USER32.dll311GetDesktopWindow
USER32.dll423GetSysColor
USER32.dll783SetWindowPos
USER32.dll307GetCursorPos
USER32.dll361GetMenuItemInfoA
USER32.dll800ShowWindow
USER32.dll110CreatePopupMenu
USER32.dll271GetActiveWindow
USER32.dll9AppendMenuA
USER32.dll359GetMenuItemCount
USER32.dll623PostMessageA
USER32.dll180DispatchMessageA
USER32.dll3AdjustWindowRectEx
USER32.dll676ReleaseCapture
USER32.dll426GetSystemMetrics
USER32.dll787SetWindowTextA
USER32.dll855UpdateWindow
USER32.dll171DestroyMenu
USER32.dll740SetMenuItemInfoA
USER32.dll542LoadCursorA
USER32.dll228EnableWindow
GDI32.dll568GetStockObject
GDI32.dll550GetObjectA
GDI32.dll671RoundRect
GDI32.dll592GetTextMetricsA
GDI32.dll490GetClipBox
GDI32.dll652Polyline
GDI32.dll480GetCharWidth32A
GDI32.dll80CreateRectRgn
GDI32.dll739SetDCPenColor
GDI32.dll660Rectangle
GDI32.dll48CreateCompatibleBitmap
GDI32.dll475GetCharABCWidthsA
GDI32.dll49CreateCompatibleDC
GDI32.dll722SelectClipRgn
GDI32.dll724SelectObject
GDI32.dll270DeleteObject
GDI32.dll732SetBkMode
GDI32.dll738SetDCBrushColor
GDI32.dll502GetDeviceCaps
GDI32.dll61CreateFontA
GDI32.dll54CreateDIBSection
GDI32.dll267DeleteDC
GDI32.dll771SetTextColor
GDI32.dll609LineTo
GDI32.dll635PatBlt
GDI32.dll19BitBlt
GDI32.dll623MoveToEx
GDI32.dll491GetClipRgn
GDI32.dll789TextOutA
offsetsizetypecomment
0318976EXE11/28/2013 15:39:16#
15c115HTM#
23c9029762PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER