filenameSkyTra2.exe
size754688 (0xb8400)
md50fb0a7ee28ff36d13ef3439d88ca5200
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0xdd00
oem_info0xd12e
reserved20xb9dc94e7
reserved30x2eccd7
reserved40x15df9f00
reserved50x3ef9
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
10804711665439
10816815204382
6209012189701
1080478585272
621348388645
10844715466510
123404263080246

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4dddf14f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion7.0
SizeOfCode0x48c00
SizeOfInitializedData0x6f400
SizeOfUninitializedData0
AddressOfEntryPoint0x3f528
BaseOfCode0x1000
BaseOfData0x4a000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x113000
SizeOfHeaders0x400
CheckSum0xc782a
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text�0x10000x48a0e0x48c00R-X CODE
.dataG0x4a0000x951040x3d200RW- IDATA
.rdata-0xe00000x27ab0x2800R-- IDATA
.rsrc0xe30000x2d8800x2da00R-- IDATA
.reloc�0x1110000x20000x2000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xe02c40x78
RESOURCE0xe30000x2d880
EXCEPTION00
SECURITY00
BASERELOC0x1110000x1f44
DEBUG0x655440x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xe00000x2c4
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#108844370
DIALOG#136244370
DIALOG#187044370
DIALOG#164544370
DIALOG#130844370
DIALOG#120144370
DIALOG#157644370
DIALOG#141344370
DIALOG#129644370
DIALOG#165344370
DIALOG#139344370
DIALOG#158344370
DIALOG#194944370
DIALOG#164644370
DIALOG#101844370
DIALOG#188844370
DIALOG#110444370
DIALOG#194744370
DIALOG#185844370
DIALOG#105544370
DIALOG#144544370
DIALOG#161144370
DIALOG#108844370
DIALOG#148044370
DIALOG#192444370
DIALOG#179644370
DIALOG#180844370
DIALOG#119744370
DIALOG#113444370
DIALOG#165244370
DIALOG#198244370
DIALOG#177844370
DIALOG#117644370
DIALOG#100444370
DIALOG#173344370
DIALOG#152844370
DIALOG#193244370
DIALOG#142644370
DIALOG#154444370
DIALOG#118144370
DIALOG#180644370
#13#268712080
#13#523012240
VERSION#18400
module_namehintordfunction_name
KERNEL32.dllGetLongPathNameW
KERNEL32.dlllstrcpynA
KERNEL32.dllGetMailslotInfo
KERNEL32.dllIsDebuggerPresent
KERNEL32.dll_hread
KERNEL32.dllCreateHardLinkA
KERNEL32.dllWritePrivateProfileSectionA
KERNEL32.dllSetCalendarInfoA
KERNEL32.dllCreateSemaphoreA
KERNEL32.dllIsBadStringPtrA
KERNEL32.dllGetSystemTimeAsFileTime
KERNEL32.dllGetPrivateProfileSectionNamesA
KERNEL32.dllCommConfigDialogW
KERNEL32.dllGetComputerNameExA
KERNEL32.dllReadFileScatter
KERNEL32.dllFindVolumeClose
KERNEL32.dllSetFilePointerEx
KERNEL32.dllFindNextVolumeA
KERNEL32.dllCreateMailslotW
KERNEL32.dllSizeofResource
KERNEL32.dllOpenSemaphoreA
KERNEL32.dllTlsAlloc
KERNEL32.dllGetCommState
KERNEL32.dllGetCurrentProcess
KERNEL32.dllGlobalUnfix
KERNEL32.dlllstrcmpA
KERNEL32.dllExpandEnvironmentStringsW
KERNEL32.dllSetProcessWorkingSetSize
KERNEL32.dllSetDefaultCommConfigA
KERNEL32.dllMoveFileA
KERNEL32.dllGetPrivateProfileSectionNamesW
KERNEL32.dllFindFirstVolumeMountPointW
KERNEL32.dllLocalLock
KERNEL32.dllGetLocalTime
KERNEL32.dllDefineDosDeviceA
KERNEL32.dlllstrcpyA
KERNEL32.dllGetComputerNameExW
KERNEL32.dllGetProcessTimes
KERNEL32.dllFindNextVolumeMountPointW
KERNEL32.dllGlobalUnlock
KERNEL32.dllCompareFileTime
KERNEL32.dllGetExitCodeThread
KERNEL32.dllLockFileEx
KERNEL32.dllSetVolumeMountPointW
KERNEL32.dllFlushFileBuffers
KERNEL32.dllGetCPInfo
KERNEL32.dllGetHandleInformation
KERNEL32.dllCreateEventA
KERNEL32.dllCreateJobObjectA
KERNEL32.dllReleaseSemaphore
KERNEL32.dllGetUserDefaultUILanguage
KERNEL32.dllInitAtomTable
KERNEL32.dllOpenFileMappingA
KERNEL32.dllTlsGetValue
KERNEL32.dllGetProcessAffinityMask
KERNEL32.dllGetDefaultCommConfigW
KERNEL32.dllGetFileType
KERNEL32.dllIsProcessorFeaturePresent
KERNEL32.dllCreateMailslotA
KERNEL32.dllSetSystemTimeAdjustment
KERNEL32.dllGetProfileIntW
KERNEL32.dllMoveFileExA
KERNEL32.dllEnumResourceLanguagesA
KERNEL32.dllGetProcessPriorityBoost
KERNEL32.dllGetLogicalDrives
KERNEL32.dllSetLocaleInfoW
KERNEL32.dllGetSystemDefaultLCID
KERNEL32.dllFindResourceExA
KERNEL32.dllSetEnvironmentVariableA
KERNEL32.dllFindNextChangeNotification
KERNEL32.dllQueueUserAPC
KERNEL32.dllCreateFileA
KERNEL32.dllGlobalFree
KERNEL32.dllGlobalSize
KERNEL32.dllWaitNamedPipeW
KERNEL32.dllGetThreadLocale
KERNEL32.dllGetSystemTimeAdjustment
KERNEL32.dllSetThreadLocale
KERNEL32.dllGetProfileStringW
KERNEL32.dlllstrcpyW
KERNEL32.dllGetCommandLineW
KERNEL32.dllRtlUnwind
KERNEL32.dllExitProcess
KERNEL32.dllIsBadCodePtr
KERNEL32.dllCreateMutexW
KERNEL32.dllGetUserDefaultLCID
KERNEL32.dllRemoveDirectoryA
KERNEL32.dllSetUnhandledExceptionFilter
KERNEL32.dllQueryPerformanceCounter
KERNEL32.dllGetCompressedFileSizeW
KERNEL32.dllGetDevicePowerState
KERNEL32.dllOpenFileMappingW
KERNEL32.dllGetLastError
KERNEL32.dllGetEnvironmentVariableA
KERNEL32.dllGetComputerNameA
KERNEL32.dllFlushViewOfFile
KERNEL32.dllSetStdHandle
SHLWAPI.dllPathAppendA
SHLWAPI.dllPathCombineA
COMCTL32.dllInitCommonControlsEx
USER32.dllGetKeyState
USER32.dllLoadCursorW
USER32.dllGetParent
USER32.dllDrawTextW
USER32.dllSetDlgItemTextW
USER32.dllPtInRect
USER32.dllMoveWindow
USER32.dllPostMessageW
USER32.dllDialogBoxParamW
USER32.dllEndDialog
USER32.dllSetTimer
USER32.dllLoadBitmapW
USER32.dllDrawMenuBar
USER32.dllDispatchMessageW
USER32.dllCheckRadioButton
USER32.dllGetDesktopWindow
USER32.dllLoadStringA
USER32.dllGetWindowPlacement
USER32.dllFrameRect
USER32.dllEnableMenuItem
USER32.dllDefWindowProcW
USER32.dllInvertRect
USER32.dllEndPaint
USER32.dllSetRect
USER32.dllRegisterClassW
USER32.dllLoadStringW
USER32.dllDestroyWindow
USER32.dllInvalidateRect
USER32.dllCreateWindowExW
USER32.dllLoadIconW
USER32.dllGetMessageW
USER32.dllPostQuitMessage
USER32.dllGetSubMenu
USER32.dllFillRect
USER32.dllTranslateAcceleratorW
USER32.dllBeginPaint
USER32.dllGetDlgItemTextW
USER32.dllWaitMessage
USER32.dllMessageBoxA
USER32.dllGetClientRect
USER32.dllReleaseDC
USER32.dllGetDlgItem
USER32.dllWinHelpW
USER32.dllOffsetRect
USER32.dllSendMessageW
USER32.dllGetWindowRect
USER32.dllGetMenu
USER32.dllUnionRect
USER32.dllIsZoomed
USER32.dllIsDlgButtonChecked
USER32.dllLoadAcceleratorsW
USER32.dllShowWindow
USER32.dllTranslateMessage
USER32.dllCheckDlgButton
USER32.dllSetCapture
USER32.dllGetForegroundWindow
USER32.dllGetSystemMetrics
USER32.dllIsIconic
USER32.dllUpdateWindow
USER32.dllIntersectRect
USER32.dllMessageBoxW
USER32.dllReleaseCapture
USER32.dllwsprintfW
USER32.dllGetDC
USER32.dllPeekMessageW
ADVAPI32.dllRegQueryValueExA
ADVAPI32.dllRegOpenKeyExW
ADVAPI32.dllRegCloseKey
ADVAPI32.dllRegSetValueExW
ADVAPI32.dllRegCreateKeyExW
ADVAPI32.dllRegOpenKeyExA
ADVAPI32.dllRegQueryValueExW

StringTable 040904B0

LegalTrademarksAle Qosogij Ahifitu Titis Alanyj Jez Mytuzu Ycaqu
FileDescriptionOca Ojefac Guzu
FileVersion8, 7, 4
InternalNameOcawyk
CompanyNameNexon Corp.
LegalCopyright1999 Vukapam - Cisaby Uxape Eji
ProductNameFos
OriginalFilenameRgobxx.exe
ProductVersion8, 7

VS_FIXEDFILEINFO

FileVersion8.7.0.0
ProductVersion8.7.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0754688EXE05/26/2011 06:21:03#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK