Test_X64.exe - Test

info
MZ
PE
resources
strings
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	Test_X64.exe
size	91136 (0x16400)
md5	12609fd9b67fd3a6ed5a1a43aa6873df

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
203	65501	12
221	21005	2
223	21005	2
224	21005	19
225	21005	4
225	20806	5
1	0	244
221	20806	3
229	31101	3
219	21005	1
151	0	1
222	31101	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5ed9b853
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	12.0
SizeOfCode	0x2000
SizeOfInitializedData	0x14600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2441
BaseOfCode	0x1000
BaseOfData	0x3000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x19000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1e29	0x2000	R-X CODE
.rdata	0x3000	0x1e34	0x2000	R-- IDATA
.data	0x5000	0x624	0x200	RW- IDATA
.rsrc	0x6000	0x11518	0x11600	R-- IDATA
.reloc	0x18000	0x6cc	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x463c	0x78
RESOURCE	0x6000	0x11518
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x18000	0x6cc
DEBUG	0x33c0	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x3fa0	0x40
Bound_IAT	0	0
IAT	0x3000	0x388
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	1640
ICON	#2	744
ICON	#3	488
ICON	#4	296
ICON	#5	3752
ICON	#6	2216
ICON	#7	1736
ICON	#8	1384
ICON	#9	37835
ICON	#10	9640
ICON	#11	4264
ICON	#12	2440
ICON	#13	1128
DIALOG	#100	288
DIALOG	#102	218
STRING	#7	68
GROUP_ICON	#128	188
VERSION	#1	720
MANIFEST	#1	796

id	lang	string
101	2052	关于 Test_X64(&A)...

module_name	hint	ord	function_name
mfc120u.dll		8346
mfc120u.dll		8064
mfc120u.dll		3790
mfc120u.dll		887
mfc120u.dll		1386
mfc120u.dll		10919
mfc120u.dll		6436
mfc120u.dll		9091
mfc120u.dll		10136
mfc120u.dll		5693
mfc120u.dll		12043
mfc120u.dll		3223
mfc120u.dll		3329
mfc120u.dll		3330
mfc120u.dll		3898
mfc120u.dll		11999
mfc120u.dll		2640
mfc120u.dll		5838
mfc120u.dll		13563
mfc120u.dll		11592
mfc120u.dll		6774
mfc120u.dll		14455
mfc120u.dll		7807
mfc120u.dll		14449
mfc120u.dll		3013
mfc120u.dll		4451
mfc120u.dll		9574
mfc120u.dll		4459
mfc120u.dll		4909
mfc120u.dll		4874
mfc120u.dll		4867
mfc120u.dll		4905
mfc120u.dll		4932
mfc120u.dll		4883
mfc120u.dll		4916
mfc120u.dll		4928
mfc120u.dll		4891
mfc120u.dll		4895
mfc120u.dll		4899
mfc120u.dll		4887
mfc120u.dll		4920
mfc120u.dll		7806
mfc120u.dll		1736
mfc120u.dll		1727
mfc120u.dll		1731
mfc120u.dll		1723
mfc120u.dll		1711
mfc120u.dll		12132
mfc120u.dll		12134
mfc120u.dll		13738
mfc120u.dll		3224
mfc120u.dll		9116
mfc120u.dll		10883
mfc120u.dll		6875
mfc120u.dll		12048
mfc120u.dll		8846
mfc120u.dll		14447
mfc120u.dll		11811
mfc120u.dll		3795
mfc120u.dll		11964
mfc120u.dll		9020
mfc120u.dll		11601
mfc120u.dll		11600
mfc120u.dll		5557
mfc120u.dll		10169
mfc120u.dll		10165
mfc120u.dll		10167
mfc120u.dll		10168
mfc120u.dll		10166
mfc120u.dll		2718
mfc120u.dll		8092
mfc120u.dll		3260
mfc120u.dll		3263
mfc120u.dll		13612
mfc120u.dll		4842
mfc120u.dll		3122
mfc120u.dll		3361
mfc120u.dll		3362
mfc120u.dll		11271
mfc120u.dll		10896
mfc120u.dll		8921
mfc120u.dll		12006
mfc120u.dll		14454
mfc120u.dll		9279
mfc120u.dll		4109
mfc120u.dll		4047
mfc120u.dll		12818
mfc120u.dll		7825
mfc120u.dll		1992
mfc120u.dll		11857
mfc120u.dll		11858
mfc120u.dll		14326
mfc120u.dll		12402
mfc120u.dll		7884
mfc120u.dll		14526
mfc120u.dll		6251
mfc120u.dll		14528
mfc120u.dll		6253
mfc120u.dll		14527
mfc120u.dll		6252
mfc120u.dll		3809
mfc120u.dll		5821
mfc120u.dll		12114
mfc120u.dll		12122
mfc120u.dll		4546
mfc120u.dll		8099
mfc120u.dll		10314
mfc120u.dll		12126
mfc120u.dll		12094
mfc120u.dll		12799
mfc120u.dll		5157
mfc120u.dll		5454
mfc120u.dll		5664
mfc120u.dll		9231
mfc120u.dll		5430
mfc120u.dll		5667
mfc120u.dll		5160
mfc120u.dll		5316
mfc120u.dll		5137
mfc120u.dll		7609
mfc120u.dll		7610
mfc120u.dll		7600
mfc120u.dll		5314
mfc120u.dll		8101
mfc120u.dll		10131
mfc120u.dll		9090
mfc120u.dll		6758
mfc120u.dll		1110
mfc120u.dll		6392
mfc120u.dll		6469
mfc120u.dll		3839
mfc120u.dll		296
mfc120u.dll		1042
mfc120u.dll		4772
mfc120u.dll		2262
mfc120u.dll		1658
mfc120u.dll		1108
mfc120u.dll		4049
mfc120u.dll		13771
mfc120u.dll		7206
mfc120u.dll		13302
mfc120u.dll		949
mfc120u.dll		1506
mfc120u.dll		2163
mfc120u.dll		10353
mfc120u.dll		2204
mfc120u.dll		2173
mfc120u.dll		7384
mfc120u.dll		462
mfc120u.dll		8352
mfc120u.dll		8268
mfc120u.dll		12736
mfc120u.dll		8206
mfc120u.dll		5262
mfc120u.dll		2444
mfc120u.dll		7881
mfc120u.dll		1467
mfc120u.dll		992
mfc120u.dll		7542
mfc120u.dll		12412
mfc120u.dll		12413
mfc120u.dll		6121
mfc120u.dll		14448
mfc120u.dll		10260
mfc120u.dll		4879
mfc120u.dll		2367
mfc120u.dll		1508
MSVCR120.dll	372		__CxxFrameHandler3
MSVCR120.dll	427		__crtTerminateProcess
MSVCR120.dll	428		__crtUnhandledException
MSVCR120.dll	592		_crt_debugger_hook
MSVCR120.dll	579		_controlfp_s
MSVCR120.dll	788		_invoke_watson
MSVCR120.dll	425		__crtSetUnhandledExceptionFilter
MSVCR120.dll	634		_except_handler4_common
MSVCR120.dll	309		void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR120.dll	111		public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
MSVCR120.dll	1082		_onexit
MSVCR120.dll	430		__dllonexit
MSVCR120.dll	558		_calloc_crt
MSVCR120.dll	1284		_unlock
MSVCR120.dll	916		_lock
MSVCR120.dll	575		_commode
MSVCR120.dll	674		_fmode
MSVCR120.dll	1353		_wcmdln
MSVCR120.dll	780		_initterm
MSVCR120.dll	781		_initterm_e
MSVCR120.dll	500		__setusermatherr
MSVCR120.dll	576		_configthreadlocale
MSVCR120.dll	559		_cexit
MSVCR120.dll	643		_exit
MSVCR120.dll	1614		exit
MSVCR120.dll	498		__set_app_type
MSVCR120.dll	520		__wgetmainargs
MSVCR120.dll	535		_amsg_exit
MSVCR120.dll	413		__crtGetShowWindowMode
MSVCR120.dll	363		_XcptFilter
MSVCR120.dll	1770		memset
MSVCR120.dll	1667		free
KERNEL32.dll	877		IsProcessorFeaturePresent
KERNEL32.dll	871		IsDebuggerPresent
KERNEL32.dll	726		GetSystemTimeAsFileTime
KERNEL32.dll	526		GetCurrentThreadId
KERNEL32.dll	522		GetCurrentProcessId
KERNEL32.dll	1069		QueryPerformanceCounter
KERNEL32.dll	289		EncodePointer
KERNEL32.dll	1018		OutputDebugStringW
KERNEL32.dll	261		DeleteCriticalSection
KERNEL32.dll	254		DecodePointer
KERNEL32.dll	592		GetLastError
KERNEL32.dll	841		InitializeCriticalSectionEx
USER32.dll	426		GetSystemMetrics
USER32.dll	228		EnableWindow
USER32.dll	205		DrawIcon
USER32.dll	293		GetClientRect
USER32.dll	514		IsIconic
USER32.dll	700		SendMessageW
USER32.dll	10		AppendMenuW
USER32.dll	425		GetSystemMenu
USER32.dll	547		LoadIconW
COMCTL32.dll	123		InitCommonControlsEx

StringTable 080404B0

CompanyName	TODO: <公司名>
FileDescription	Test_X64
FileVersion	1.0.0.1
InternalName	Test_X64.exe
LegalCopyright	TODO: (C) <公司名>。保留所有权利。
OriginalFilename	Test_X64.exe
ProductName	TODO: <产品名>
ProductVersion	1.0.0.1

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	91136	EXE	06/05/2020 03:13:23	#
15c1	15	HTM		#
7a10	37835	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

Test_X64.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 080404B0

VS_FIXEDFILEINFO

Test_X64.exe
-