filename7sea.exe
size278528 (0x44000)
md5137f780397a53d62a13cd4035cfa68f8
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x5605314b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion2.22
SizeOfCode0x2d400
SizeOfInitializedData0x43c00
SizeOfUninitializedData0xa9400
AddressOfEntryPoint0x12a0
BaseOfCode0x1000
BaseOfData0x2f000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xf3000
SizeOfHeaders0x400
CheckSum0x48e2d
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2d2800x2d400R-X CODE IDATA
.data0x2f0000x3e100x4000RW- IDATA
.rdata0x330000x110e00x11200R-- IDATA
.eh_fram0x450000x3e00x400R-- IDATA
.bss0x460000xa930c0RW- UDATA
.idata0xf00000xddc0xe00RW- IDATA
.CRT0xf10000x180x200RW- IDATA
.tls0xf20000x200x200RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xf00000xddc
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0xf20000x18
LOAD_CONFIG00
Bound_IAT00
IAT0xf02740x1fc
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4f20190x4f201c0x4ef2b00x4f100400
module_namehintordfunction_name
GDI32.dll297SetDIBitsToDevice
GDI32.dll335StretchDIBits
KERNEL32.dll3AddAtomA
KERNEL32.dll82CloseHandle
KERNEL32.dll154CreateMutexA
KERNEL32.dll169CreateSemaphoreA
KERNEL32.dll207DeleteCriticalSection
KERNEL32.dll236EnterCriticalSection
KERNEL32.dll279ExitProcess
KERNEL32.dll298FindAtomA
KERNEL32.dll363GetAtomNameA
KERNEL32.dll451GetCurrentThreadId
KERNEL32.dll510GetLastError
KERNEL32.dll529GetModuleHandleA
KERNEL32.dll577GetProcAddress
KERNEL32.dll687GlobalAlloc
KERNEL32.dll698GlobalLock
KERNEL32.dll702GlobalSize
KERNEL32.dll705GlobalUnlock
KERNEL32.dll734InitializeCriticalSection
KERNEL32.dll743InterlockedDecrement
KERNEL32.dll747InterlockedIncrement
KERNEL32.dll814LeaveCriticalSection
KERNEL32.dll974ReleaseMutex
KERNEL32.dll978ReleaseSemaphore
KERNEL32.dll1091SetLastError
KERNEL32.dll1140SetUnhandledExceptionFilter
KERNEL32.dll1152Sleep
KERNEL32.dll1171TlsAlloc
KERNEL32.dll1172TlsFree
KERNEL32.dll1173TlsGetValue
KERNEL32.dll1174TlsSetValue
KERNEL32.dll1213VirtualProtect
KERNEL32.dll1215VirtualQuery
KERNEL32.dll1223WaitForSingleObject
msvcrt.dll6_close
msvcrt.dll51_lseek
msvcrt.dll58_open
msvcrt.dll64_read
msvcrt.dll109_write
msvcrt.dll55__getmainargs
msvcrt.dll77__p__environ
msvcrt.dll79__p__fmode
msvcrt.dll99__set_app_type
msvcrt.dll147_cexit
msvcrt.dll266_iob
msvcrt.dll383_onexit
msvcrt.dll426_setmode
msvcrt.dll583abort
msvcrt.dll590atexit
msvcrt.dll594bsearch
msvcrt.dll595calloc
msvcrt.dll620fputc
msvcrt.dll621fputs
msvcrt.dll625free
msvcrt.dll633fwrite
msvcrt.dll676malloc
msvcrt.dll681memcmp
msvcrt.dll682memcpy
msvcrt.dll683memmove
msvcrt.dll695qsort
msvcrt.dll697rand
msvcrt.dll698realloc
msvcrt.dll706signal
msvcrt.dll709sprintf
msvcrt.dll711srand
msvcrt.dll715strcmp
msvcrt.dll739time
msvcrt.dll748vfprintf
USER32.dll2AdjustWindowRectEx
USER32.dll6AppendMenuA
USER32.dll13BringWindowToTop
USER32.dll59ClientToScreen
USER32.dll61CloseClipboard
USER32.dll89CreatePopupMenu
USER32.dll90CreateWindowExA
USER32.dll134DefWindowProcA
USER32.dll143DestroyMenu
USER32.dll144DestroyWindow
USER32.dll149DispatchMessageA
USER32.dll177EmptyClipboard
USER32.dll180EnableWindow
USER32.dll218GetActiveWindow
USER32.dll224GetCapture
USER32.dll227GetClassInfoA
USER32.dll236GetClientRect
USER32.dll238GetClipboardData
USER32.dll250GetDesktopWindow
USER32.dll258GetFocus
USER32.dll266GetKeyNameTextA
USER32.dll268GetKeyState
USER32.dll293GetMessageA
USER32.dll304GetParent
USER32.dll326GetSystemMetrics
USER32.dll342GetWindowLongA
USER32.dll365InsertMenuItemA
USER32.dll370InvalidateRect
USER32.dll382IsClipboardFormatAvailable
USER32.dll397IsWindowVisible
USER32.dll400KillTimer
USER32.dll405LoadCursorA
USER32.dll409LoadIconA
USER32.dll427MapVirtualKeyA
USER32.dll431MapWindowPoints
USER32.dll455OpenClipboard
USER32.dll464PeekMessageA
USER32.dll468PostQuitMessage
USER32.dll479RegisterClassA
USER32.dll493ReleaseCapture
USER32.dll508SendMessageA
USER32.dll517SetCapture
USER32.dll523SetClipboardData
USER32.dll525SetCursor
USER32.dll533SetFocus
USER32.dll563SetTimer
USER32.dll569SetWindowLongA
USER32.dll574SetWindowTextA
USER32.dll585ShowWindow
USER32.dll601TrackMouseEvent
USER32.dll603TrackPopupMenuEx
USER32.dll608TranslateMessage
USER32.dll622UpdateWindow
offsetsizetypecomment
0278528EXE09/25/2015 11:34:35#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0xef2b0