filename2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe
size163840 (0x28000)
md5177b75910ae8c0091bafef4950c0b224
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
93403510
1180471
1472993
10804711
480472
1197823
497823
10285
1181686
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x5460fa75
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x5000
SizeOfInitializedData0x22000
SizeOfUninitializedData0
AddressOfEntryPoint0x50e6
BaseOfCode0x1000
BaseOfData0x6000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x28000
SizeOfHeaders0x1000
CheckSum0x29820
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x44ca0x5000R-X CODE
.rdata0x60000x175e0x2000R-- IDATA
.data0x80000xb2a0x1000RW- IDATA
.rsrc0x90000x1ee540x1f000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x6f080xa0
RESOURCE0x90000x1ee54
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x60000x460
Delay_IAT0x20400x256
CLR_Header00
typenamesizecp
SYS#8821116621252
CURSOR#13081252
ICON#196401252
MENU#1285001252
DIALOG#1002381252
STRING#91501252
STRING#2049541252
STRING#3585601252
STRING#36011421252
STRING#36021921252
STRING#36033101252
STRING#3604601252
STRING#3605961252
STRING#3606841252
STRING#3697901252
STRING#3713881252
STRING#38251641252
STRING#3826621252
ACCELERATORS#1281041252
GROUP_CURSOR#130201252
GROUP_ICON#1201252
#241#128301252
idlangstring
1282052LPR_Location LPR_Lo LPRLocation.Document LPR_Lo Document
327712052确定图象中的车牌区域!
573442052LPR_Location
573452052就绪
576002052建立新文档 新建
576012052打开一个现有文档 打开
576022052关闭活动文档 关闭
576032052保存活动文档 保存
576042052将活动文档以一个新文件名保存 另存为
576162052打开该文档
576172052打开该文档
576182052打开该文档
576192052打开该文档
576202052打开该文档
576212052打开该文档
576222052打开该文档
576232052打开该文档
576242052打开该文档
576252052打开该文档
576262052打开该文档
576272052打开该文档
576282052打开该文档
576292052打开该文档
576302052打开该文档
576312052打开该文档
576322052删除被选对象 删除
576332052全部删除 全部删除
576342052复制被选对象并将其置于剪贴板上 复制
576352052剪切被选对象并将其置于剪贴板上 剪切
576362052查找指定的正文 查找
576372052插入剪贴板内容 粘贴
576402052重复上一步操作 重复
576412052用不同的正文替换指定的正文 替换
576422052选择整个文档 选择全部
576432052撤消最后一步操作 撤消
576442052重新执行先前已撤消的操作 重新执行
576532052将活动的窗口分隔成窗格 分隔
576642052显示程序信息，版本号和版权 关于
576652052退出应用程序；提示保存文档 退出
576802052切换到下一个窗格 下一窗格
576812052切换回前一个窗格 前一窗格
591362052扩展名
591372052大写
591382052数字
591392052滚动
591402052改写
591412052记录
591422052processing file:
593922052显示或隐藏工具栏 显隐工具栏
593932052显示或隐藏状态栏 显隐状态栏
611842052改变窗口大小
611852052改变窗口位置
611862052将窗口缩小成图标
611872052把窗口放大到最大尺寸
611882052切换到下一个文档窗口
611892052切换到先前的文档窗口
611902052关闭活动的窗口并提示保存所有文档
612022052把窗口恢复到正常大小
612032052激活任务表
module_namehintordfunction_name
MFC42.DLL3259
MFC42.DLL4465
MFC42.DLL3136
MFC42.DLL3262
MFC42.DLL2985
MFC42.DLL3081
MFC42.DLL2976
MFC42.DLL3830
MFC42.DLL3831
MFC42.DLL3825
MFC42.DLL3079
MFC42.DLL4080
MFC42.DLL4622
MFC42.DLL4424
MFC42.DLL3738
MFC42.DLL561
MFC42.DLL815
MFC42.DLL617
MFC42.DLL6215
MFC42.DLL5301
MFC42.DLL5214
MFC42.DLL296
MFC42.DLL986
MFC42.DLL520
MFC42.DLL4159
MFC42.DLL6117
MFC42.DLL2621
MFC42.DLL1134
MFC42.DLL5265
MFC42.DLL4376
MFC42.DLL4853
MFC42.DLL4998
MFC42.DLL4710
MFC42.DLL2514
MFC42.DLL6052
MFC42.DLL4078
MFC42.DLL1775
MFC42.DLL4407
MFC42.DLL5241
MFC42.DLL2385
MFC42.DLL5163
MFC42.DLL6374
MFC42.DLL4353
MFC42.DLL5280
MFC42.DLL3798
MFC42.DLL4837
MFC42.DLL4441
MFC42.DLL2648
MFC42.DLL2055
MFC42.DLL6376
MFC42.DLL3749
MFC42.DLL5065
MFC42.DLL1727
MFC42.DLL5261
MFC42.DLL2446
MFC42.DLL2124
MFC42.DLL5277
MFC42.DLL4627
MFC42.DLL4425
MFC42.DLL3597
MFC42.DLL324
MFC42.DLL641
MFC42.DLL4234
MFC42.DLL540
MFC42.DLL800
MFC42.DLL1825
MFC42.DLL4238
MFC42.DLL4696
MFC42.DLL3058
MFC42.DLL3065
MFC42.DLL6336
MFC42.DLL2510
MFC42.DLL2542
MFC42.DLL5243
MFC42.DLL5740
MFC42.DLL1746
MFC42.DLL5577
MFC42.DLL3172
MFC42.DLL5653
MFC42.DLL4420
MFC42.DLL4953
MFC42.DLL4858
MFC42.DLL2399
MFC42.DLL4387
MFC42.DLL3454
MFC42.DLL3198
MFC42.DLL6080
MFC42.DLL6175
MFC42.DLL4623
MFC42.DLL4426
MFC42.DLL652
MFC42.DLL338
MFC42.DLL4823
MFC42.DLL3147
MFC42.DLL6329
MFC42.DLL5651
MFC42.DLL3127
MFC42.DLL3616
MFC42.DLL2652
MFC42.DLL665
MFC42.DLL1979
MFC42.DLL3176
MFC42.DLL860
MFC42.DLL354
MFC42.DLL1669
MFC42.DLL1920
MFC42.DLL4262
MFC42.DLL4589
MFC42.DLL4588
MFC42.DLL4899
MFC42.DLL4370
MFC42.DLL4892
MFC42.DLL5076
MFC42.DLL4341
MFC42.DLL4349
MFC42.DLL4889
MFC42.DLL4531
MFC42.DLL4545
MFC42.DLL4543
MFC42.DLL4526
MFC42.DLL4529
MFC42.DLL4524
MFC42.DLL4963
MFC42.DLL4960
MFC42.DLL4108
MFC42.DLL6055
MFC42.DLL1776
MFC42.DLL5240
MFC42.DLL5290
MFC42.DLL3748
MFC42.DLL1725
MFC42.DLL4432
MFC42.DLL517
MFC42.DLL784
MFC42.DLL5260
MFC42.DLL3693
MFC42.DLL3626
MFC42.DLL2414
MFC42.DLL4133
MFC42.DLL4297
MFC42.DLL5788
MFC42.DLL1641
MFC42.DLL6131
MFC42.DLL6216
MFC42.DLL4723
MFC42.DLL1842
MFC42.DLL4242
MFC42.DLL2723
MFC42.DLL2390
MFC42.DLL3059
MFC42.DLL5100
MFC42.DLL5103
MFC42.DLL4467
MFC42.DLL4303
MFC42.DLL3350
MFC42.DLL5012
MFC42.DLL975
MFC42.DLL5472
MFC42.DLL3403
MFC42.DLL2879
MFC42.DLL2878
MFC42.DLL4151
MFC42.DLL4077
MFC42.DLL5237
MFC42.DLL5282
MFC42.DLL2649
MFC42.DLL1665
MFC42.DLL4436
MFC42.DLL4427
MFC42.DLL796
MFC42.DLL674
MFC42.DLL554
MFC42.DLL529
MFC42.DLL366
MFC42.DLL807
MFC42.DLL2494
MFC42.DLL2627
MFC42.DLL2626
MFC42.DLL5186
MFC42.DLL6000
MFC42.DLL2117
MFC42.DLL4163
MFC42.DLL6625
MFC42.DLL4457
MFC42.DLL5252
MFC42.DLL1576
MFC42.DLL2982
MFC42.DLL5714
MFC42.DLL5289
MFC42.DLL5307
MFC42.DLL4698
MFC42.DLL4079
MFC42.DLL2725
MFC42.DLL5302
MFC42.DLL5300
MFC42.DLL3346
MFC42.DLL2396
MFC42.DLL5199
MFC42.DLL1089
MFC42.DLL3922
MFC42.DLL5731
MFC42.DLL2512
MFC42.DLL2554
MFC42.DLL4486
MFC42.DLL6375
MFC42.DLL4274
MFC42.DLL4610
MFC42.DLL4612
MFC42.DLL2801
MFC42.DLL350
MFC42.DLL6157
MFC42.DLL2393
MFC42.DLL3663
MFC42.DLL825
MFC42.DLL6571
MFC42.DLL1871
MFC42.DLL858
MFC42.DLL823
MFC42.DLL1168
MSVCRT.dll202_except_handler3
MSVCRT.dll129__set_app_type
MSVCRT.dll111__p__fmode
MSVCRT.dll106__p__commode
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll131__setusermatherr
MSVCRT.dll271_initterm
MSVCRT.dll88__getmainargs
MSVCRT.dll143_acmdln
MSVCRT.dll585exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll211_exit
MSVCRT.dll390_onexit
MSVCRT.dll85__dllonexit
MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll702strlen
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll183_controlfp
MSVCRT.dll426_setmbcp
MSVCRT.dll690sprintf
MSVCRT.dll599fopen
MSVCRT.dll600fprintf
MSVCRT.dll588fclose
MSVCRT.dll587fabs
MSVCRT.dll241_ftol
MSVCRT.dll663memcpy
MSVCRT.dll565abs
MSVCRT.dll665memset
KERNEL32.dll220FindNextFileA
KERNEL32.dll693ReadFile
KERNEL32.dll86CreateFileW
KERNEL32.dll416GetProcAddress
KERNEL32.dll206FindClose
KERNEL32.dll646OpenProcess
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll371GetLocalTime
KERNEL32.dll83CreateFileA
KERNEL32.dll932WriteFile
KERNEL32.dll881UnmapViewOfFile
KERNEL32.dll52CloseHandle
KERNEL32.dll522GlobalUnlock
KERNEL32.dll511GlobalFree
KERNEL32.dll594LoadLibraryA
KERNEL32.dll355GetFileSize
USER32.dll700UpdateWindow
USER32.dll196EnableWindow
GDI32.dll143DeleteObject
GDI32.dll586StretchDIBits
GDI32.dll527SelectPalette
GDI32.dll71CreatePen
SHELL32.dll121SHBrowseForFolderA
PSAPI.DLL15GetModuleFileNameExW
offsetsizetypecomment
0163840EXE11/10/2014 17:48:37#
15c115HTM#
9570678GIF(468 x 60)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK