minitd.unpacked.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

parent	minitd.exe
filename	minitd.unpacked.exe
size	1032192 (0xfc000)
md5	1b33981abd2c4c2da6d5ce5046056368

type	PE32+ executable (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
147	30729	24
257	26706	2
199	41118	6
261	26706	22
260	26706	10
259	26706	3
262	25203	3
257	25203	23
1	0	345
260	27031	192
261	27031	6
0	0	1
255	27031	1
258	27031	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5d1bbe18
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.16
SizeOfCode	0xea000
SizeOfInitializedData	0x14800
SizeOfUninitializedData	0
AddressOfEntryPoint	0xdf0f4
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x102000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig4

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xe9fc4	0xea000	R-X CODE
.data	0xeb000	0x4658	0x1c00	RW- IDATA
.pdata	0xf0000	0x83f4	0x8400	R-- IDATA
.idata	0xf9000	0x2c0a	0x2e00	R-- IDATA
.rsrc	0xfc000	0x4760	0x4800	R-- IDATA
.reloc	0x101000	0x4a8	0x600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xf9a48	0x1f4
RESOURCE	0xfc000	0x4760
EXCEPTION	0xf0000	0x83f4
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x12d80	0x100
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
RCDATA	#42	18173	0

module_name	ord	function_name
KERNEL32.DLL		FormatMessageW
KERNEL32.DLL		GetLastError
KERNEL32.DLL		VerSetConditionMask
KERNEL32.DLL		MulDiv
KERNEL32.DLL		LoadLibraryW
KERNEL32.DLL		FreeLibrary
KERNEL32.DLL		SetThreadExecutionState
KERNEL32.DLL		CloseHandle
KERNEL32.DLL		ReadFile
KERNEL32.DLL		GetFileSizeEx
KERNEL32.DLL		VirtualQuery
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		GetSystemInfo
KERNEL32.DLL		VirtualAllocEx
KERNEL32.DLL		SetThreadContext
KERNEL32.DLL		GetThreadContext
KERNEL32.DLL		VirtualProtectEx
KERNEL32.DLL		WriteProcessMemory
KERNEL32.DLL		IsDebuggerPresent
KERNEL32.DLL		CreateProcessA
KERNEL32.DLL		GetCommandLineA
KERNEL32.DLL		FindResourceA
KERNEL32.DLL		LockResource
KERNEL32.DLL		LoadResource
KERNEL32.DLL		GetComputerNameA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		CreateThread
KERNEL32.DLL		TerminateProcess
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		Sleep
KERNEL32.DLL		WaitForDebugEvent
KERNEL32.DLL		ContinueDebugEvent
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetTickCount
KERNEL32.DLL		GetModuleFileNameW
KERNEL32.DLL		GetModuleHandleW
KERNEL32.DLL		GlobalAlloc
KERNEL32.DLL		GlobalUnlock
KERNEL32.DLL		GlobalLock
KERNEL32.DLL		CompareStringA
KERNEL32.DLL		GetCurrentProcess
KERNEL32.DLL		EnterCriticalSection
KERNEL32.DLL		LeaveCriticalSection
KERNEL32.DLL		InitializeCriticalSectionEx
KERNEL32.DLL		DeleteCriticalSection
KERNEL32.DLL		SleepEx
KERNEL32.DLL		QueryPerformanceFrequency
KERNEL32.DLL		GetSystemDirectoryA
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		VerifyVersionInfoA
KERNEL32.DLL		WaitForSingleObjectEx
KERNEL32.DLL		ExpandEnvironmentStringsA
KERNEL32.DLL		CreateFileA
KERNEL32.DLL		QueryPerformanceCounter
KERNEL32.DLL		GetStartupInfoW
KERNEL32.DLL		InitializeSListHead
KERNEL32.DLL		GetSystemTimeAsFileTime
KERNEL32.DLL		GetCurrentThreadId
KERNEL32.DLL		RtlCaptureContext
KERNEL32.DLL		RtlLookupFunctionEntry
KERNEL32.DLL		GetCurrentProcessId
KERNEL32.DLL		IsProcessorFeaturePresent
KERNEL32.DLL		SetUnhandledExceptionFilter
KERNEL32.DLL		UnhandledExceptionFilter
KERNEL32.DLL		RtlVirtualUnwind
ADVAPI32.dll		CryptAcquireContextA
ADVAPI32.dll		CryptReleaseContext
ADVAPI32.dll		CryptGetHashParam
ADVAPI32.dll		CryptGenRandom
ADVAPI32.dll		CryptCreateHash
ADVAPI32.dll		CryptHashData
ADVAPI32.dll		CryptDestroyHash
api-ms-win-crt-convert-l1-1-0.dll		strtoul
api-ms-win-crt-convert-l1-1-0.dll		strtol
api-ms-win-crt-convert-l1-1-0.dll		strtoll
api-ms-win-crt-environment-l1-1-0.dll		getenv
api-ms-win-crt-filesystem-l1-1-0.dll		_access
api-ms-win-crt-filesystem-l1-1-0.dll		_stat64
api-ms-win-crt-heap-l1-1-0.dll		malloc
api-ms-win-crt-heap-l1-1-0.dll		free
api-ms-win-crt-heap-l1-1-0.dll		_set_new_mode
api-ms-win-crt-heap-l1-1-0.dll		calloc
api-ms-win-crt-heap-l1-1-0.dll		realloc
api-ms-win-crt-locale-l1-1-0.dll		_configthreadlocale
api-ms-win-crt-math-l1-1-0.dll		atan2
api-ms-win-crt-math-l1-1-0.dll		cos
api-ms-win-crt-math-l1-1-0.dll		floor
api-ms-win-crt-math-l1-1-0.dll		pow
api-ms-win-crt-math-l1-1-0.dll		cosf
api-ms-win-crt-math-l1-1-0.dll		sin
api-ms-win-crt-math-l1-1-0.dll		sqrtf
api-ms-win-crt-math-l1-1-0.dll		__setusermatherr
api-ms-win-crt-math-l1-1-0.dll		sinf
api-ms-win-crt-multibyte-l1-1-0.dll		_mbsnbcpy
api-ms-win-crt-multibyte-l1-1-0.dll		_mbschr
api-ms-win-crt-multibyte-l1-1-0.dll		_mbspbrk
api-ms-win-crt-multibyte-l1-1-0.dll		_mbsncmp
api-ms-win-crt-runtime-l1-1-0.dll		_initterm
api-ms-win-crt-runtime-l1-1-0.dll		_get_narrow_winmain_command_line
api-ms-win-crt-runtime-l1-1-0.dll		_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll		_cexit
api-ms-win-crt-runtime-l1-1-0.dll		_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll		_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll		_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll		exit
api-ms-win-crt-runtime-l1-1-0.dll		_errno
api-ms-win-crt-runtime-l1-1-0.dll		_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll		_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll		_beginthreadex
api-ms-win-crt-runtime-l1-1-0.dll		_c_exit
api-ms-win-crt-runtime-l1-1-0.dll		terminate
api-ms-win-crt-runtime-l1-1-0.dll		_exit
api-ms-win-crt-runtime-l1-1-0.dll		_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll		_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll		_seh_filter_exe
api-ms-win-crt-stdio-l1-1-0.dll		ftell
api-ms-win-crt-stdio-l1-1-0.dll		fseek
api-ms-win-crt-stdio-l1-1-0.dll		fputc
api-ms-win-crt-stdio-l1-1-0.dll		__stdio_common_vsscanf
api-ms-win-crt-stdio-l1-1-0.dll		fwrite
api-ms-win-crt-stdio-l1-1-0.dll		_set_fmode
api-ms-win-crt-stdio-l1-1-0.dll		fclose
api-ms-win-crt-stdio-l1-1-0.dll		fflush
api-ms-win-crt-stdio-l1-1-0.dll		fopen
api-ms-win-crt-stdio-l1-1-0.dll		fread
api-ms-win-crt-stdio-l1-1-0.dll		__stdio_common_vsprintf
api-ms-win-crt-stdio-l1-1-0.dll		__p__commode
api-ms-win-crt-stdio-l1-1-0.dll		__stdio_common_vfprintf
api-ms-win-crt-stdio-l1-1-0.dll		fgets
api-ms-win-crt-stdio-l1-1-0.dll		__acrt_iob_func
api-ms-win-crt-string-l1-1-0.dll		strspn
api-ms-win-crt-string-l1-1-0.dll		strcspn
api-ms-win-crt-string-l1-1-0.dll		strcmp
api-ms-win-crt-string-l1-1-0.dll		_strdup
api-ms-win-crt-string-l1-1-0.dll		strncpy
api-ms-win-crt-string-l1-1-0.dll		tolower
api-ms-win-crt-string-l1-1-0.dll		isupper
api-ms-win-crt-string-l1-1-0.dll		strncmp
api-ms-win-crt-time-l1-1-0.dll		_time64
api-ms-win-crt-time-l1-1-0.dll		_gmtime64
api-ms-win-crt-utility-l1-1-0.dll		qsort
CRYPT32.dll		CertCloseStore
CRYPT32.dll		CertOpenStore
CRYPT32.dll		CertFreeCertificateContext
CRYPT32.dll		CertFindCertificateInStore
CRYPT32.dll		CryptStringToBinaryA
CRYPT32.dll		CertAddCertificateContextToStore
CRYPT32.dll		CertGetNameStringA
CRYPT32.dll		CryptQueryObject
CRYPT32.dll		CertCreateCertificateChainEngine
CRYPT32.dll		CertFreeCertificateChainEngine
CRYPT32.dll		CertFreeCertificateChain
CRYPT32.dll		CertEnumCertificatesInStore
CRYPT32.dll		CertGetCertificateChain
GDI32.dll		DeleteDC
GDI32.dll		GetDeviceCaps
GDI32.dll		SelectObject
GDI32.dll		CreateCompatibleDC
GDI32.dll		CreateRectRgn
GDI32.dll		CombineRgn
GDI32.dll		BitBlt
GDI32.dll		SetDeviceGammaRamp
GDI32.dll		GetDeviceGammaRamp
GDI32.dll		CreateBitmap
GDI32.dll		GetDIBits
GDI32.dll		CreateDCW
GDI32.dll		CreateCompatibleBitmap
GDI32.dll		CreateDIBSection
GDI32.dll		DeleteObject
IMM32.dll		ImmGetIMEFileNameA
IMM32.dll		ImmGetContext
IMM32.dll		ImmReleaseContext
IMM32.dll		ImmGetCompositionStringW
IMM32.dll		ImmSetCompositionStringW
IMM32.dll		ImmGetCandidateListW
IMM32.dll		ImmNotifyIME
IMM32.dll		ImmSetCompositionWindow
IMM32.dll		ImmAssociateContext
ole32.dll		CoInitializeEx
ole32.dll		CoUninitialize
ole32.dll		CoCreateInstance
OLEAUT32.dll	6
SHELL32.dll		DragQueryFileW
SHELL32.dll		DragFinish
SHELL32.dll		DragAcceptFiles
SHELL32.dll		ExtractIconExW
USER32.dll		GetAsyncKeyState
USER32.dll		GetMenu
USER32.dll		GetUpdateRect
USER32.dll		InvalidateRect
USER32.dll		ValidateRect
USER32.dll		GetPropW
USER32.dll		GetClientRect
USER32.dll		GetWindowRect
USER32.dll		AdjustWindowRectEx
USER32.dll		SetCursor
USER32.dll		GetCursorPos
USER32.dll		GetClipCursor
USER32.dll		ClientToScreen
USER32.dll		ScreenToClient
USER32.dll		WindowFromPoint
USER32.dll		ClipCursor
USER32.dll		IsRectEmpty
USER32.dll		GetWindowLongW
USER32.dll		DestroyIcon
USER32.dll		GetRawInputData
USER32.dll		IsIconic
USER32.dll		IsWindowVisible
USER32.dll		GetClassInfoExW
USER32.dll		RegisterClassExW
USER32.dll		UnregisterClassW
USER32.dll		CallWindowProcW
USER32.dll		GetKeyState
USER32.dll		GetMessageExtraInfo
USER32.dll		PeekMessageW
USER32.dll		DispatchMessageW
USER32.dll		TranslateMessage
USER32.dll		SetWindowLongPtrW
USER32.dll		GetWindowLongPtrW
USER32.dll		ReleaseDC
USER32.dll		GetDC
USER32.dll		GetSystemMetrics
USER32.dll		GetDoubleClickTime
USER32.dll		OpenClipboard
USER32.dll		CloseClipboard
USER32.dll		GetClipboardSequenceNumber
USER32.dll		SetClipboardData
USER32.dll		GetClipboardData
USER32.dll		EmptyClipboard
USER32.dll		IsClipboardFormatAvailable
USER32.dll		GetKeyboardLayout
USER32.dll		GetKeyboardState
USER32.dll		ToUnicode
USER32.dll		MapVirtualKeyW
USER32.dll		ChangeDisplaySettingsExW
USER32.dll		EnumDisplaySettingsW
USER32.dll		EnumDisplayDevicesW
USER32.dll		GetMonitorInfoW
USER32.dll		DefWindowProcW
USER32.dll		SetWindowRgn
USER32.dll		CreateIconFromResource
USER32.dll		GetParent
USER32.dll		SetWindowLongW
USER32.dll		GetWindowTextLengthW
USER32.dll		GetWindowTextW
USER32.dll		SetWindowTextW
USER32.dll		RemovePropW
USER32.dll		SetPropW
USER32.dll		SetForegroundWindow
USER32.dll		GetFocus
USER32.dll		SetWindowPos
USER32.dll		SetLayeredWindowAttributes
USER32.dll		ShowWindow
USER32.dll		DestroyWindow
USER32.dll		CreateWindowExW
USER32.dll		RegisterClassW
USER32.dll		SendMessageW
USER32.dll		TrackMouseEvent
USER32.dll		RegisterRawInputDevices
USER32.dll		CreateIconIndirect
USER32.dll		LoadCursorW
USER32.dll		SetCursorPos
USER32.dll		EnumDisplayMonitors
VCRUNTIME140.dll		__C_specific_handler
VCRUNTIME140.dll		__intrinsic_setjmp
VCRUNTIME140.dll		memchr
VCRUNTIME140.dll		strstr
VCRUNTIME140.dll		memmove
VCRUNTIME140.dll		strrchr
VCRUNTIME140.dll		strchr
VCRUNTIME140.dll		_CxxThrowException
VCRUNTIME140.dll		memcmp
VCRUNTIME140.dll		longjmp
VCRUNTIME140.dll		memset
VCRUNTIME140.dll		__CxxFrameHandler3
VCRUNTIME140.dll		memcpy
VERSION.dll		GetFileVersionInfoA
VERSION.dll		VerQueryValueA
VERSION.dll		GetFileVersionInfoSizeA
WS2_32.dll	151
WS2_32.dll	23
WS2_32.dll	111
WS2_32.dll		inet_pton
WS2_32.dll	18
WS2_32.dll	112
WS2_32.dll	16
WS2_32.dll	19
WS2_32.dll	10
WS2_32.dll		freeaddrinfo
WS2_32.dll		getaddrinfo
WS2_32.dll	116
WS2_32.dll	2
WS2_32.dll	3
WS2_32.dll	4
WS2_32.dll	5
WS2_32.dll	6
WS2_32.dll	7
WS2_32.dll	9
WS2_32.dll	15
WS2_32.dll	21
WS2_32.dll		WSAIoctl
WS2_32.dll	115

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	1026608	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK