filenameSFX Creator.exe
size575921 (0x8c9b1)
md51b883c94221b44e6eb5dde9bf61580ec
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
206655012
208655011
2036550117
10159
2242100511
219210051
222210051

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x55e75144
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion12.0
SizeOfCode0x6200
SizeOfInitializedData0x3fe00
SizeOfUninitializedData0x2000
AddressOfEntryPoint0x3301
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion6.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x1b4000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8540
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Nullsoft install system v2.x

Sections

namevavsizeraw sizeflags
.text0x10000x61840x6200R-X CODE
.rdata0x80000x157c0x1600R-- IDATA
.data0xa0000x3d4d80x200RW- IDATA
.ndata0x480000x1240000RW- UDATA
.rsrc0x16c0000x475e80x47600R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x87400xb4
RESOURCE0x16c0000x475e8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x80000x29c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#12703760
ICON#296400
ICON#342640
ICON#424400
ICON#511280
ICON#67440
ICON#72960
DIALOG#1055120
DIALOG#1062480
DIALOG#1111640
GROUP_ICON#1031040
VERSION#15720
MANIFEST#110690
module_namehintordfunction_name
KERNEL32.dll798GlobalFree
KERNEL32.dll698GetShortPathNameA
KERNEL32.dll976MulDiv
KERNEL32.dll1532lstrcmpA
KERNEL32.dll1535lstrcmpiA
KERNEL32.dll665GetPrivateProfileStringA
KERNEL32.dll1508WritePrivateProfileStringA
KERNEL32.dll968MoveFileA
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll571GetFileSize
KERNEL32.dll754GetTickCount
KERNEL32.dll610GetModuleFileNameA
KERNEL32.dll456GetCommandLineA
KERNEL32.dll1260SetEnvironmentVariableA
KERNEL32.dll1262SetErrorMode
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll337ExitProcess
KERNEL32.dll783GetWindowsDirectoryA
KERNEL32.dll738GetTempPathA
KERNEL32.dll791GlobalAlloc
KERNEL32.dll536GetDiskFreeSpaceA
KERNEL32.dll232CreateThread
KERNEL32.dll802GlobalLock
KERNEL32.dll809GlobalUnlock
KERNEL32.dll1541lstrcpynA
KERNEL32.dll1544lstrlenA
KERNEL32.dll933LoadLibraryA
KERNEL32.dll186CreateFileA
KERNEL32.dll1103ReadFile
KERNEL32.dll1169RemoveDirectoryA
KERNEL32.dll215CreateProcessA
KERNEL32.dll771GetVersion
KERNEL32.dll716GetSystemDirectoryA
KERNEL32.dll669GetProcAddress
KERNEL32.dll1538lstrcpyA
KERNEL32.dll1529lstrcatA
KERNEL32.dll736GetTempFileNameA
KERNEL32.dll934LoadLibraryExA
KERNEL32.dll612GetModuleHandleA
KERNEL32.dll414FreeLibrary
KERNEL32.dll556GetExitCodeProcess
KERNEL32.dll1360Sleep
KERNEL32.dll1449WaitForSingleObject
KERNEL32.dll592GetLastError
KERNEL32.dll127CloseHandle
KERNEL32.dll1503WriteFile
KERNEL32.dll1279SetFileTime
KERNEL32.dll1275SetFilePointer
KERNEL32.dll1267SetFileAttributesA
KERNEL32.dll582GetFullPathNameA
KERNEL32.dll560GetFileAttributesA
KERNEL32.dll381FindNextFileA
KERNEL32.dll364FindFirstFileA
KERNEL32.dll360FindClose
KERNEL32.dll340ExpandEnvironmentStringsA
KERNEL32.dll263DeleteFileA
KERNEL32.dll173CreateDirectoryA
KERNEL32.dll143CompareFileTime
KERNEL32.dll1200SearchPathA
KERNEL32.dll1249SetCurrentDirectoryA
KERNEL32.dll160CopyFileA
USER32.dll284GetClassInfoA
USER32.dll112CreateWindowExA
USER32.dll783SetWindowPos
USER32.dll534IsWindowVisible
USER32.dll177DialogBoxParamA
USER32.dll231EndDialog
USER32.dll62CheckDlgButton
USER32.dll606OpenClipboard
USER32.dll75CloseClipboard
USER32.dll710SetClipboardData
USER32.dll223EmptyClipboard
USER32.dll530IsWindowEnabled
USER32.dll426GetSystemMetrics
USER32.dll425GetSystemMenu
USER32.dll110CreatePopupMenu
USER32.dll224EnableMenuItem
USER32.dll9AppendMenuA
USER32.dll825TrackPopupMenu
USER32.dll459GetWindowRect
USER32.dll713SetCursor
USER32.dll685ScreenToClient
USER32.dll647RegisterClassA
USER32.dll452GetWindowLongA
USER32.dll707SetClassLongA
USER32.dll540LoadBitmapA
USER32.dll542LoadCursorA
USER32.dll814SystemParametersInfoA
USER32.dll180DispatchMessageA
USER32.dll619PeekMessageA
USER32.dll721SetDlgItemTextA
USER32.dll318GetDlgItemTextA
USER32.dll50CharPrevA
USER32.dll585MessageBoxIndirectA
USER32.dll769SetTimer
USER32.dll101CreateDialogParamA
USER32.dll173DestroyWindow
USER32.dll548LoadImageA
USER32.dll263FindWindowExA
USER32.dll780SetWindowLongA
USER32.dll677ReleaseDC
USER32.dll308GetDC
USER32.dll725SetForegroundWindow
USER32.dll29CallWindowProcA
USER32.dll369GetMessagePos
USER32.dll582MessageBoxA
USER32.dll47CharNextA
USER32.dll260ExitWindowsEx
USER32.dll423GetSysColor
USER32.dll787SetWindowTextA
USER32.dll228EnableWindow
USER32.dll316GetDlgItem
USER32.dll800ShowWindow
USER32.dll529IsWindow
USER32.dll625PostQuitMessage
USER32.dll698SendMessageTimeoutA
USER32.dll695SendMessageA
USER32.dll890wsprintfA
USER32.dll261FillRect
USER32.dll293GetClientRect
USER32.dll233EndPaint
USER32.dll14BeginPaint
USER32.dll211DrawTextA
USER32.dll160DefWindowProcA
USER32.dll495InvalidateRect
GDI32.dll731SetBkColor
GDI32.dll502GetDeviceCaps
GDI32.dll771SetTextColor
GDI32.dll732SetBkMode
GDI32.dll724SelectObject
GDI32.dll270DeleteObject
GDI32.dll62CreateFontIndirectA
GDI32.dll45CreateBrushIndirect
SHELL32.dll130SHBrowseForFolderA
SHELL32.dll231SHGetPathFromIDListA
SHELL32.dll199SHGetFileInfoA
SHELL32.dll181SHFileOperationA
SHELL32.dll307ShellExecuteA
SHELL32.dll241SHGetSpecialFolderLocation
ADVAPI32.dll609RegDeleteKeyA
ADVAPI32.dll619RegDeleteValueA
ADVAPI32.dll604RegCreateKeyExA
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll673RegSetValueExA
ADVAPI32.dll657RegQueryValueExA
ADVAPI32.dll644RegOpenKeyExA
ADVAPI32.dll629RegEnumValueA
ADVAPI32.dll625RegEnumKeyA
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll83ImageList_Create
COMCTL32.dll17
COMCTL32.dll79ImageList_AddMasked
ole32.dll123CoTaskMemFree
ole32.dll382OleUninitialize
ole32.dll353OleInitialize
ole32.dll26CoCreateInstance
VERSION.dll15VerQueryValueA
VERSION.dllGetFileVersionInfoA
VERSION.dll4GetFileVersionInfoSizeA

StringTable 041904e3

CompanyNameK.A.V.
FileDescriptionSFX Creator by K.A.V.
FileVersion3.0.2.0
LegalCopyright© Кондратьев А.В.
ProductNameSFX Creator
ProductVersion3.0

VS_FIXEDFILEINFO

FileVersion3.0.2.0
ProductVersion3.0.2.0
StrucVersion0
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0324608EXE09/02/2015 19:43:00#
15c115HTM#
4f400251313BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 575921 bytes (563 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER