filenameUnPackMe_PEncrypt4.0p.exe
size466722 (0x71f22)
md51d2e7201c0b38520b8ce6f855125eda9
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x41fc91c5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.0
SizeOfCode0x49200
SizeOfInitializedData0x17a00
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0x4b000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x78000
SizeOfHeaders0x400
CheckSum0x7843b
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x4917f0x49200RWX CODE
.rdata0x4b0000xbed80xc000RW- IDATA
.data0x570000x8be40x5800RW- IDATA
.idata0x600000x2bec0x2c00RW- IDATA
.rsrc0x630000x143d60x14522RWX IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x600000x104
RESOURCE0x630000x78b4
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x608180x714
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#996400
ICON#1042640
ICON#1124400
ICON#1211280
RCDATAA6F2D1FB2150
GROUP_ICON#1011740
module_namehintordfunction_name
WINMM.dll11PlaySoundA
KERNEL32.dll309GetSystemTime
KERNEL32.dll245GetLocalTime
KERNEL32.dll239GetFileType
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll170GetCommandLineA
KERNEL32.dll485RtlUnwind
KERNEL32.dll457RaiseException
KERNEL32.dll107ExitProcess
KERNEL32.dll582TerminateProcess
KERNEL32.dll157GetACP
KERNEL32.dll364HeapDestroy
KERNEL32.dll362HeapCreate
KERNEL32.dll606VirtualFree
KERNEL32.dll603VirtualAlloc
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll328GetTimeZoneInformation
KERNEL32.dll397LCMapStringA
KERNEL32.dll398LCMapStringW
KERNEL32.dll592UnhandledExceptionFilter
KERNEL32.dll150FreeEnvironmentStringsA
KERNEL32.dll151FreeEnvironmentStringsW
KERNEL32.dll225GetEnvironmentStrings
KERNEL32.dll227GetEnvironmentStringsW
KERNEL32.dll566SetUnhandledExceptionFilter
KERNEL32.dll299GetStringTypeA
KERNEL32.dll302GetStringTypeW
KERNEL32.dll384IsBadCodePtr
KERNEL32.dll246GetLocaleInfoA
KERNEL32.dll247GetLocaleInfoW
KERNEL32.dll30CompareStringA
KERNEL32.dll31CompareStringW
KERNEL32.dll529SetEnvironmentVariableA
KERNEL32.dll370HeapSize
KERNEL32.dll369HeapReAlloc
KERNEL32.dll360HeapAlloc
KERNEL32.dll366HeapFree
KERNEL32.dll265GetOEMCP
KERNEL32.dll163GetCPInfo
KERNEL32.dll349GlobalGetAtomNameA
KERNEL32.dll339GlobalAddAtomA
KERNEL32.dll238GetFileTime
KERNEL32.dll237GetFileSize
KERNEL32.dll232GetFileAttributesA
KERNEL32.dll209GetCurrentDirectoryA
KERNEL32.dll639WritePrivateProfileStringA
KERNEL32.dll285GetProcessVersion
KERNEL32.dll347GlobalFlags
KERNEL32.dll586TlsGetValue
KERNEL32.dll413LocalReAlloc
KERNEL32.dll587TlsSetValue
KERNEL32.dll88EnterCriticalSection
KERNEL32.dll354GlobalReAlloc
KERNEL32.dll399LeaveCriticalSection
KERNEL32.dll351GlobalHandle
KERNEL32.dll76DeleteCriticalSection
KERNEL32.dll584TlsAlloc
KERNEL32.dll377InitializeCriticalSection
KERNEL32.dll240GetFullPathNameA
KERNEL32.dll335GetVolumeInformationA
KERNEL32.dll528SetEndOfFile
KERNEL32.dll593UnlockFile
KERNEL32.dll417LockFile
KERNEL32.dll24CloseHandle
KERNEL32.dll142FlushFileBuffers
KERNEL32.dll537SetFilePointer
KERNEL32.dll635WriteFile
KERNEL32.dll470ReadFile
KERNEL32.dll49CreateFileA
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll85DuplicateHandle
KERNEL32.dll667lstrcpyA
KERNEL32.dll531SetErrorMode
KERNEL32.dll147FormatMessageA
KERNEL32.dll343GlobalDeleteAtom
KERNEL32.dll664lstrcmpiA
KERNEL32.dll213GetCurrentThread
KERNEL32.dll320GetThreadLocale
KERNEL32.dll119FileTimeToLocalFileTime
KERNEL32.dll120FileTimeToSystemTime
KERNEL32.dll387IsBadReadPtr
KERNEL32.dll390IsBadWritePtr
KERNEL32.dll661lstrcmpA
KERNEL32.dll427MultiByteToWideChar
KERNEL32.dll622WideCharToMultiByte
KERNEL32.dll673lstrlenA
KERNEL32.dll658lstrcatA
KERNEL32.dll214GetCurrentThreadId
KERNEL32.dll352GlobalLock
KERNEL32.dll358GlobalUnlock
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll332GetVersion
KERNEL32.dll426MulDiv
KERNEL32.dll479RemoveDirectoryA
KERNEL32.dll42CreateDirectoryA
KERNEL32.dll78DeleteFileA
KERNEL32.dll37CopyFileA
KERNEL32.dll520SetConsoleTextAttribute
KERNEL32.dll553SetStdHandle
KERNEL32.dll4AllocConsole
KERNEL32.dll501SetConsoleCtrlHandler
KERNEL32.dll204GetConsoleTitleA
KERNEL32.dll212GetCurrentProcessId
KERNEL32.dll325GetTickCount
KERNEL32.dll521SetConsoleTitleA
KERNEL32.dll575Sleep
KERNEL32.dll203GetConsoleScreenBufferInfo
KERNEL32.dll122FillConsoleOutputCharacterA
KERNEL32.dll121FillConsoleOutputAttribute
KERNEL32.dll504SetConsoleCursorPosition
KERNEL32.dll215GetDateFormatA
KERNEL32.dll574SizeofResource
KERNEL32.dll444PeekConsoleInputA
KERNEL32.dll459ReadConsoleInputA
KERNEL32.dll141FlushConsoleInputBuffer
KERNEL32.dll400LoadLibraryA
KERNEL32.dll278GetProcAddress
KERNEL32.dll152FreeLibrary
KERNEL32.dll298GetStdHandle
KERNEL32.dll624WriteConsoleA
KERNEL32.dll149FreeConsole
KERNEL32.dll135FindNextFileA
KERNEL32.dll130FindFirstFileA
KERNEL32.dll244GetLastError
KERNEL32.dll542SetLastError
KERNEL32.dll126FindClose
KERNEL32.dll341GlobalAlloc
KERNEL32.dll348GlobalFree
KERNEL32.dll333GetVersionExA
KERNEL32.dll670lstrcpynA
KERNEL32.dll137FindResourceA
KERNEL32.dll405LoadResource
KERNEL32.dll419LockResource
KERNEL32.dll416LocalUnlock
KERNEL32.dll406LocalAlloc
KERNEL32.dll412LocalLock
KERNEL32.dll410LocalFree
KERNEL32.dll379InterlockedDecrement
KERNEL32.dll382InterlockedIncrement
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll539SetHandleCount
USER32.dll460ReleaseCapture
USER32.dll466ReuseDDElParam
USER32.dll588UnpackDDElParam
USER32.dll356IsIconic
USER32.dll450RegisterClipboardFormatA
USER32.dll436PostThreadMessageA
USER32.dll350IsClipboardFormatAvailable
USER32.dll301GetTabbedTextExtentA
USER32.dll520SetRect
USER32.dll387LoadStringA
USER32.dll554ShowOwnedPopups
USER32.dll298GetSysColorBrush
USER32.dll240GetDesktopWindow
USER32.dll443PtInRect
USER32.dll277GetMessageA
USER32.dll597ValidateRect
USER32.dll237GetCursorPos
USER32.dll43CharUpperA
USER32.dll435PostQuitMessage
USER32.dll33CharNextA
USER32.dll137DestroyMenu
USER32.dll395MapDialogRect
USER32.dll325GrayStringA
USER32.dll170DrawTextA
USER32.dll566TabbedTextOutA
USER32.dll182EndPaint
USER32.dll9BeginPaint
USER32.dll313GetWindowDC
USER32.dll266GetMenuCheckMarkDimensions
USER32.dll368LoadBitmapA
USER32.dll274GetMenuState
USER32.dll411ModifyMenuA
USER32.dll510SetMenuItemBitmaps
USER32.dll557ShowWindow
USER32.dll413MoveWindow
USER32.dll545SetWindowTextA
USER32.dll498SetDlgItemTextA
USER32.dll283GetNextDlgTabItem
USER32.dll180EndDialog
USER32.dll213GetActiveWindow
USER32.dll72CreateDialogIndirectParamA
USER32.dll472SendDlgItemMessageA
USER32.dll564SystemParametersInfoA
USER32.dll400MapWindowPoints
USER32.dll248GetFocus
USER32.dll501SetFocus
USER32.dll2AdjustWindowRectEx
USER32.dll201EqualRect
USER32.dll130DeferWindowPos
USER32.dll8BeginDeferWindowPos
USER32.dll179EndDeferWindowPos
USER32.dll470ScrollWindow
USER32.dll522SetScrollInfo
USER32.dll555ShowScrollBar
USER32.dll360IsWindowEnabled
USER32.dll349IsChild
USER32.dll216GetCapture
USER32.dll606WinHelpA
USER32.dll219GetClassInfoA
USER32.dll578TranslateAcceleratorA
USER32.dll269GetMenuItemCount
USER32.dll270GetMenuItemID
USER32.dll575TrackPopupMenu
USER32.dll243GetDlgItem
USER32.dll319GetWindowTextA
USER32.dll257GetKeyState
USER32.dll128DefWindowProcA
USER32.dll138DestroyWindow
USER32.dll85CreateWindowExA
USER32.dll549SetWindowsHookExA
USER32.dll17CallNextHookEx
USER32.dll518SetPropA
USER32.dll584UnhookWindowsHookEx
USER32.dll264GetLastActivePopup
USER32.dll249GetForegroundWindow
USER32.dll502SetForegroundWindow
USER32.dll289GetPropA
USER32.dll18CallWindowProcA
USER32.dll463RemovePropA
USER32.dll280GetMessageTime
USER32.dll279GetMessagePos
USER32.dll311GetWindow
USER32.dll542SetWindowPos
USER32.dll458RegisterWindowMessageA
USER32.dll218GetCaretPos
USER32.dll539SetWindowLongA
USER32.dll314GetWindowLongA
USER32.dll462RemoveMenu
USER32.dll296GetSubMenu
USER32.dll422OpenClipboard
USER32.dll185EnumClipboardFormats
USER32.dll56CloseClipboard
USER32.dll84CreatePopupMenu
USER32.dll54ClientToScreen
USER32.dll48CheckMenuItem
USER32.dll176EnableMenuItem
USER32.dll135DestroyCursor
USER32.dll136DestroyIcon
USER32.dll164DrawIcon
USER32.dll294GetScrollRange
USER32.dll524SetScrollRange
USER32.dll293GetScrollPos
USER32.dll225GetClassNameA
USER32.dll523SetScrollPos
USER32.dll365KillTimer
USER32.dll534SetTimer
USER32.dll265GetMenu
USER32.dll332InsertMenuA
USER32.dll382LoadMenuA
USER32.dll83CreateMenu
USER32.dll4AppendMenuA
USER32.dll507SetMenu
USER32.dll166DrawMenuBar
USER32.dll305GetTopWindow
USER32.dll431PeekMessageA
USER32.dll581TranslateMessage
USER32.dll144DispatchMessageA
USER32.dll605WaitMessage
USER32.dll352IsDialogMessageA
USER32.dll205FindWindowA
USER32.dll10BringWindowToTop
USER32.dll215GetAsyncKeyState
USER32.dll612wsprintfA
USER32.dll405MessageBoxA
USER32.dll374LoadIconA
USER32.dll492SetCursor
USER32.dll359IsWindow
USER32.dll124DefFrameProcA
USER32.dll285GetParent
USER32.dll126DefMDIChildProcA
USER32.dll445RedrawWindow
USER32.dll338InvalidateRect
USER32.dll366LoadAcceleratorsA
USER32.dll521SetRectEmpty
USER32.dll60CopyAcceleratorTableA
USER32.dll282GetNextDlgGroupItem
USER32.dll446RegisterClassA
USER32.dll404MessageBeep
USER32.dll593UpdateWindow
USER32.dll306GetUpdateRect
USER32.dll362IsWindowVisible
USER32.dll317GetWindowRect
USER32.dll467ScreenToClient
USER32.dll228GetClientRect
USER32.dll482SetActiveWindow
USER32.dll370LoadCursorA
USER32.dll238GetDC
USER32.dll461ReleaseDC
USER32.dll358IsRectEmpty
USER32.dll337IntersectRect
USER32.dll242GetDlgCtrlID
USER32.dll433PostMessageA
USER32.dll178EnableWindow
USER32.dll64CopyRect
USER32.dll300GetSystemMetrics
USER32.dll331InflateRect
USER32.dll421OffsetRect
USER32.dll163DrawFrameControl
USER32.dll168DrawStateA
USER32.dll474SendMessageA
USER32.dll376LoadImageA
USER32.dll297GetSysColor
USER32.dll320GetWindowTextLengthA
GDI32.dll190GetClipBox
GDI32.dll92ExcludeClipRect
GDI32.dll276IntersectClipRect
GDI32.dll283MoveToEx
GDI32.dll280LineTo
GDI32.dll368SetTextAlign
GDI32.dll361SetPixelV
GDI32.dll270GetViewportExtEx
GDI32.dll273GetWindowExtEx
GDI32.dll310PtVisible
GDI32.dll325ScaleWindowExtEx
GDI32.dll387TextOutA
GDI32.dll98ExtTextOutA
GDI32.dll226GetMapMode
GDI32.dll65DPtoLP
GDI32.dll32CreateDCA
GDI32.dll278LPtoDP
GDI32.dll183GetCharWidthA
GDI32.dll332SetAbortProc
GDI32.dll241GetPixel
GDI32.dll55CreatePen
GDI32.dll250GetStockObject
GDI32.dll290PatBlt
GDI32.dll338SetBoundsRect
GDI32.dll30CreateCompatibleBitmap
GDI32.dll195GetCurrentPositionEx
GDI32.dll194GetCurrentObject
GDI32.dll56CreatePenIndirect
GDI32.dll174GetBkMode
GDI32.dll173GetBkColor
GDI32.dll244GetROP2
GDI32.dll175GetBoundsRect
GDI32.dll10BitBlt
GDI32.dllAbortDoc
GDI32.dll44CreateFontIndirectA
GDI32.dll267GetTextMetricsA
GDI32.dll31CreateCompatibleDC
GDI32.dll330SelectObject
GDI32.dll197GetDIBColorTable
GDI32.dll376SetWindowExtEx
GDI32.dll377SetWindowOrgEx
GDI32.dll324ScaleViewportExtEx
GDI32.dll372SetViewportExtEx
GDI32.dll287OffsetViewportOrgEx
GDI32.dll373SetViewportOrgEx
GDI32.dll363SetROP2
GDI32.dll337SetBkMode
GDI32.dll321RestoreDC
GDI32.dll323SaveDC
GDI32.dll25CreateBitmap
GDI32.dll336SetBkColor
GDI32.dll370SetTextColor
GDI32.dll353SetMapMode
GDI32.dll68DeleteEnhMetaFile
GDI32.dll293PlayEnhMetaFile
GDI32.dll202GetEnhMetaFileA
GDI32.dll96ExtFloodFill
GDI32.dll75Ellipse
GDI32.dll64CreateSolidBrush
GDI32.dll263GetTextExtentPointA
GDI32.dll313RectVisible
GDI32.dll70DeleteObject
GDI32.dll67DeleteDC
GDI32.dll331SelectPalette
GDI32.dll311RealizePalette
GDI32.dll198GetDIBits
GDI32.dll91Escape
GDI32.dll366SetStretchBltMode
GDI32.dll383StretchDIBits
GDI32.dll199GetDeviceCaps
GDI32.dll379StartDocA
GDI32.dll381StartPage
GDI32.dll77EndPage
GDI32.dll76EndDoc
GDI32.dll234GetObjectA
GDI32.dll314Rectangle
GDI32.dll258GetTextColor
comdlg32.dll4CommDlgExtendedError
comdlg32.dll5FindTextA
comdlg32.dll18ReplaceTextA
comdlg32.dll7GetFileTitleA
comdlg32.dll9GetOpenFileNameA
comdlg32.dll11GetSaveFileNameA
comdlg32.dll2ChooseFontA
comdlg32.dll16PrintDlgA
comdlg32.dllChooseColorA
WINSPOOL.DRV65EndDocPrinter
WINSPOOL.DRV61DocumentPropertiesA
WINSPOOL.DRV137WritePrinter
WINSPOOL.DRV66EndPagePrinter
WINSPOOL.DRV105OpenPrinterA
WINSPOOL.DRV133StartDocPrinterA
WINSPOOL.DRV135StartPagePrinter
WINSPOOL.DRV26ClosePrinter
ADVAPI32.dll279RegCloseKey
ADVAPI32.dll302RegOpenKeyExA
ADVAPI32.dll283RegCreateKeyExA
ADVAPI32.dll321RegSetValueExA
ADVAPI32.dll310RegQueryValueExA
SHELL32.dll15DragQueryFileA
SHELL32.dll13DragFinish
SHELL32.dll97ShellExecuteA
COMCTL32.dll17
COMCTL32.dll23ImageList_Destroy
oledlg.dll8
ole32.dll68CoTaskMemAlloc
ole32.dll6CLSIDFromString
ole32.dll5CLSIDFromProgID
ole32.dll69CoTaskMemFree
ole32.dll183OleInitialize
ole32.dll206OleUninitialize
ole32.dll88CreateStreamOnHGlobal
ole32.dll84CreateILockBytesOnHGlobal
ole32.dll233StgCreateDocfileOnILockBytes
ole32.dll185OleIsCurrentClipboard
ole32.dll178OleFlushClipboard
ole32.dll62CoRevokeClassObject
ole32.dll56CoRegisterMessageFilter
ole32.dll20CoFreeUnusedLibraries
ole32.dll23CoGetClassObject
ole32.dll240StgOpenStorageOnILockBytes
OLEAUT32.dll9
OLEAUT32.dll7
OLEAUT32.dll420
OLEAUT32.dll4
OLEAUT32.dll17
OLEAUT32.dll18
OLEAUT32.dll20
OLEAUT32.dll19
OLEAUT32.dll23
OLEAUT32.dll24
OLEAUT32.dll12
OLEAUT32.dll6
OLEAUT32.dll150
OLEAUT32.dll2
OLEAUT32.dll10
OLEAUT32.dll418
offsetsizetypecomment
0466722EXE01/30/2005 07:50:29#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK