filenamealldatapro.exe_0_839680.exe
size839680 (0xcd000)
md51f6b917ef21063850af664c019b39a3f
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
14729928
109782128
3787552
10222
25921015
119782224
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4b60c88d
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x93000
SizeOfInitializedData0x37000
SizeOfUninitializedData0
AddressOfEntryPoint0x7dec4
BaseOfCode0x1000
BaseOfData0x94000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xd2000
SizeOfHeaders0x1000
CheckSum0x4e1671
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v4.x

Sections

namevavsizeraw sizeflags
.text0x10000x9239f0x93000R-X CODE
.rdata0x940000x1205e0x13000R-- IDATA
.data0xa70000x225380x1e000RW- IDATA
.rsrc0xca0000x7e680x8000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xa52c00x8c
RESOURCE0xca0000x8d0
EXCEPTION00
SECURITY0x4dbed80x1000
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x940000x29c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#996400
ICON#1042640
ICON#1124400
ICON#1211280
DIALOG#1295920
DIALOG#1303400
DIALOG#1391480
DIALOG#1402160
STRING#7860
ACCELERATORS#109160
GROUP_ICON#2011740
idlangstring
1031033ZIP 2 Secure EXE
1091033SELFEXTRACT
module_namehintordfunction_name
KERNEL32.dll593MultiByteToWideChar
KERNEL32.dll544LCMapStringA
KERNEL32.dll545LCMapStringW
KERNEL32.dll853VirtualAlloc
KERNEL32.dll532IsBadWritePtr
KERNEL32.dll797SetUnhandledExceptionFilter
KERNEL32.dll526IsBadCodePtr
KERNEL32.dll780SetStdHandle
KERNEL32.dll219FlushFileBuffers
KERNEL32.dll92CreateProcessA
KERNEL32.dll50CompareStringA
KERNEL32.dll51CompareStringW
KERNEL32.dll745SetEnvironmentVariableA
KERNEL32.dll415GetStringTypeA
KERNEL32.dll418GetStringTypeW
KERNEL32.dll302GetCurrentDirectoryW
KERNEL32.dll301GetCurrentDirectoryA
KERNEL32.dll120DeleteFileA
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll241GetCPInfo
KERNEL32.dll324GetExitCodeProcess
KERNEL32.dll856VirtualFree
KERNEL32.dll497HeapCreate
KERNEL32.dll499HeapDestroy
KERNEL32.dll322GetEnvironmentVariableA
KERNEL32.dll336GetFileType
KERNEL32.dll414GetStdHandle
KERNEL32.dll762SetHandleCount
KERNEL32.dll321GetEnvironmentStringsW
KERNEL32.dll319GetEnvironmentStrings
KERNEL32.dll228FreeEnvironmentStringsW
KERNEL32.dll227FreeEnvironmentStringsA
KERNEL32.dll834UnhandledExceptionFilter
KERNEL32.dll501HeapFree
KERNEL32.dll507HeapSize
KERNEL32.dll495HeapAlloc
KERNEL32.dll505HeapReAlloc
KERNEL32.dll455GetVersion
KERNEL32.dll253GetCommandLineA
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll303GetCurrentProcess
KERNEL32.dll817TerminateProcess
KERNEL32.dll171ExitProcess
KERNEL32.dll446GetTickCount
KERNEL32.dll44CloseHandle
KERNEL32.dll101CreateThread
KERNEL32.dll809Sleep
KERNEL32.dll380GetOEMCP
KERNEL32.dll744SetEndOfFile
KERNEL32.dll753SetFilePointer
KERNEL32.dll49CompareFileTime
KERNEL32.dll183FileTimeToLocalFileTime
KERNEL32.dll182FileTimeToDosDateTime
KERNEL32.dll814SystemTimeToFileTime
KERNEL32.dll348GetLocalTime
KERNEL32.dll566LocalFileTimeToFileTime
KERNEL32.dll132DosDateTimeToFileTime
KERNEL32.dll757SetFileTime
KERNEL32.dll656ReadFile
KERNEL32.dll333GetFileSize
KERNEL32.dll346GetLastError
KERNEL32.dll568LocalFree
KERNEL32.dll340GetFullPathNameW
KERNEL32.dll339GetFullPathNameA
KERNEL32.dll439GetTempPathW
KERNEL32.dll358GetModuleFileNameW
KERNEL32.dll589MoveFileW
KERNEL32.dll61CopyFileW
KERNEL32.dll121DeleteFileW
KERNEL32.dll331GetFileAttributesW
KERNEL32.dll69CreateDirectoryW
KERNEL32.dll741SetCurrentDirectoryW
KERNEL32.dll740SetCurrentDirectoryA
KERNEL32.dll752SetFileAttributesW
KERNEL32.dll335GetFileTime
KERNEL32.dll672RemoveDirectoryW
KERNEL32.dll449GetTimeZoneInformation
KERNEL32.dll586MoveFileA
KERNEL32.dll886WriteFile
KERNEL32.dll58CopyFileA
KERNEL32.dll328GetFileAttributesA
KERNEL32.dll224FormatMessageA
KERNEL32.dll438GetTempPathA
KERNEL32.dll357GetModuleFileNameA
KERNEL32.dll66CreateDirectoryA
KERNEL32.dll751SetFileAttributesA
KERNEL32.dll74CreateFileA
KERNEL32.dll235GetACP
KERNEL32.dll529IsBadReadPtr
KERNEL32.dll77CreateFileW
KERNEL32.dll456GetVersionExA
KERNEL32.dll873WideCharToMultiByte
KERNEL32.dll393GetProcAddress
KERNEL32.dll558LoadLibraryA
KERNEL32.dll564LocalAlloc
KERNEL32.dll229FreeLibrary
KERNEL32.dll689RtlUnwind
USER32.dll536RegisterClassExW
USER32.dll439LoadCursorA
USER32.dll159DialogBoxParamW
USER32.dll97CreateWindowExW
USER32.dll643SetWindowPos
USER32.dll457LoadStringW
USER32.dll74CopyRect
USER32.dll372GetWindowRect
USER32.dll270GetDesktopWindow
USER32.dll483MessageBoxW
USER32.dll513PostQuitMessage
USER32.dll198EndDialog
USER32.dll595SetDlgItemTextA
USER32.dll314GetMessageA
USER32.dll682TranslateMessage
USER32.dll161DispatchMessageA
USER32.dll476MessageBoxA
USER32.dll273GetDlgItem
USER32.dll571SendMessageA
USER32.dll498OffsetRect
USER32.dll511PostMessageA
USER32.dll634SetTimer
USER32.dll275GetDlgItemTextA
USER32.dll456LoadStringA
USER32.dll142DefWindowProcA
USER32.dll153DestroyWindow
USER32.dll13BeginPaint
USER32.dll200EndPaint
USER32.dll276GetDlgItemTextW
USER32.dll647SetWindowTextW
USER32.dll489MoveWindow
USER32.dll596SetDlgItemTextW
USER32.dll196EnableWindow
SHELL32.dll107SHGetPathFromIDListW
SHELL32.dll65SHBrowseForFolderW
SHELL32.dll155ShellExecuteExW
SHELL32.dll101SHGetMalloc
CRYPT32.dll77CertNameToStrA
CRYPT32.dll60CertFreeCertificateContext
CRYPT32.dll124CryptDecodeObject
CRYPT32.dll15CertCloseStore
WS2_32.dll115
WS2_32.dll21
WS2_32.dll111
WS2_32.dll23
WS2_32.dll11
WS2_32.dll9
WS2_32.dll52
WS2_32.dll4
WS2_32.dll10
WS2_32.dll18
WS2_32.dll2
WS2_32.dll3
WS2_32.dll22
WS2_32.dll16
WS2_32.dll19
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll132CryptAcquireContextA
ADVAPI32.dll159CryptReleaseContext
ADVAPI32.dll149CryptGenRandom
ADVAPI32.dll289GetUserNameA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll456RegCloseKey
offsetsizetypecomment
0839680EXE01/27/2010 23:13:17#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK