f63d71028dec3621f538eaf70a578c84a1b5db0eb0b732cf11d1e1eca77066c5 - Sunrise.exe

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	f63d71028dec3621f538eaf70a578c84a1b5db0eb0b732cf11d1e1eca77066c5
size	75520 (0x12700)
md5	20f9f39079d4a3d2c2a90fded257f6b7

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
95	4035	2
1	0	155
93	4035	17
48	9044	10
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0xc6edd5e8
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.1
SizeOfCode	0xf400
SizeOfInitializedData	0x2c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0xf0a0
BaseOfCode	0x400
BaseOfData	0xf800
ImageBase	0x400000
SectionAlignment	0x400
FileAlignment	0x400
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x12400
SizeOfHeaders	0x400
CheckSum	0x1fcf0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x400	0xf1c7	0xf400	R-X CODE
.rdata	0xf800	0x1040	0x1400	R-- IDATA
.data	0x10c00	0xe54	0x1000	RW- IDATA
.rsrc	0x11c00	0x7c8	0x800	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x10444	0x64
RESOURCE	0x11c00	0x7c8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xf800	0x234
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MANIFEST	#1	939
VERSION	#1	760
#241	#228	30

module_name	hint	ord	function_name
USER32.dll	631		SendMessageA
USER32.dll	785		UpdateWindow
USER32.dll	216		EnableWindow
KERNEL32.dll	610		GetStartupInfoA
KERNEL32.dll	533		GetModuleHandleA
MFC42.DLL		1168
MFC42.DLL		4441
MFC42.DLL		4242
MFC42.DLL		2723
MFC42.DLL		2390
MFC42.DLL		3059
MFC42.DLL		5100
MFC42.DLL		5103
MFC42.DLL		4467
MFC42.DLL		4303
MFC42.DLL		3350
MFC42.DLL		5012
MFC42.DLL		975
MFC42.DLL		5472
MFC42.DLL		3403
MFC42.DLL		2879
MFC42.DLL		2878
MFC42.DLL		4151
MFC42.DLL		6055
MFC42.DLL		4077
MFC42.DLL		1776
MFC42.DLL		4407
MFC42.DLL		5237
MFC42.DLL		2385
MFC42.DLL		5163
MFC42.DLL		6374
MFC42.DLL		4353
MFC42.DLL		5282
MFC42.DLL		2649
MFC42.DLL		1665
MFC42.DLL		3798
MFC42.DLL		4837
MFC42.DLL		4436
MFC42.DLL		2648
MFC42.DLL		2055
MFC42.DLL		6376
MFC42.DLL		3749
MFC42.DLL		5065
MFC42.DLL		1727
MFC42.DLL		5252
MFC42.DLL		2446
MFC42.DLL		2124
MFC42.DLL		5277
MFC42.DLL		2982
MFC42.DLL		3147
MFC42.DLL		3259
MFC42.DLL		4465
MFC42.DLL		3136
MFC42.DLL		3262
MFC42.DLL		2985
MFC42.DLL		3081
MFC42.DLL		2976
MFC42.DLL		3830
MFC42.DLL		3831
MFC42.DLL		3825
MFC42.DLL		3079
MFC42.DLL		4080
MFC42.DLL		4627
MFC42.DLL		4427
MFC42.DLL		3623
MFC42.DLL		366
MFC42.DLL		2575
MFC42.DLL		4078
MFC42.DLL		4396
MFC42.DLL		5241
MFC42.DLL		5290
MFC42.DLL		1576
MFC42.DLL		5261
MFC42.DLL		3402
MFC42.DLL		4424
MFC42.DLL		3574
MFC42.DLL		567
MFC42.DLL		609
MFC42.DLL		825
MFC42.DLL		674
MFC42.DLL		2099
MFC42.DLL		823
MFC42.DLL		1771
MFC42.DLL		6366
MFC42.DLL		2413
MFC42.DLL		2024
MFC42.DLL		4219
MFC42.DLL		2581
MFC42.DLL		4401
MFC42.DLL		3639
MFC42.DLL		692
MFC42.DLL		2078
MFC42.DLL		4457
MFC42.DLL		4615
MFC42.DLL		4612
MFC42.DLL		4610
MFC42.DLL		4274
MFC42.DLL		6375
MFC42.DLL		4486
MFC42.DLL		2554
MFC42.DLL		2512
MFC42.DLL		5731
MFC42.DLL		3922
MFC42.DLL		1089
MFC42.DLL		5199
MFC42.DLL		2396
MFC42.DLL		3346
MFC42.DLL		5300
MFC42.DLL		5302
MFC42.DLL		2725
MFC42.DLL		4079
MFC42.DLL		4698
MFC42.DLL		5307
MFC42.DLL		5289
MFC42.DLL		5714
MFC42.DLL		4622
MFC42.DLL		3738
MFC42.DLL		561
MFC42.DLL		6215
MFC42.DLL		2092
MFC42.DLL		815
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	390		_onexit
MSVCRT.dll	211		_exit
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	585		exit
MSVCRT.dll	143		_acmdln
MSVCRT.dll	88		__getmainargs
MSVCRT.dll	271		_initterm
MSVCRT.dll	426		_setmbcp
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	106		__p__commode
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	183		_controlfp

StringTable 156625E3

CompanyName	Sunrise
FileDescription	Sunrise Application
FileVersion	1, 1, 1, 5
InternalName	Sunrise
LegalCopyright	Free license 2012
LegalTrademarks
OriginalFilename	Sunrise.exe
ProductName	Sunrise Application
ProductVersion	1, 1, 1, 5

VS_FIXEDFILEINFO

FileVersion	1.1.1.5
ProductVersion	1.1.1.5
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	74752	EXE	10/05/2075 04:32:40	#
15c1	15	HTM		#
12400	768	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 75520 bytes (74 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

f63d71028dec3621f538eaf70a578c84a1b5db0eb0b732cf11d1e1eca77066c5-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 156625E3

VS_FIXEDFILEINFO

f63d71028dec3621f538eaf70a578c84a1b5db0eb0b732cf11d1e1eca77066c5
-