filenamecrackstaller.exe
size227328 (0x37800)
md521bb34db407b42991db2dedbed450a76
typePE32+ executable (console) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
2602520310
259252035
26125203129
2612861937
2602861916
259286199
262252031
257252037
1097
264288068
258288061

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5efbd1c5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.26
SizeOfCode0xd400
SizeOfInitializedData0x2b400
SizeOfUninitializedData0
AddressOfEntryPoint0x3218
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x3d000
SizeOfHeaders0x400
CheckSum0
Subsystem3
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xd3100xd400R-X CODE
.rdata0xf0000x916c0x9200R-- IDATA
.data0x190000x206080x1f400RW- IDATA
.pdata0x3a0000xe580x1000R-- IDATA
_RDATA0x3b0000x940x200R-- IDATA
.reloc0x3c0000x6400x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x178d00x50
RESOURCE00
EXCEPTION0x3a0000xe58
SECURITY00
BASERELOC0x3c0000x640
DEBUG0x1683c0x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x168800x130
Bound_IAT00
IAT0xf0000x288
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
KERNEL32.dll1335SetLastError
KERNEL32.dll1411Sleep
KERNEL32.dll611GetLastError
KERNEL32.dll959LoadLibraryA
KERNEL32.dll689GetProcAddress
KERNEL32.dll1561WriteFile
KERNEL32.dll202CreateFileW
KERNEL32.dll134CloseHandle
KERNEL32.dll962LoadLibraryW
KERNEL32.dll1488VirtualFree
KERNEL32.dll287DeviceIoControl
KERNEL32.dll1485VirtualAlloc
KERNEL32.dll1463UnmapViewOfFile
KERNEL32.dll199CreateFileMappingW
KERNEL32.dll986MapViewOfFile
KERNEL32.dll1560WriteConsoleW
KERNEL32.dll1321SetFilePointerEx
KERNEL32.dll512GetConsoleMode
KERNEL32.dll494GetConsoleCP
KERNEL32.dll419FlushFileBuffers
KERNEL32.dll1097QueryPerformanceCounter
KERNEL32.dll540GetCurrentProcessId
KERNEL32.dll544GetCurrentThreadId
KERNEL32.dll748GetSystemTimeAsFileTime
KERNEL32.dll871InitializeSListHead
KERNEL32.dll1227RtlCaptureContext
KERNEL32.dll1234RtlLookupFunctionEntry
KERNEL32.dll1241RtlVirtualUnwind
KERNEL32.dll893IsDebuggerPresent
KERNEL32.dll1460UnhandledExceptionFilter
KERNEL32.dll1395SetUnhandledExceptionFilter
KERNEL32.dll723GetStartupInfoW
KERNEL32.dll900IsProcessorFeaturePresent
KERNEL32.dll634GetModuleHandleW
KERNEL32.dll1240RtlUnwindEx
KERNEL32.dll307EnterCriticalSection
KERNEL32.dll955LeaveCriticalSection
KERNEL32.dll271DeleteCriticalSection
KERNEL32.dll867InitializeCriticalSectionAndSpinCount
KERNEL32.dll1444TlsAlloc
KERNEL32.dll1446TlsGetValue
KERNEL32.dll1447TlsSetValue
KERNEL32.dll1445TlsFree
KERNEL32.dll431FreeLibrary
KERNEL32.dll961LoadLibraryExW
KERNEL32.dll1119RaiseException
KERNEL32.dll539GetCurrentProcess
KERNEL32.dll354ExitProcess
KERNEL32.dll1426TerminateProcess
KERNEL32.dll633GetModuleHandleExW
KERNEL32.dll725GetStdHandle
KERNEL32.dll629GetModuleFileNameA
KERNEL32.dll1003MultiByteToWideChar
KERNEL32.dll1541WideCharToMultiByte
KERNEL32.dll474GetCommandLineA
KERNEL32.dll475GetCommandLineW
KERNEL32.dll438GetACP
KERNEL32.dll846HeapFree
KERNEL32.dll842HeapAlloc
KERNEL32.dll377FindClose
KERNEL32.dll382FindFirstFileExA
KERNEL32.dll398FindNextFileA
KERNEL32.dll905IsValidCodePage
KERNEL32.dll666GetOEMCP
KERNEL32.dll453GetCPInfo
KERNEL32.dll570GetEnvironmentStringsW
KERNEL32.dll430FreeEnvironmentStringsW
KERNEL32.dll1305SetEnvironmentVariableA
KERNEL32.dll1359SetStdHandle
KERNEL32.dll593GetFileType
KERNEL32.dll730GetStringTypeW
KERNEL32.dll154CompareStringW
KERNEL32.dll943LCMapStringW
KERNEL32.dll695GetProcessHeap
KERNEL32.dll851HeapSize
KERNEL32.dll849HeapReAlloc
SHELL32.dll355SHGetKnownFolderPath
ole32.dll140CoTaskMemFree
offsetsizetypecomment
15c115HTM#
15d0221744BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK