filename | g059.exe | |
---|---|---|
size | 1567232 (0x17ea00) | |
md5 | 26d15fafac1ac939f25c496424a8de00 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | scan pending | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0xa8 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xc8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0x7ba0 | 0x32 | |
IMPORT | 0x71ec | 0x50 | |
RESOURCE | 0xa000 | 0x508 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0x7000 | 0x1e0 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
USER32.dll | 317 | GetWindowRect | |
USER32.dll | 492 | SetCursor | |
USER32.dll | 180 | EndDialog | |
USER32.dll | 128 | DefWindowProcA | |
USER32.dll | 324 | GetWindowWord | |
USER32.dll | 547 | SetWindowWord | |
USER32.dll | 9 | BeginPaint | |
USER32.dll | 297 | GetSysColor | |
USER32.dll | 228 | GetClientRect | |
USER32.dll | 520 | SetRect | |
USER32.dll | 182 | EndPaint | |
USER32.dll | 446 | RegisterClassA | |
USER32.dll | 374 | LoadIconA | |
USER32.dll | 418 | OemToCharBuffA | |
USER32.dll | 370 | LoadCursorA | |
USER32.dll | 264 | GetLastActivePopup | |
USER32.dll | 557 | ShowWindow | |
USER32.dll | 433 | PostMessageA | |
USER32.dll | 178 | EnableWindow | |
USER32.dll | 305 | GetTopWindow | |
USER32.dll | 138 | DestroyWindow | |
USER32.dll | 314 | GetWindowLongA | |
USER32.dll | 539 | SetWindowLongA | |
USER32.dll | 545 | SetWindowTextA | |
USER32.dll | 502 | SetForegroundWindow | |
USER32.dll | 482 | SetActiveWindow | |
USER32.dll | 33 | CharNextA | |
USER32.dll | 534 | SetTimer | |
USER32.dll | 277 | GetMessageA | |
USER32.dll | 435 | PostQuitMessage | |
USER32.dll | 365 | KillTimer | |
USER32.dll | 139 | DialogBoxIndirectParamA | |
USER32.dll | 245 | GetDlgItemTextA | |
USER32.dll | 474 | SendMessageA | |
USER32.dll | 300 | GetSystemMetrics | |
USER32.dll | 542 | SetWindowPos | |
USER32.dll | 431 | PeekMessageA | |
USER32.dll | 581 | TranslateMessage | |
USER32.dll | 144 | DispatchMessageA | |
USER32.dll | 285 | GetParent | |
USER32.dll | 498 | SetDlgItemTextA | |
USER32.dll | 472 | SendDlgItemMessageA | |
USER32.dll | 243 | GetDlgItem | |
USER32.dll | 338 | InvalidateRect | |
USER32.dll | 593 | UpdateWindow | |
USER32.dll | 612 | wsprintfA | |
USER32.dll | 405 | MessageBoxA | |
KERNEL32.dll | 654 | _lopen | |
KERNEL32.dll | 623 | WinExec | |
KERNEL32.dll | 61 | CreateProcessA | |
KERNEL32.dll | 651 | _lclose | |
KERNEL32.dll | 335 | GetVolumeInformationA | |
KERNEL32.dll | 485 | RtlUnwind | |
KERNEL32.dll | 170 | GetCommandLineA | |
KERNEL32.dll | 254 | GetModuleHandleA | |
KERNEL32.dll | 107 | ExitProcess | |
KERNEL32.dll | 135 | FindNextFileA | |
KERNEL32.dll | 423 | MoveFileExA | |
KERNEL32.dll | 49 | CreateFileA | |
KERNEL32.dll | 237 | GetFileSize | |
KERNEL32.dll | 50 | CreateFileMappingA | |
KERNEL32.dll | 420 | MapViewOfFile | |
KERNEL32.dll | 595 | UnmapViewOfFile | |
KERNEL32.dll | 24 | CloseHandle | |
KERNEL32.dll | 537 | SetFilePointer | |
KERNEL32.dll | 528 | SetEndOfFile | |
KERNEL32.dll | 479 | RemoveDirectoryA | |
KERNEL32.dll | 535 | SetFileAttributesA | |
KERNEL32.dll | 78 | DeleteFileA | |
KERNEL32.dll | 157 | GetACP | |
KERNEL32.dll | 252 | GetModuleFileNameA | |
KERNEL32.dll | 531 | SetErrorMode | |
KERNEL32.dll | 332 | GetVersion | |
KERNEL32.dll | 400 | LoadLibraryA | |
KERNEL32.dll | 278 | GetProcAddress | |
KERNEL32.dll | 244 | GetLastError | |
KERNEL32.dll | 147 | FormatMessageA | |
KERNEL32.dll | 152 | FreeLibrary | |
KERNEL32.dll | 618 | WaitForSingleObject | |
KERNEL32.dll | 325 | GetTickCount | |
KERNEL32.dll | 337 | GetWindowsDirectoryA | |
KERNEL32.dll | 126 | FindClose | |
KERNEL32.dll | 130 | FindFirstFileA | |
KERNEL32.dll | 524 | SetCurrentDirectoryA | |
KERNEL32.dll | 673 | lstrlenA | |
KERNEL32.dll | 42 | CreateDirectoryA | |
KERNEL32.dll | 658 | lstrcatA | |
KERNEL32.dll | 538 | SetFileTime | |
KERNEL32.dll | 408 | LocalFileTimeToFileTime | |
KERNEL32.dll | 83 | DosDateTimeToFileTime | |
KERNEL32.dll | 652 | _lcreat | |
KERNEL32.dll | 667 | lstrcpyA | |
KERNEL32.dll | 406 | LocalAlloc | |
KERNEL32.dll | 228 | GetEnvironmentVariableA | |
KERNEL32.dll | 431 | OpenFile | |
KERNEL32.dll | 656 | _lwrite | |
KERNEL32.dll | 655 | _lread | |
KERNEL32.dll | 223 | GetDriveTypeA | |
KERNEL32.dll | 653 | _llseek | |
KERNEL32.dll | 410 | LocalFree | |
KERNEL32.dll | 352 | GlobalLock | |
KERNEL32.dll | 341 | GlobalAlloc | |
KERNEL32.dll | 348 | GlobalFree | |
KERNEL32.dll | 358 | GlobalUnlock | |
KERNEL32.dll | 351 | GlobalHandle | |
GDI32.dll | 261 | GetTextExtentPoint32A | |
GDI32.dll | 336 | SetBkColor | |
GDI32.dll | 370 | SetTextColor | |
GDI32.dll | 368 | SetTextAlign | |
GDI32.dll | 173 | GetBkColor | |
GDI32.dll | 70 | DeleteObject | |
GDI32.dll | 98 | ExtTextOutA | |
GDI32.dll | 32 | CreateDCA | |
GDI32.dll | 199 | GetDeviceCaps | |
GDI32.dll | 44 | CreateFontIndirectA | |
GDI32.dll | 67 | DeleteDC | |
GDI32.dll | 330 | SelectObject |
ord | entry_va | function_name |
---|
Scanning the drive for archives: 1 file, 1567232 bytes (1531 KiB) -- Type = PE Physical Size = 1567232 CPU = x86 Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms Created = 2031-05-20 20:54:01 Headers Size = 1024 Checksum = 1568301 Image Size = 1589248 Section Alignment = 4096 File Alignment = 512 Code Size = 22016 Initialized Data Size = 10752 Uninitialized Data Size = 0 Linker Version = 5.10 OS Version = 4.0 Image Version = 0.0 Subsystem Version = 4.0 Subsystem = Windows GUI Stack Reserve = 32000 Stack Commit = 4096 Heap Reserve = 32000 Heap Commit = 4096 Image Base = 4194304 ---- Path = _winzip_ Size = 1536000 Packed Size = 1536000 Virtual Size = 1540356 Characteristics = InitializedData Discardable Shared Execute Read Write Offset = 31232 Virtual Address = 0xB000 -- Path = _winzip_ Type = zip WARNINGS: There are data after the end of archive Offset = -31232 Physical Size = 1566790 Tail Size = 442 Embedded Stub Size = 31409 Date Time Attr Size Compressed Name ------------------- ----- ------------ ------------ ------------------------ 2000-08-01 14:48:04 .R... 172032 89734 CNCS32.dll 2001-03-02 02:02:12 ....A 228352 110681 ¶i¤Æ§a¥Ö¥d¥C4.5.exe 2001-03-02 02:02:12 ....A 2700 1322 ¶i¤Æ§a¥Ö¥d¥C4.5.txt 2001-03-02 02:02:10 ....A 4509707 1333184 ¶i¤Æ§a¥Ö¥d¥C4.5.gam ------------------- ----- ------------ ------------ ------------------------ 2001-03-02 02:02:12 4912791 1534921 4 files Warnings: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x0