35e3c5a3bb47b5781a4740a7126c5db6

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	35e3c5a3bb47b5781a4740a7126c5db6_.exe
size	491520 (0x78000)
md5	2efccc852c420d6af2c3879ac6230f19

type	MS-DOS executable PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0
blocks_in_file	0
num_relocs	0
header_paragraphs	0
min_extra_paragraphs	0
max_extra_paragraphs	0
ss	0
sp	0
checksum	0
ip	0
cs	0
reloc_table_offset	0
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

DOS stub

00000000: 4d 5a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |MZ..............|
00000010: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000030: 00 00 00 00 00 00 00 00  00 00 00 00 f0 00 00 00  |................|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 54 68 69 73  |............This|
00000050: 20 70 72 6f 67 72 61 6d  20 63 61 6e 6e 6f 74 20  | program cannot |
00000060: 62 65 20 72 75 6e 20 69  6e 20 44 4f 53 20 6d 6f  |be run in DOS mo|
00000070: 64 65 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |de..............|
00000080: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000f0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x510c8801
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x74000
SizeOfInitializedData	0x75000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x75000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x78000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	3
DllCharacteristics	1
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x10000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual Basic 5.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x74000	0x74000	R-X CODE
.rdata	0x75000	0x11c5	0x2000	RW- IDATA
.rsrc	0x77000	0x2ae	0x1000	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x7619d	0x28
RESOURCE	0x77000	0x2ae
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x75000	0x370
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	598	487424

module_name	hint	function_name
MSVBVM60.dll	2	EVENT_SINK_GetIDsOfNames
MSVBVM60.dll	2	__vbaVarTstGt
MSVBVM60.dll	2	__vbaVarSub
MSVBVM60.dll	2	__vbaStrI2
MSVBVM60.dll	2	__vbaVargParmRef
MSVBVM60.dll	2	__vbaNextEachAry
MSVBVM60.dll	2	_CIcos
MSVBVM60.dll	2	_adj_fptan
MSVBVM60.dll	2	__vbaHresultCheck
MSVBVM60.dll	2	__vbaStrI4
MSVBVM60.dll	2	__vbaVarMove
MSVBVM60.dll	2	__vbaVarVargNofree
MSVBVM60.dll	2	__vbaFreeVar
MSVBVM60.dll	2	__vbaAryMove
MSVBVM60.dll	2
MSVBVM60.dll	2	__vbaLenBstr
MSVBVM60.dll	2	__vbaStrVarMove
MSVBVM60.dll	2	__vbaPut3
MSVBVM60.dll	2	__vbaEnd
MSVBVM60.dll	2	__vbaFreeVarList
MSVBVM60.dll	2	_adj_fdiv_m64
MSVBVM60.dll	2	__vbaPut4
MSVBVM60.dll	2	EVENT_SINK_Invoke
MSVBVM60.dll	2	__vbaVarIndexStore
MSVBVM60.dll	2	__vbaRaiseEvent
MSVBVM60.dll	2	__vbaFreeObjList
MSVBVM60.dll	2	__vbaStrErrVarCopy
MSVBVM60.dll	2	_adj_fprem1
MSVBVM60.dll	2	__vbaRecAnsiToUni
MSVBVM60.dll	2	__vbaCopyBytes
MSVBVM60.dll	2	__vbaStrCat
MSVBVM60.dll	2	__vbaBoolErrVar
MSVBVM60.dll	2	__vbaLsetFixstr
MSVBVM60.dll	2	__vbaSetSystemError
MSVBVM60.dll	2	__vbaRecDestruct
MSVBVM60.dll	2	__vbaNameFile
MSVBVM60.dll	2	__vbaLenBstrB
MSVBVM60.dll	2	__vbaHresultCheckObj
MSVBVM60.dll	2	__vbaLenVar
MSVBVM60.dll	2	_adj_fdiv_m32
MSVBVM60.dll	2	__vbaAryVar
MSVBVM60.dll	2	Zombie_GetTypeInfo
MSVBVM60.dll	2	__vbaAryDestruct
MSVBVM60.dll	2	EVENT_SINK2_Release
MSVBVM60.dll	2	__vbaForEachCollObj
MSVBVM60.dll	2	__vbaExitProc
MSVBVM60.dll	2	__vbaStrLike
MSVBVM60.dll	2	__vbaOnError
MSVBVM60.dll	2	__vbaObjSet
MSVBVM60.dll	2	_adj_fdiv_m16i
MSVBVM60.dll	2	__vbaObjSetAddref
MSVBVM60.dll	2	_adj_fdivr_m16i
MSVBVM60.dll	2	__vbaVarIndexLoad
MSVBVM60.dll	2	__vbaBoolVar
MSVBVM60.dll	2	__vbaStrFixstr
MSVBVM60.dll	2	__vbaFPFix
MSVBVM60.dll	2	__vbaBoolVarNull
MSVBVM60.dll	2	__vbaVarTstLt
MSVBVM60.dll	2	__vbaRefVarAry
MSVBVM60.dll	2	_CIsin
MSVBVM60.dll	2	__vbaErase
MSVBVM60.dll	2	__vbaNextEachCollObj
MSVBVM60.dll	2	__vbaVarZero
MSVBVM60.dll	2	__vbaVargVarMove
MSVBVM60.dll	2	__vbaChkstk
MSVBVM60.dll	2	__vbaCyVar
MSVBVM60.dll	2	__vbaFileClose
MSVBVM60.dll	2	EVENT_SINK_AddRef
MSVBVM60.dll	2	__vbaCyI2
MSVBVM60.dll	2	__vbaStrCmp
MSVBVM60.dll	2	__vbaVarTstEq
MSVBVM60.dll	2	__vbaAryConstruct2
MSVBVM60.dll	2	__vbaPutOwner3
MSVBVM60.dll	2	__vbaPutOwner4
MSVBVM60.dll	2	__vbaObjVar
MSVBVM60.dll	2	DllFunctionCall
MSVBVM60.dll	2	__vbaFpUI1
MSVBVM60.dll	2	__vbaCastObjVar
MSVBVM60.dll	2	__vbaLbound
MSVBVM60.dll	2	__vbaRedimPreserve
MSVBVM60.dll	2	_adj_fpatan
MSVBVM60.dll	2	__vbaFixstrConstruct
MSVBVM60.dll	2	__vbaLateIdCallLd
MSVBVM60.dll	2	Zombie_GetTypeInfoCount
MSVBVM60.dll	2	__vbaStrR8
MSVBVM60.dll	2	__vbaRedim
MSVBVM60.dll	2	__vbaUI1ErrVar
MSVBVM60.dll	2	__vbaRecUniToAnsi
MSVBVM60.dll	2	EVENT_SINK_Release
MSVBVM60.dll	2	__vbaNew
MSVBVM60.dll	2	_CIsqrt
MSVBVM60.dll	2	__vbaVarAnd
MSVBVM60.dll	2	__vbaObjIs
MSVBVM60.dll	2	EVENT_SINK_QueryInterface
MSVBVM60.dll	2	__vbaFpCmpCy
MSVBVM60.dll	2	__vbaStr2Vec
MSVBVM60.dll	2	__vbaExceptHandler
MSVBVM60.dll	2	__vbaStrToUnicode
MSVBVM60.dll	2	_adj_fprem
MSVBVM60.dll	2	_adj_fdivr_m64
MSVBVM60.dll	2	__vbaFailedFriend
MSVBVM60.dll	2	__vbaFPException
MSVBVM60.dll	2	__vbaStrVarVal
MSVBVM60.dll	2	__vbaUbound
MSVBVM60.dll	2	__vbaGetOwner4
MSVBVM60.dll	2	__vbaVarCat
MSVBVM60.dll	2	__vbaI2Var
MSVBVM60.dll	2	__vbaFileSeek
MSVBVM60.dll	2	_CIlog
MSVBVM60.dll	2	__vbaFileOpen
MSVBVM60.dll	2	__vbaR8Str
MSVBVM60.dll	2	__vbaInStr
MSVBVM60.dll	2	__vbaNew2
MSVBVM60.dll	2	__vbaVar2Vec
MSVBVM60.dll	2	__vbaCyMulI2
MSVBVM60.dll	2	_adj_fdiv_m32i
MSVBVM60.dll	2	_adj_fdivr_m32i
MSVBVM60.dll	2	__vbaStrCopy
MSVBVM60.dll	2	EVENT_SINK2_AddRef
MSVBVM60.dll	2	__vbaI4Str
MSVBVM60.dll	2	__vbaFreeStrList
MSVBVM60.dll	2	_adj_fdivr_m32
MSVBVM60.dll	2	__vbaPowerR8
MSVBVM60.dll	2	__vbaR8Var
MSVBVM60.dll	2	_adj_fdiv_r
MSVBVM60.dll	2	__vbaVarTstNe
MSVBVM60.dll	2	__vbaI4Var
MSVBVM60.dll	2	__vbaVarCmpEq
MSVBVM60.dll	2	__vbaForEachAry
MSVBVM60.dll	2	__vbaLateMemCall
MSVBVM60.dll	2	__vbaVarAdd
MSVBVM60.dll	2	__vbaAryLock
MSVBVM60.dll	2	__vbaVarDup
MSVBVM60.dll	2	__vbaStrToAnsi
MSVBVM60.dll	2	__vbaFpI2
MSVBVM60.dll	2	__vbaFpI4
MSVBVM60.dll	2	__vbaVarCopy
MSVBVM60.dll	2	__vbaLateMemCallLd
MSVBVM60.dll	2	__vbaRecDestructAnsi
MSVBVM60.dll	2	_CIatan
MSVBVM60.dll	2	__vbaI2ErrVar
MSVBVM60.dll	2	__vbaStrMove
MSVBVM60.dll	2	__vbaAryCopy
MSVBVM60.dll	2	__vbaCastObj
MSVBVM60.dll	2	__vbaI4Cy
MSVBVM60.dll	2	__vbaMidStmtVar
MSVBVM60.dll	2	__vbaStrVarCopy
MSVBVM60.dll	2	_allmul
MSVBVM60.dll	2	__vbaLateIdSt
MSVBVM60.dll	2	_CItan
MSVBVM60.dll	2	__vbaUI1Var
MSVBVM60.dll	2	__vbaFPInt
MSVBVM60.dll	2	__vbaAryUnlock
MSVBVM60.dll	2	_CIexp
MSVBVM60.dll	2	__vbaI4ErrVar
MSVBVM60.dll	2	__vbaRecAssign
MSVBVM60.dll	2	__vbaFreeStr
MSVBVM60.dll	2	__vbaFreeObj

show previews

offset	size	type	comment
0	491520	EXE	02/02/2013 03:29:05	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

35e3c5a3bb47b5781a4740a7126c5db6_.exe

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory