filenameRechnung zu Ihrer Bestellung.exe
size294912 (0x48000)
md53095696f939624096d6d48b48bd1d5a7
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
9540357
93403525
10481
1255072725
10950727136
11050727113
114507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x544e29af
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x21000
SizeOfInitializedData0xd1000
SizeOfUninitializedData0
AddressOfEntryPoint0xa8b6
BaseOfCode0x1000
BaseOfData0x22000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xf3000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x2065d0x21000R-X CODE
.rdata0x220000x1474e0x15000R-- IDATA
.data0x370000xb7cd40xd000RW- IDATA
.rsrc0xef0000x3fe80x4000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x353540xdc
RESOURCE0xef0000x3fe8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x224400x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x334f00x40
Bound_IAT00
IAT0x220000x3b0
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#196400
ICON#242640
ICON#311280
GROUP_ICONMAINICON480
VERSION#19240
module_namehintordfunction_name
KERNEL32.dll325GetCurrentProcess
KERNEL32.dll605HeapFree
KERNEL32.dll604HeapAlloc
KERNEL32.dll948VirtualAlloc
KERNEL32.dll594HeapReAlloc
KERNEL32.dll282GetCommandLineA
KERNEL32.dll434GetProcessHeap
KERNEL32.dll475GetStartupInfoA
KERNEL32.dll684RaiseException
KERNEL32.dll748RtlUnwind
KERNEL32.dll633HeapSize
KERNEL32.dll192ExitProcess
KERNEL32.dll912TerminateProcess
KERNEL32.dll971UnhandledExceptionFilter
KERNEL32.dll877SetUnhandledExceptionFilter
KERNEL32.dll642IsDebuggerPresent
KERNEL32.dll599HeapDestroy
KERNEL32.dll921VirtualFree
KERNEL32.dll463GetStdHandle
KERNEL32.dll290FreeEnvironmentStringsA
KERNEL32.dll359GetEnvironmentStrings
KERNEL32.dll255FreeEnvironmentStringsW
KERNEL32.dll395GetEnvironmentStringsW
KERNEL32.dll868SetHandleCount
KERNEL32.dll363GetFileType
KERNEL32.dll771QueryPerformanceCounter
KERNEL32.dll479GetTickCount
KERNEL32.dll500GetSystemTimeAsFileTime
KERNEL32.dll892Sleep
KERNEL32.dll329GetACP
KERNEL32.dll349GetConsoleCP
KERNEL32.dll356GetConsoleMode
KERNEL32.dll600LCMapStringA
KERNEL32.dll642LCMapStringW
KERNEL32.dll526GetStringTypeA
KERNEL32.dll530GetStringTypeW
KERNEL32.dll912SetStdHandle
KERNEL32.dll984WriteConsoleA
KERNEL32.dll337GetConsoleOutputCP
KERNEL32.dll933WriteConsoleW
KERNEL32.dll269FlushFileBuffers
KERNEL32.dll854SetFilePointer
KERNEL32.dll1015WriteFile
KERNEL32.dll476GetOEMCP
KERNEL32.dll276GetCPInfo
KERNEL32.dll382GetLocaleInfoA
KERNEL32.dll520GlobalAddAtomA
KERNEL32.dll606GlobalFindAtomA
KERNEL32.dll562GlobalDeleteAtom
KERNEL32.dll681LoadLibraryA
KERNEL32.dll1001lstrcmpW
KERNEL32.dll537GetVersionExA
KERNEL32.dll517GetThreadLocale
KERNEL32.dll590GlobalGetAtomNameA
KERNEL32.dll554GlobalFlags
KERNEL32.dll965lstrcmpA
KERNEL32.dll391GetCurrentThreadId
KERNEL32.dll100CloseHandle
KERNEL32.dll652InterlockedIncrement
KERNEL32.dll286FreeLibrary
KERNEL32.dll610InterlockedDecrement
KERNEL32.dll482GetModuleHandleA
KERNEL32.dll885TlsFree
KERNEL32.dll193DeleteCriticalSection
KERNEL32.dll701LocalReAlloc
KERNEL32.dll886TlsSetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll551InitializeCriticalSection
KERNEL32.dll571GlobalHandle
KERNEL32.dll565GlobalReAlloc
KERNEL32.dll189EnterCriticalSection
KERNEL32.dll884TlsGetValue
KERNEL32.dll611LeaveCriticalSection
KERNEL32.dll603LocalAlloc
KERNEL32.dll409GetCurrentProcessId
KERNEL32.dll387GetModuleFileNameA
KERNEL32.dll561GlobalFree
KERNEL32.dll520GlobalAlloc
KERNEL32.dll569GlobalLock
KERNEL32.dll526GlobalUnlock
KERNEL32.dll336FormatMessageA
KERNEL32.dll655LocalFree
KERNEL32.dll247FindResourceA
KERNEL32.dll682LoadResource
KERNEL32.dll641LockResource
KERNEL32.dll866SizeofResource
KERNEL32.dll900SetLastError
KERNEL32.dll495GetTempPathA
KERNEL32.dll537GetVersion
KERNEL32.dll87CompareStringA
KERNEL32.dll694LoadLibraryExA
KERNEL32.dll454GetProcAddress
KERNEL32.dll468GetLastError
KERNEL32.dll617InterlockedExchange
KERNEL32.dll660MultiByteToWideChar
KERNEL32.dll1020lstrcatA
KERNEL32.dll690MulDiv
KERNEL32.dll870SetSystemTimeAdjustment
KERNEL32.dll934WideCharToMultiByte
KERNEL32.dll1014lstrlenA
KERNEL32.dll162CreateFileA
KERNEL32.dll562HeapCreate
USER32.dll438GrayStringA
USER32.dll237DrawTextExA
USER32.dll260DrawTextA
USER32.dll729TabbedTextOutA
USER32.dll249DestroyMenu
USER32.dll600RegisterWindowMessageA
USER32.dll495LoadIconA
USER32.dll764WinHelpA
USER32.dll313GetCapture
USER32.dll281GetClassLongA
USER32.dll693SetPropA
USER32.dll381GetPropA
USER32.dll636RemovePropA
USER32.dll450IsWindow
USER32.dll355GetForegroundWindow
USER32.dll307GetDlgItem
USER32.dll411GetTopWindow
USER32.dll218DestroyWindow
USER32.dll389GetMessageTime
USER32.dll341GetMessagePos
USER32.dll547MapWindowPoints
USER32.dll588PostQuitMessage
USER32.dll691SetForegroundWindow
USER32.dll261GetClientRect
USER32.dll323GetMenu
USER32.dll518PostMessageA
USER32.dll176CreateWindowExA
USER32.dll254GetClassInfoExA
USER32.dll322GetClassInfoA
USER32.dll547RegisterClassA
USER32.dll41AdjustWindowRectEx
USER32.dll163CopyRect
USER32.dll240DefWindowProcA
USER32.dll643SetWindowLongA
USER32.dll656SetWindowPos
USER32.dll764SystemParametersInfoA
USER32.dll476IsIconic
USER32.dll392GetWindowPlacement
USER32.dll687SetMenuItemBitmaps
USER32.dll329GetMenuCheckMarkDimensions
USER32.dll525LoadBitmapA
USER32.dll537ModifyMenuA
USER32.dll209EnableMenuItem
USER32.dll133CheckMenuItem
USER32.dll354GetFocus
USER32.dll81ClientToScreen
USER32.dll416GetWindow
USER32.dll338GetDlgCtrlID
USER32.dll463GetWindowRect
USER32.dll340GetClassNameA
USER32.dll583PtInRect
USER32.dll452GetWindowTextA
USER32.dll669SetWindowTextA
USER32.dll742UnregisterClassA
USER32.dll682SetWindowsHookExA
USER32.dll88CallNextHookEx
USER32.dll168DispatchMessageA
USER32.dll359GetKeyState
USER32.dll529PeekMessageA
USER32.dll730ValidateRect
USER32.dll495LoadCursorA
USER32.dll358GetSystemMetrics
USER32.dll432GetSysColor
USER32.dll443GetSysColorBrush
USER32.dll743UnhookWindowsHookEx
USER32.dll389GetWindowThreadProcessId
USER32.dll649SendMessageA
USER32.dll357GetParent
USER32.dll394GetWindowLongA
USER32.dll319GetLastActivePopup
USER32.dll493IsWindowEnabled
USER32.dll204EnableWindow
USER32.dll487MessageBoxA
USER32.dll371GetMenuState
USER32.dll346GetMenuItemID
USER32.dll374GetMenuItemCount
USER32.dll351GetSubMenu
USER32.dll268GetDC
USER32.dll648ReleaseDC
USER32.dll63CallWindowProcA
GDI32.dll561ScaleWindowExtEx
GDI32.dll228DeleteDC
GDI32.dll478GetStockObject
GDI32.dll656SetWindowExtEx
GDI32.dll615ScaleViewportExtEx
GDI32.dll637SetViewportExtEx
GDI32.dll549OffsetViewportOrgEx
GDI32.dll646SetViewportOrgEx
GDI32.dll612SelectObject
GDI32.dll287Escape
GDI32.dll648TextOutA
GDI32.dll559RectVisible
GDI32.dll563PtVisible
GDI32.dll363GetDeviceCaps
GDI32.dll592SetMapMode
GDI32.dll542RestoreDC
GDI32.dll543SaveDC
GDI32.dll248ExtTextOutA
GDI32.dll550SetBkColor
GDI32.dll602SetTextColor
GDI32.dll389GetClipBox
GDI32.dll69CreateBitmap
GDI32.dll144DeleteObject
WINSPOOL.DRV152OpenPrinterA
WINSPOOL.DRV106DocumentPropertiesA
WINSPOOL.DRV117ClosePrinter
ADVAPI32.dll550RegCloseKey
ADVAPI32.dll515RegOpenKeyExA
ADVAPI32.dll474RegCreateKeyA
ADVAPI32.dll583RegQueryValueExA
SHELL32.dll358ShellExecuteA
ole32.dll165CoRevokeClassObject
ole32.dll97CoInitialize
ole32.dll347OleUninitialize
ole32.dll262OleInitialize
ole32.dll331OleSetContainedObject
ole32.dll179CoUninitialize
OLEAUT32.dll8
OLEAUT32.dll12
OLEAUT32.dll9
OLEACC.dll92LresultFromObject
OLEACC.dll69CreateStdAccessibleObject
loadperf.dll82LoadPerfCounterTextStringsA
loadperf.dll64UnloadPerfCounterTextStringsA

StringTable 040904B0

CommentsDodifficult regionbox Ledfloor supplysteel Graypaper
CompanyNameElement Payment Services
FileDescriptionFather Record
FileVersion8.1.679.850
InternalNameFather Record
LegalTrademarksFather Record Pr
LegalCopyright© 2015, Element Payment Services mo
ProductNameFather Record
ProductVersion8.1.679.850

VS_FIXEDFILEINFO

FileVersion8.1.679.850
ProductVersion8.1.679.850
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0294912EXE10/27/2014 11:17:03#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK