filenameSinon.exe
size1052672 (0x101000)
md536b77214b357d876c526b4a08651514c
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
1272911
1081681
11816817
9521903
11804722
14729936
108047158
11856939
10430
93217923
118966126
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4f05a424
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0xb3000
SizeOfInitializedData0x960000
SizeOfUninitializedData0
AddressOfEntryPoint0x8d8c6
BaseOfCode0x1000
BaseOfData0xb4000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xa14000
SizeOfHeaders0x1000
CheckSum0
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000xb284c0xb3000R-X CODE
.rdata0xb40000x247ca0x25000R-- IDATA
.data0xd90000x9385b90x26000RW- IDATA
.rsrc0xa120000x11d00x2000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xd6dd00xdc
RESOURCE0xa120000x11d0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xb40000x51c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#142640
MESSAGETABLE#1280
GROUP_ICON#103200
module_namehintordfunction_name
WINMM.dll165timeSetEvent
WINMM.dll161timeGetDevCaps
WINMM.dll164timeKillEvent
iphlpapi.dll47GetIpNetTable
iphlpapi.dll115SetIpNetEntry
KERNEL32.dll950lstrcmpiA
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll349GetFileTime
KERNEL32.dll947lstrcmpA
KERNEL32.dll944lstrcatA
KERNEL32.dll590LocalAlloc
KERNEL32.dll854TlsAlloc
KERNEL32.dll501GlobalFree
KERNEL32.dll512GlobalUnlock
KERNEL32.dll504GlobalHandle
KERNEL32.dll505GlobalLock
KERNEL32.dll508GlobalReAlloc
KERNEL32.dll494GlobalAlloc
KERNEL32.dll857TlsSetValue
KERNEL32.dll597LocalReAlloc
KERNEL32.dll856TlsGetValue
KERNEL32.dll478GetVersion
KERNEL32.dll496GlobalDeleteAtom
KERNEL32.dll497GlobalFindAtomA
KERNEL32.dll492GlobalAddAtomA
KERNEL32.dll502GlobalGetAtomNameA
KERNEL32.dll419GetProcessVersion
KERNEL32.dll500GlobalFlags
KERNEL32.dll252GetCPInfo
KERNEL32.dll395GetOEMCP
KERNEL32.dll716RtlUnwind
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll849TerminateProcess
KERNEL32.dll553IsBadReadPtr
KERNEL32.dll524HeapFree
KERNEL32.dll518HeapAlloc
KERNEL32.dll472GetTimeZoneInformation
KERNEL32.dll446GetSystemTime
KERNEL32.dll363GetLocalTime
KERNEL32.dll669RaiseException
KERNEL32.dll245GetACP
KERNEL32.dll530HeapSize
KERNEL32.dll528HeapReAlloc
KERNEL32.dll866UnhandledExceptionFilter
KERNEL32.dll237FreeEnvironmentStringsA
KERNEL32.dll238FreeEnvironmentStringsW
KERNEL32.dll333GetEnvironmentStrings
KERNEL32.dll335GetEnvironmentStringsW
KERNEL32.dll793SetHandleCount
KERNEL32.dll350GetFileType
KERNEL32.dll336GetEnvironmentVariableA
KERNEL32.dll479GetVersionExA
KERNEL32.dll522HeapDestroy
KERNEL32.dll520HeapCreate
KERNEL32.dll888VirtualFree
KERNEL32.dll885VirtualAlloc
KERNEL32.dll556IsBadWritePtr
KERNEL32.dll829SetUnhandledExceptionFilter
KERNEL32.dll570LCMapStringA
KERNEL32.dll571LCMapStringW
KERNEL32.dll434GetStringTypeA
KERNEL32.dll437GetStringTypeW
KERNEL32.dll550IsBadCodePtr
KERNEL32.dll52CompareStringA
KERNEL32.dll53CompareStringW
KERNEL32.dll776SetEnvironmentVariableA
KERNEL32.dll567IsValidLocale
KERNEL32.dll565IsValidCodePage
KERNEL32.dll364GetLocaleInfoA
KERNEL32.dll165EnumSystemLocalesA
KERNEL32.dll473GetUserDefaultLCID
KERNEL32.dll812SetStdHandle
KERNEL32.dll365GetLocaleInfoW
KERNEL32.dll353GetFullPathNameA
KERNEL32.dll956lstrcpynA
KERNEL32.dll481GetVolumeInformationA
KERNEL32.dll953lstrcpyA
KERNEL32.dll124DeleteFileA
KERNEL32.dll612MoveFileA
KERNEL32.dll773SetEndOfFile
KERNEL32.dll867UnlockFile
KERNEL32.dll601LockFile
KERNEL32.dll229FlushFileBuffers
KERNEL32.dll784SetFilePointer
KERNEL32.dll140DuplicateHandle
KERNEL32.dll187FileTimeToLocalFileTime
KERNEL32.dll188FileTimeToSystemTime
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll905WideCharToMultiByte
KERNEL32.dll959lstrlenA
KERNEL32.dll542InterlockedDecrement
KERNEL32.dll546InterlockedIncrement
KERNEL32.dll131DeviceIoControl
KERNEL32.dll312GetCurrentDirectoryA
KERNEL32.dll326GetDiskFreeSpaceExA
KERNEL32.dll543InterlockedExchange
KERNEL32.dll211FindNextFileA
KERNEL32.dll843SuspendThread
KERNEL32.dll711ResumeThread
KERNEL32.dll584LoadLibraryA
KERNEL32.dll408GetProcAddress
KERNEL32.dll797SetLastError
KERNEL32.dll239FreeLibrary
KERNEL32.dll73CreateEventA
KERNEL32.dll105CreateThread
KERNEL32.dll824SetThreadPriority
KERNEL32.dll465GetThreadPriority
KERNEL32.dll317GetCurrentThread
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll806SetPriorityClass
KERNEL32.dll397GetPriorityClass
KERNEL32.dll779SetEvent
KERNEL32.dll899WaitForMultipleObjects
KERNEL32.dll234FormatMessageA
KERNEL32.dll594LocalFree
KERNEL32.dll638OpenSemaphoreA
KERNEL32.dll697ReleaseSemaphore
KERNEL32.dll101CreateSemaphoreA
KERNEL32.dll683ReadFile
KERNEL32.dll919WriteFile
KERNEL32.dll95CreatePipe
KERNEL32.dll647PeekNamedPipe
KERNEL32.dll228FlushConsoleInputBuffer
KERNEL32.dll299GetConsoleMode
KERNEL32.dll754SetConsoleMode
KERNEL32.dll672ReadConsoleInputA
KERNEL32.dll901WaitForSingleObject
KERNEL32.dll393GetNumberOfConsoleInputEvents
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll197FindClose
KERNEL32.dll613MoveFileExA
KERNEL32.dll77CreateFileA
KERNEL32.dll347GetFileSize
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll537InitializeCriticalSection
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll418GetProcessTimes
KERNEL32.dll90CreateMutexA
KERNEL32.dll361GetLastError
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll433GetStdHandle
KERNEL32.dll762SetConsoleTextAttribute
KERNEL32.dll739SetConsoleCtrlHandler
KERNEL32.dll46CloseHandle
KERNEL32.dll431GetStartupInfoA
KERNEL32.dll264GetCommandLineA
KERNEL32.dll96CreateProcessA
KERNEL32.dll175ExitProcess
KERNEL32.dll305GetConsoleTitleA
KERNEL32.dll315GetCurrentProcessId
KERNEL32.dll469GetTickCount
KERNEL32.dll763SetConsoleTitleA
KERNEL32.dll841Sleep
USER32.dll255GetClientRect
USER32.dll2AdjustWindowRectEx
USER32.dll597SetFocus
USER32.dll346GetSysColor
USER32.dll473MapWindowPoints
USER32.dll513PostMessageA
USER32.dll445LoadIconA
USER32.dll645SetWindowTextA
USER32.dll441LoadCursorA
USER32.dll347GetSysColorBrush
USER32.dll553ReleaseDC
USER32.dll268GetDC
USER32.dll252GetClassNameA
USER32.dll523PtInRect
USER32.dll64ClientToScreen
USER32.dll515PostQuitMessage
USER32.dll151DestroyMenu
USER32.dll666TabbedTextOutA
USER32.dll188DrawTextA
USER32.dll381GrayStringA
USER32.dll355GetTopWindow
USER32.dll243GetCapture
USER32.dll719WinHelpA
USER32.dll246GetClassInfoA
USER32.dll533RegisterClassA
USER32.dll300GetMenu
USER32.dll306GetMenuItemCount
USER32.dll345GetSubMenu
USER32.dll273GetDlgItem
USER32.dll375GetWindowTextA
USER32.dll272GetDlgCtrlID
USER32.dll142DefWindowProcA
USER32.dll153DestroyWindow
USER32.dll96CreateWindowExA
USER32.dll250GetClassLongA
USER32.dll617SetPropA
USER32.dll330GetPropA
USER32.dll27CallWindowProcA
USER32.dll555RemovePropA
USER32.dll317GetMessageTime
USER32.dll316GetMessagePos
USER32.dll279GetForegroundWindow
USER32.dll598SetForegroundWindow
USER32.dll362GetWindow
USER32.dll639SetWindowLongA
USER32.dll642SetWindowPos
USER32.dll550RegisterWindowMessageA
USER32.dll664SystemParametersInfoA
USER32.dll422IsIconic
USER32.dll371GetWindowPlacement
USER32.dll372GetWindowRect
USER32.dll302GetMenuCheckMarkDimensions
USER32.dll439LoadBitmapA
USER32.dll311GetMenuState
USER32.dll486ModifyMenuA
USER32.dll608SetMenuItemBitmaps
USER32.dll57CheckMenuItem
USER32.dll194EnableMenuItem
USER32.dll278GetFocus
USER32.dll323GetNextDlgTabItem
USER32.dll161DispatchMessageA
USER32.dll289GetKeyState
USER32.dll26CallNextHookEx
USER32.dll649SetWindowsHookExA
USER32.dll685UnhookWindowsHookEx
USER32.dll325GetParent
USER32.dll296GetLastActivePopup
USER32.dll430IsWindowEnabled
USER32.dll366GetWindowLongA
USER32.dll478MessageBoxA
USER32.dll196EnableWindow
USER32.dll458LoadStringA
USER32.dll349GetSystemMetrics
USER32.dll52CharUpperA
USER32.dll492MsgWaitForMultipleObjects
USER32.dll511PeekMessageA
USER32.dll314GetMessageA
USER32.dll516PostThreadMessageA
USER32.dll447LoadImageA
USER32.dll570SendMessageA
USER32.dll725wsprintfA
USER32.dll227FindWindowA
USER32.dll74CopyRect
USER32.dll307GetMenuItemID
GDI32.dll555SetMapMode
GDI32.dll575SetViewportOrgEx
GDI32.dll469OffsetViewportOrgEx
GDI32.dll574SetViewportExtEx
GDI32.dll520ScaleViewportExtEx
GDI32.dll578SetWindowExtEx
GDI32.dll521ScaleWindowExtEx
GDI32.dll497PtVisible
GDI32.dll501RectVisible
GDI32.dll590TextOutA
GDI32.dll221ExtTextOutA
GDI32.dll212Escape
GDI32.dll421GetStockObject
GDI32.dll526SelectObject
GDI32.dll512RestoreDC
GDI32.dll519SaveDC
GDI32.dll140DeleteDC
GDI32.dll143DeleteObject
GDI32.dll363GetDeviceCaps
GDI32.dll405GetObjectA
GDI32.dll533SetBkColor
GDI32.dll572SetTextColor
GDI32.dll352GetClipBox
GDI32.dll39CreateBitmap
comdlg32.dll7GetFileTitleA
WINSPOOL.DRV27ClosePrinter
WINSPOOL.DRV70DocumentPropertiesA
WINSPOOL.DRV125OpenPrinterA
ADVAPI32.dll574StartServiceA
ADVAPI32.dll461RegCreateKeyExA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll62CloseServiceHandle
ADVAPI32.dll521ReportEventA
ADVAPI32.dll176DeregisterEventSource
ADVAPI32.dll492RegQueryValueExA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll466RegDeleteValueA
ADVAPI32.dll457RegCloseKey
ADVAPI32.dll487RegQueryInfoKeyA
ADVAPI32.dll469RegEnumKeyA
ADVAPI32.dll464RegDeleteKeyA
ADVAPI32.dll429OpenServiceA
ADVAPI32.dll427OpenSCManagerA
ADVAPI32.dll66ControlService
ADVAPI32.dll100CreateServiceA
ADVAPI32.dll175DeleteService
ADVAPI32.dll510RegisterEventSourceA
COMCTL32.dll17
WSOCK32.dll19
WSOCK32.dll8
WSOCK32.dll11
WSOCK32.dll10
WSOCK32.dll9
WSOCK32.dll15
WSOCK32.dll14
WSOCK32.dll116
WSOCK32.dll115
WSOCK32.dll3
WSOCK32.dll111
WSOCK32.dll23
WSOCK32.dll51
WSOCK32.dll13
WSOCK32.dll1
WSOCK32.dll4
WSOCK32.dll2
WSOCK32.dll16
WSOCK32.dll17
WSOCK32.dll18
WSOCK32.dll20
WSOCK32.dll5
WSOCK32.dll6
WSOCK32.dll21
WSOCK32.dll7
WSOCK32.dll12
WSOCK32.dll52
WSOCK32.dll57
offsetsizetypecomment
01052672EXE01/05/2012 13:22:44#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK