filename | 3cbf18fee357d5a33aab56795238b097 | |
---|---|---|
size | 700416 (0xab000) | |
md5 | 3cbf18fee357d5a33aab56795238b097 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | Win.Trojan.Zbot-58359 FOUND | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe8 |
Rich Header
lib id | version | times used |
---|---|---|
95 | 4035 | 6 |
93 | 4035 | 23 |
1 | 0 | 482 |
125 | 50727 | 25 |
109 | 50727 | 136 |
110 | 50727 | 114 |
114 | 50727 | 1 |
124 | 50727 | 1 |
120 | 50727 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x4d1da | 0x4e000 | R-X CODE | |
.rdata | 0x4f000 | 0x3e1f8 | 0x3f000 | R-- IDATA | |
.data | 0x8e000 | 0x228d4 | 0x1c000 | RW- IDATA | |
.rsrc | 0xb1000 | 0x568 | 0x1000 | R-- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x8bdb0 | 0x8c | |
RESOURCE | 0xb1000 | 0x568 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0x89b10 | 0x40 | |
Bound_IAT | 0 | 0 | |
IAT | 0x4f000 | 0x3d0 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.dll | 90 | CreateFileA | |
KERNEL32.dll | 550 | HeapReAlloc | |
KERNEL32.dll | 573 | HeapAlloc | |
KERNEL32.dll | 566 | HeapFree | |
KERNEL32.dll | 983 | VirtualAlloc | |
KERNEL32.dll | 361 | GetCommandLineA | |
KERNEL32.dll | 512 | GetProcessHeap | |
KERNEL32.dll | 529 | GetStartupInfoA | |
KERNEL32.dll | 773 | RaiseException | |
KERNEL32.dll | 802 | RtlUnwind | |
KERNEL32.dll | 609 | HeapSize | |
KERNEL32.dll | 258 | ExitProcess | |
KERNEL32.dll | 590 | HeapDestroy | |
KERNEL32.dll | 622 | HeapCreate | |
KERNEL32.dll | 941 | VirtualFree | |
KERNEL32.dll | 889 | TerminateProcess | |
KERNEL32.dll | 920 | UnhandledExceptionFilter | |
KERNEL32.dll | 937 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 497 | GetStdHandle | |
KERNEL32.dll | 287 | FreeEnvironmentStringsA | |
KERNEL32.dll | 410 | GetEnvironmentStrings | |
KERNEL32.dll | 268 | FreeEnvironmentStringsW | |
KERNEL32.dll | 390 | GetEnvironmentStringsW | |
KERNEL32.dll | 817 | SetHandleCount | |
KERNEL32.dll | 425 | GetFileType | |
KERNEL32.dll | 722 | QueryPerformanceCounter | |
KERNEL32.dll | 511 | GetTickCount | |
KERNEL32.dll | 554 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 865 | Sleep | |
KERNEL32.dll | 348 | GetACP | |
KERNEL32.dll | 630 | IsValidCodePage | |
KERNEL32.dll | 368 | GetConsoleCP | |
KERNEL32.dll | 350 | GetConsoleMode | |
KERNEL32.dll | 661 | LCMapStringA | |
KERNEL32.dll | 590 | LCMapStringW | |
KERNEL32.dll | 456 | GetStringTypeA | |
KERNEL32.dll | 477 | GetStringTypeW | |
KERNEL32.dll | 859 | SetStdHandle | |
KERNEL32.dll | 947 | WriteConsoleA | |
KERNEL32.dll | 390 | GetConsoleOutputCP | |
KERNEL32.dll | 1014 | WriteConsoleW | |
KERNEL32.dll | 324 | GetCurrentProcess | |
KERNEL32.dll | 292 | FlushFileBuffers | |
KERNEL32.dll | 854 | SetFilePointer | |
KERNEL32.dll | 970 | WriteFile | |
KERNEL32.dll | 446 | GetOEMCP | |
KERNEL32.dll | 354 | GetCPInfo | |
KERNEL32.dll | 398 | GetLocaleInfoA | |
KERNEL32.dll | 577 | GlobalAddAtomA | |
KERNEL32.dll | 556 | GlobalFindAtomA | |
KERNEL32.dll | 545 | GlobalDeleteAtom | |
KERNEL32.dll | 647 | LoadLibraryA | |
KERNEL32.dll | 1027 | lstrcmpW | |
KERNEL32.dll | 578 | GetVersionExA | |
KERNEL32.dll | 558 | GetThreadLocale | |
KERNEL32.dll | 606 | GlobalGetAtomNameA | |
KERNEL32.dll | 593 | GlobalFlags | |
KERNEL32.dll | 1057 | lstrcmpA | |
KERNEL32.dll | 361 | GetCurrentThreadId | |
KERNEL32.dll | 119 | CloseHandle | |
KERNEL32.dll | 573 | InterlockedIncrement | |
KERNEL32.dll | 274 | FreeLibrary | |
KERNEL32.dll | 554 | InterlockedDecrement | |
KERNEL32.dll | 478 | GetModuleHandleA | |
KERNEL32.dll | 876 | TlsFree | |
KERNEL32.dll | 200 | DeleteCriticalSection | |
KERNEL32.dll | 695 | LocalReAlloc | |
KERNEL32.dll | 899 | TlsSetValue | |
KERNEL32.dll | 910 | TlsAlloc | |
KERNEL32.dll | 645 | InitializeCriticalSection | |
KERNEL32.dll | 595 | GlobalHandle | |
KERNEL32.dll | 535 | GlobalReAlloc | |
KERNEL32.dll | 167 | EnterCriticalSection | |
KERNEL32.dll | 934 | TlsGetValue | |
KERNEL32.dll | 633 | LeaveCriticalSection | |
KERNEL32.dll | 629 | LocalAlloc | |
KERNEL32.dll | 335 | GetCurrentProcessId | |
KERNEL32.dll | 459 | GetModuleFileNameA | |
KERNEL32.dll | 601 | GlobalFree | |
KERNEL32.dll | 509 | GlobalAlloc | |
KERNEL32.dll | 537 | GlobalLock | |
KERNEL32.dll | 603 | GlobalUnlock | |
KERNEL32.dll | 266 | FormatMessageA | |
KERNEL32.dll | 657 | LocalFree | |
KERNEL32.dll | 250 | FindResourceA | |
KERNEL32.dll | 604 | LoadResource | |
KERNEL32.dll | 619 | LockResource | |
KERNEL32.dll | 893 | SizeofResource | |
KERNEL32.dll | 856 | SetLastError | |
KERNEL32.dll | 632 | InterlockedExchange | |
KERNEL32.dll | 640 | MultiByteToWideChar | |
KERNEL32.dll | 936 | WideCharToMultiByte | |
KERNEL32.dll | 534 | GetSystemDefaultLangID | |
KERNEL32.dll | 1013 | lstrlenA | |
KERNEL32.dll | 247 | FileTimeToSystemTime | |
KERNEL32.dll | 93 | CompareStringA | |
KERNEL32.dll | 621 | LoadLibraryExA | |
KERNEL32.dll | 695 | PrepareTape | |
KERNEL32.dll | 119 | CreateEventA | |
KERNEL32.dll | 449 | GetProcAddress | |
KERNEL32.dll | 442 | GetLastError | |
KERNEL32.dll | 610 | IsDebuggerPresent | |
KERNEL32.dll | 571 | GetVersion | |
USER32.dll | 643 | SetForegroundWindow | |
USER32.dll | 336 | GetClientRect | |
USER32.dll | 319 | GetMenu | |
USER32.dll | 594 | PostMessageA | |
USER32.dll | 293 | GetClassInfoExA | |
USER32.dll | 259 | GetClassInfoA | |
USER32.dll | 560 | RegisterClassA | |
USER32.dll | 68 | AdjustWindowRectEx | |
USER32.dll | 156 | CopyRect | |
USER32.dll | 206 | DefWindowProcA | |
USER32.dll | 102 | CallWindowProcA | |
USER32.dll | 724 | SetWindowLongA | |
USER32.dll | 703 | SystemParametersInfoA | |
USER32.dll | 446 | GetWindowPlacement | |
USER32.dll | 695 | SetMenuItemBitmaps | |
USER32.dll | 387 | GetMenuCheckMarkDimensions | |
USER32.dll | 546 | ModifyMenuA | |
USER32.dll | 252 | EnableMenuItem | |
USER32.dll | 84 | CheckMenuItem | |
USER32.dll | 361 | GetFocus | |
USER32.dll | 70 | ClientToScreen | |
USER32.dll | 449 | GetWindow | |
USER32.dll | 346 | GetDlgCtrlID | |
USER32.dll | 402 | GetWindowRect | |
USER32.dll | 551 | PtInRect | |
USER32.dll | 726 | UnregisterClassA | |
USER32.dll | 736 | SetWindowsHookExA | |
USER32.dll | 85 | CallNextHookEx | |
USER32.dll | 223 | DispatchMessageA | |
USER32.dll | 329 | GetKeyState | |
USER32.dll | 545 | PeekMessageA | |
USER32.dll | 757 | ValidateRect | |
USER32.dll | 476 | LoadCursorA | |
USER32.dll | 432 | GetSystemMetrics | |
USER32.dll | 421 | GetSysColor | |
USER32.dll | 755 | UnhookWindowsHookEx | |
USER32.dll | 432 | GetWindowThreadProcessId | |
USER32.dll | 610 | SendMessageA | |
USER32.dll | 345 | GetParent | |
USER32.dll | 417 | GetWindowLongA | |
USER32.dll | 393 | GetLastActivePopup | |
USER32.dll | 528 | IsWindowEnabled | |
USER32.dll | 262 | EnableWindow | |
USER32.dll | 518 | MessageBoxA | |
USER32.dll | 394 | GetMenuState | |
USER32.dll | 329 | GetMenuItemID | |
USER32.dll | 358 | GetMenuItemCount | |
USER32.dll | 429 | GetSubMenu | |
USER32.dll | 683 | SetDlgItemInt | |
USER32.dll | 225 | EndDialog | |
USER32.dll | 669 | SetWindowPos | |
USER32.dll | 433 | IsDialogMessageA | |
USER32.dll | 371 | GetMessageA | |
USER32.dll | 747 | UpdateWindow | |
USER32.dll | 631 | SendMessageTimeoutA | |
USER32.dll | 319 | GetClassNameA | |
USER32.dll | 302 | GetDlgItemInt | |
USER32.dll | 529 | LoadBitmapA | |
USER32.dll | 140 | CheckDlgButton | |
USER32.dll | 636 | ReleaseCapture | |
USER32.dll | 428 | InsertMenuItemA | |
USER32.dll | 271 | GetAsyncKeyState | |
USER32.dll | 769 | WinHelpA | |
USER32.dll | 154 | CloseClipboard | |
USER32.dll | 432 | GetScrollRange | |
USER32.dll | 419 | GetWindowTextA | |
USER32.dll | 478 | GrayStringA | |
USER32.dll | 230 | DrawTextExA | |
USER32.dll | 258 | DrawTextA | |
USER32.dll | 552 | OffsetRect | |
USER32.dll | 378 | GetIconInfo | |
USER32.dll | 719 | ShowWindow | |
USER32.dll | 340 | GetMessagePos | |
USER32.dll | 680 | SetWindowTextA | |
USER32.dll | 311 | GetDC | |
USER32.dll | 272 | FindWindowA | |
USER32.dll | 486 | LoadIconA | |
USER32.dll | 622 | SetCursor | |
USER32.dll | 124 | CreateWindowExA | |
USER32.dll | 259 | EnumChildWindows | |
USER32.dll | 611 | PostQuitMessage | |
USER32.dll | 430 | GetSysColorBrush | |
USER32.dll | 685 | TabbedTextOutA | |
USER32.dll | 165 | DestroyMenu | |
USER32.dll | 635 | RegisterWindowMessageA | |
USER32.dll | 306 | GetCapture | |
USER32.dll | 279 | GetClassLongA | |
USER32.dll | 691 | SetPropA | |
USER32.dll | 353 | GetPropA | |
USER32.dll | 615 | RemovePropA | |
USER32.dll | 474 | IsWindow | |
USER32.dll | 369 | GetForegroundWindow | |
USER32.dll | 301 | GetDlgItem | |
USER32.dll | 444 | GetTopWindow | |
USER32.dll | 214 | DestroyWindow | |
USER32.dll | 414 | GetMessageTime | |
USER32.dll | 512 | MapWindowPoints | |
USER32.dll | 554 | ReleaseDC | |
USER32.dll | 423 | IsIconic | |
GDI32.dll | 292 | ExtTextOutA | |
GDI32.dll | 616 | SaveDC | |
GDI32.dll | 592 | RestoreDC | |
GDI32.dll | 528 | GetTextExtentPoint32A | |
GDI32.dll | 562 | SetMapMode | |
GDI32.dll | 556 | PtVisible | |
GDI32.dll | 503 | RectVisible | |
GDI32.dll | 640 | TextOutA | |
GDI32.dll | 528 | SelectObject | |
GDI32.dll | 616 | SetViewportOrgEx | |
GDI32.dll | 509 | OffsetViewportOrgEx | |
GDI32.dll | 614 | SetViewportExtEx | |
GDI32.dll | 564 | ScaleViewportExtEx | |
GDI32.dll | 650 | SetWindowExtEx | |
GDI32.dll | 591 | ScaleWindowExtEx | |
GDI32.dll | 235 | DeleteDC | |
GDI32.dll | 445 | GetStockObject | |
GDI32.dll | 607 | SetBkColor | |
GDI32.dll | 668 | SetTextColor | |
GDI32.dll | 380 | GetClipBox | |
GDI32.dll | 90 | CreateBitmap | |
GDI32.dll | 168 | DeleteObject | |
GDI32.dll | 241 | Escape | |
GDI32.dll | 600 | SetPixel | |
GDI32.dll | 684 | StretchBlt | |
GDI32.dll | 503 | PatBlt | |
GDI32.dll | 80 | CreateCompatibleBitmap | |
GDI32.dll | 413 | GetDeviceCaps | |
WINSPOOL.DRV | 93 | ClosePrinter | |
WINSPOOL.DRV | 110 | DocumentPropertiesA | |
WINSPOOL.DRV | 126 | OpenPrinterA | |
OLEAUT32.dll | 12 | ||
OLEAUT32.dll | 9 | ||
OLEAUT32.dll | 8 | ||
OLEACC.dll | 75 | LresultFromObject | |
OLEACC.dll | 80 | CreateStdAccessibleObject |
StringTable 040904E4
CompanyName | Omatic Software |
FileDescription | Speedoil |
FileVersion | 14.6.248.551 |
InternalName | weboat.exe |
LegalTrademarks | Copyright (C) 2014 Omatic Software Inc. All rights reserved. |
OriginalFilename | weboat.exe |
ProductName | Speedoil Omatic Software se |
VS_FIXEDFILEINFO
FileVersion | 14.6.248.551 |
ProductVersion | 14.6.248.551 |
StrucVersion | 0x10000 |
FileFlagsMask | 0 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK