filenamenews.exe
size492904 (0x78568)
md54294dfe2d03144e6e08159fa52e3eb82
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
93403512
1472992
1180472
10804711
480472
1197823
497823
10223
1181684
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x53418218
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x3000
SizeOfInitializedData0x7000
SizeOfUninitializedData0
AddressOfEntryPoint0x3630
BaseOfCode0x1000
BaseOfData0x4000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xb000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x28d60x3000R-X CODE
.rdata0x40000x175e0x2000R-- IDATA
.data0x60000x4600x1000RW- IDATA
.rsrc0x70000x303c0x4000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x4d800xa0
RESOURCE0x70000x303c
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x40000x35c
Delay_IAT00
CLR_Header00
typenamesizecp
PNG#13340711252
PNG#14110281252
PNG#14220901252
ICON#142641252
DIALOG#100321252
DIALOG#102901252
DIALOG#1351061252
STRING#7641252
GROUP_ICON#1201252
idlangstring
1012052关于 GDIPNG(&A)...
module_namehintordfunction_name
MFC42u.DLL2971
MFC42u.DLL3825
MFC42u.DLL3826
MFC42u.DLL3820
MFC42u.DLL3074
MFC42u.DLL4075
MFC42u.DLL4616
MFC42u.DLL4418
MFC42u.DLL3733
MFC42u.DLL561
MFC42u.DLL825
MFC42u.DLL815
MFC42u.DLL641
MFC42u.DLL2506
MFC42u.DLL823
MFC42u.DLL2613
MFC42u.DLL1131
MFC42u.DLL3948
MFC42u.DLL2717
MFC42u.DLL5261
MFC42u.DLL4370
MFC42u.DLL4847
MFC42u.DLL4992
MFC42u.DLL4704
MFC42u.DLL6048
MFC42u.DLL4073
MFC42u.DLL1767
MFC42u.DLL4401
MFC42u.DLL5237
MFC42u.DLL2377
MFC42u.DLL5157
MFC42u.DLL6370
MFC42u.DLL4347
MFC42u.DLL5276
MFC42u.DLL3793
MFC42u.DLL4831
MFC42u.DLL4435
MFC42u.DLL2640
MFC42u.DLL2047
MFC42u.DLL6372
MFC42u.DLL3744
MFC42u.DLL5059
MFC42u.DLL1720
MFC42u.DLL5257
MFC42u.DLL2438
MFC42u.DLL2116
MFC42u.DLL3076
MFC42u.DLL4621
MFC42u.DLL4419
MFC42u.DLL3592
MFC42u.DLL324
MFC42u.DLL4229
MFC42u.DLL1143
MFC42u.DLL1165
MFC42u.DLL2294
MFC42u.DLL4294
MFC42u.DLL6871
MFC42u.DLL3087
MFC42u.DLL800
MFC42u.DLL4155
MFC42u.DLL540
MFC42u.DLL2858
MFC42u.DLL2371
MFC42u.DLL2854
MFC42u.DLL755
MFC42u.DLL470
MFC42u.DLL6451
MFC42u.DLL4532
MFC42u.DLL2567
MFC42u.DLL3397
MFC42u.DLL3568
MFC42u.DLL3688
MFC42u.DLL6051
MFC42u.DLL1768
MFC42u.DLL4390
MFC42u.DLL5286
MFC42u.DLL3569
MFC42u.DLL609
MFC42u.DLL1634
MFC42u.DLL567
MFC42u.DLL3621
MFC42u.DLL3658
MFC42u.DLL2406
MFC42u.DLL4270
MFC42u.DLL4279
MFC42u.DLL2859
MFC42u.DLL5871
MFC42u.DLL5783
MFC42u.DLL5784
MFC42u.DLL4128
MFC42u.DLL4292
MFC42u.DLL2855
MFC42u.DLL2980
MFC42u.DLL3257
MFC42u.DLL3131
MFC42u.DLL4459
MFC42u.DLL3254
MFC42u.DLL3142
MFC42u.DLL2977
MFC42u.DLL5710
MFC42u.DLL5285
MFC42u.DLL5303
MFC42u.DLL4692
MFC42u.DLL4074
MFC42u.DLL5298
MFC42u.DLL5296
MFC42u.DLL3341
MFC42u.DLL2388
MFC42u.DLL5193
MFC42u.DLL1089
MFC42u.DLL3917
MFC42u.DLL5727
MFC42u.DLL2504
MFC42u.DLL2546
MFC42u.DLL4480
MFC42u.DLL6371
MFC42u.DLL4269
MFC42u.DLL5273
MFC42u.DLL4667
MFC42u.DLL1569
MSVCRT.dll183_controlfp
MSVCRT.dll46void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCRT.dll390_onexit
MSVCRT.dll85__dllonexit
MSVCRT.dll202_except_handler3
MSVCRT.dll129__set_app_type
MSVCRT.dll111__p__fmode
MSVCRT.dll106__p__commode
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll131__setusermatherr
MSVCRT.dll271_initterm
MSVCRT.dll139__wgetmainargs
MSVCRT.dll487_wcmdln
MSVCRT.dll72_XcptFilter
MSVCRT.dll588fclose
MSVCRT.dll605fread
MSVCRT.dll682rewind
MSVCRT.dll612ftell
MSVCRT.dll610fseek
MSVCRT.dll515_wfopen
MSVCRT.dll599fopen
MSVCRT.dll694strcat
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll585exit
MSVCRT.dll211_exit
KERNEL32.dll386GetModuleHandleW
KERNEL32.dll973lstrlenW
KERNEL32.dll597LoadLibraryW
KERNEL32.dll83CreateFileA
KERNEL32.dll416GetProcAddress
KERNEL32.dll440GetStartupInfoW
KERNEL32.dll86CreateFileW
KERNEL32.dll382GetModuleFileNameW
USER32.dll666SystemParametersInfoW
USER32.dll196EnableWindow
USER32.dll515PostMessageW
USER32.dll325GetParent
USER32.dll403InvalidateRect
USER32.dll187DrawStateW
USER32.dll394InflateRect
USER32.dll378GetWindowTextW
USER32.dll74CopyRect
USER32.dll226FillRect
USER32.dll620SetRect
USER32.dll179DrawFocusRect
USER32.dll349GetSystemMetrics
USER32.dll255GetClientRect
USER32.dll182DrawIcon
USER32.dll268GetDC
USER32.dll367GetWindowLongW
USER32.dll641SetWindowLongW
USER32.dll554ReleaseDC
USER32.dll348GetSystemMenu
USER32.dll9AppendMenuW
USER32.dll576SendMessageW
USER32.dll372GetWindowRect
USER32.dll447LoadIconW
USER32.dll422IsIconic
GDI32.dll437GetTextExtentPoint32W
GDI32.dll71CreatePen
GDI32.dll80CreateSolidBrush
GDI32.dll45CreateCompatibleDC
GDI32.dll44CreateCompatibleBitmap
GDI32.dll526SelectObject
GDI32.dll143DeleteObject
GDI32.dll140DeleteDC
GDI32.dll513RoundRect
COMCTL32.dll108_TrackMouseEvent
gdiplus.dll45GdipCloneBrush
gdiplus.dll607GdiplusShutdown
gdiplus.dll134GdipDeleteGraphics
gdiplus.dll133GdipDeleteFontFamily
gdiplus.dll132GdipDeleteFont
gdiplus.dll129GdipDeleteBrush
gdiplus.dll454GdipReleaseDC
gdiplus.dll575GdipSetTextRenderingHint
gdiplus.dll77GdipCreateFont
gdiplus.dll78GdipCreateFontFamilyFromName
gdiplus.dll165GdipDrawImageI
gdiplus.dll175GdipDrawImageRectRectI
gdiplus.dll82GdipCreateFromHDC
gdiplus.dll33GdipAlloc
gdiplus.dll608GdiplusStartup
gdiplus.dll224GdipFree
gdiplus.dll121GdipCreateSolidFill
gdiplus.dll189GdipDrawString
gdiplus.dll284GdipGetImageWidth
gdiplus.dll275GdipGetImageHeight
offsetsizetypecomment
045056EXE04/06/2014 16:34:32#
15c115HTM#
72404071PNG(470 x 320)#
82281028PNG(46 x 18)#
862c2090PNG(62 x 35)#
b000447848BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 492904 bytes (482 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK