iron.exe - SRWare Iron

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	iron.exe
size	1280512 (0x138a00)
md5	444cd2be9112f8319116caebde0300ff

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
149	30729	47
131	30729	250
188	30716	2
190	30716	2
1	0	349
185	30716	19
132	30729	354
146	30729	1
148	30729	1
151	0	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x506f7536
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0xb3000
SizeOfInitializedData	0x85600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x47475
BaseOfCode	0x1000
BaseOfData	0xb4000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x141000
SizeOfHeaders	0x400
CheckSum	0x13c506
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xb2fee	0xb3000	R-X CODE
.rdata	0xb4000	0x5be73	0x5c000	R-- IDATA
.data	0x110000	0x7d5c	0x2a00	RW- IDATA
.tls	0x118000	2	0x200	RW- IDATA
.rsrc	0x119000	0x1a724	0x1a800	R-- IDATA
.reloc	0x134000	0xc0b8	0xc200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x10fce0	0x193
IMPORT	0x10e7e0	0xa0
RESOURCE	0x119000	0x1a724
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x134000	0x797c
DEBUG	0xb4400	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x10c0b8	0x18
LOAD_CONFIG	0x10c070	0x40
Bound_IAT	0	0
IAT	0xb4000	0x37c
Delay_IAT	0x10e6fc	0x60
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x518000	0x518001	0x513cbc	0x4b43d8	0	0

show previews

type	name	size	cp
ICON	#1	1640	1252
ICON	#2	744	1252
ICON	#3	296	1252
ICON	#4	3752	1252
ICON	#5	2216	1252
ICON	#6	1384	1252
ICON	#7	80527	1252
ICON	#8	9640	1252
ICON	#9	4264	1252
ICON	#10	1128	1252
GROUP_ICON	IDR_MAINFRAME	146	1252
VERSION	#1	972	1252
MANIFEST	#1	845	1252

module_name	hint	function_name
SHLWAPI.dll	144	PathRemoveFileSpecW
SHLWAPI.dll	74	PathFileExistsW
KERNEL32.dll	320	EnterCriticalSection
KERNEL32.dll	957	LeaveCriticalSection
KERNEL32.dll	1301	SetInformationJobObject
KERNEL32.dll	1467	WaitForSingleObject
KERNEL32.dll	1055	PostQueuedCompletionStatus
KERNEL32.dll	1303	SetLastError
KERNEL32.dll	869	InitializeCriticalSection
KERNEL32.dll	1390	TerminateJobObject
KERNEL32.dll	552	GetCurrentThreadId
KERNEL32.dll	1436	UnregisterWaitEx
KERNEL32.dll	286	DeleteCriticalSection
KERNEL32.dll	1276	SetEvent
KERNEL32.dll	720	GetQueuedCompletionStatus
KERNEL32.dll	1198	ResetEvent
KERNEL32.dll	1169	RegisterWaitForSingleObject
KERNEL32.dll	313	DuplicateHandle
KERNEL32.dll	700	GetProcessId
KERNEL32.dll	257	CreateThread
KERNEL32.dll	202	CreateEventW
KERNEL32.dll	219	CreateIoCompletionPort
KERNEL32.dll	878	InterlockedExchange
KERNEL32.dll	1373	SignalObjectAndWait
KERNEL32.dll	1300	SetHandleInformation
KERNEL32.dll	697	GetProcessHandleCount
KERNEL32.dll	1454	VirtualFree
KERNEL32.dll	973	LocalFree
KERNEL32.dll	1205	ResumeThread
KERNEL32.dll	440	FreeLibrary
KERNEL32.dll	1530	WriteProcessMemory
KERNEL32.dll	1452	VirtualAllocEx
KERNEL32.dll	1460	VirtualQueryEx
KERNEL32.dll	770	GetThreadContext
KERNEL32.dll	45	AssignProcessToJobObject
KERNEL32.dll	581	GetExitCodeProcess
KERNEL32.dll	987	MapViewOfFile
KERNEL32.dll	211	CreateFileMappingW
KERNEL32.dll	881	InterlockedIncrement
KERNEL32.dll	877	InterlockedDecrement
KERNEL32.dll	1458	VirtualProtectEx
KERNEL32.dll	631	GetLongPathNameW
KERNEL32.dll	590	GetFileAttributesW
KERNEL32.dll	214	CreateFileW
KERNEL32.dll	1077	QueryDosDeviceW
KERNEL32.dll	1455	VirtualFreeEx
KERNEL32.dll	221	CreateJobObjectW
KERNEL32.dll	229	CreateMutexW
KERNEL32.dll	548	GetCurrentProcessId
KERNEL32.dll	1032	OpenProcess
KERNEL32.dll	231	CreateNamedPipeW
KERNEL32.dll	1020	OpenEventW
KERNEL32.dll	1215	SearchPathW
KERNEL32.dll	541	GetCurrentDirectoryW
KERNEL32.dll	276	DebugBreak
KERNEL32.dll	1565	lstrlenW
KERNEL32.dll	1459	VirtualQuery
KERNEL32.dll	1115	ReadProcessMemory
KERNEL32.dll	1384	SuspendThread
KERNEL32.dll	1179	ReleaseSemaphore
KERNEL32.dll	1206	RtlCaptureContext
KERNEL32.dll	245	CreateSemaphoreW
KERNEL32.dll	1474	WaitNamedPipeW
KERNEL32.dll	1465	WaitForMultipleObjects
KERNEL32.dll	1521	WriteFile
KERNEL32.dll	1414	TransactNamedPipe
KERNEL32.dll	1312	SetNamedPipeHandleState
KERNEL32.dll	369	ExpandEnvironmentStringsW
KERNEL32.dll	1274	SetEnvironmentVariableW
KERNEL32.dll	1175	ReleaseMutex
KERNEL32.dll	1288	SetFilePointer
KERNEL32.dll	1044	OutputDebugStringA
KERNEL32.dll	435	FormatMessageA
KERNEL32.dll	795	GetUserDefaultLangID
KERNEL32.dll	1004	MultiByteToWideChar
KERNEL32.dll	1501	WideCharToMultiByte
KERNEL32.dll	654	GetNativeSystemInfo
KERNEL32.dll	803	GetVersionExW
KERNEL32.dll	1096	RaiseException
KERNEL32.dll	899	IsDebuggerPresent
KERNEL32.dll	870	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	879	InterlockedExchangeAdd
KERNEL32.dll	1207	RtlCaptureStackBackTrace
KERNEL32.dll	1411	TlsGetValue
KERNEL32.dll	1410	TlsFree
KERNEL32.dll	784	GetTickCount
KERNEL32.dll	1409	TlsAlloc
KERNEL32.dll	733	GetStdHandle
KERNEL32.dll	750	GetSystemInfo
KERNEL32.dll	1112	ReadFile
KERNEL32.dll	756	GetSystemTimeAsFileTime
KERNEL32.dll	1084	QueryPerformanceCounter
KERNEL32.dll	1085	QueryPerformanceFrequency
KERNEL32.dll	1451	VirtualAlloc
KERNEL32.dll	1374	SizeofResource
KERNEL32.dll	984	LockResource
KERNEL32.dll	966	LoadResource
KERNEL32.dll	420	FindResourceW
KERNEL32.dll	1424	UnhandledExceptionFilter
KERNEL32.dll	849	HeapFree
KERNEL32.dll	365	ExitProcess
KERNEL32.dll	727	GetStartupInfoW
KERNEL32.dll	960	LoadLibraryA
KERNEL32.dll	845	HeapAlloc
KERNEL32.dll	502	GetConsoleCP
KERNEL32.dll	520	GetConsoleMode
KERNEL32.dll	852	HeapReAlloc
KERNEL32.dll	1327	SetStdHandle
KERNEL32.dll	599	GetFileType
KERNEL32.dll	943	LCMapStringA
KERNEL32.dll	945	LCMapStringW
KERNEL32.dll	461	GetCPInfo
KERNEL32.dll	1210	RtlUnwind
KERNEL32.dll	738	GetStringTypeW
KERNEL32.dll	847	HeapCreate
KERNEL32.dll	636	GetModuleFileNameA
KERNEL32.dll	439	FreeEnvironmentStringsW
KERNEL32.dll	576	GetEnvironmentStringsW
KERNEL32.dll	1299	SetHandleCount
KERNEL32.dll	726	GetStartupInfoA
KERNEL32.dll	854	HeapSize
KERNEL32.dll	446	GetACP
KERNEL32.dll	672	GetOEMCP
KERNEL32.dll	909	IsValidCodePage
KERNEL32.dll	791	GetTimeZoneInformation
KERNEL32.dll	1510	WriteConsoleA
KERNEL32.dll	524	GetConsoleOutputCP
KERNEL32.dll	1520	WriteConsoleW
KERNEL32.dll	429	FlushFileBuffers
KERNEL32.dll	620	GetLocaleInfoA
KERNEL32.dll	735	GetStringTypeA
KERNEL32.dll	794	GetUserDefaultLCID
KERNEL32.dll	351	EnumSystemLocalesA
KERNEL32.dll	911	IsValidLocale
KERNEL32.dll	622	GetLocaleInfoW
KERNEL32.dll	206	CreateFileA
KERNEL32.dll	164	CompareStringA
KERNEL32.dll	167	CompareStringW
KERNEL32.dll	1427	UnmapViewOfFile
KERNEL32.dll	641	GetModuleHandleW
KERNEL32.dll	1270	SetEndOfFile
KERNEL32.dll	797	GetUserDefaultUILanguage
KERNEL32.dll	747	GetSystemDirectoryW
KERNEL32.dll	814	GetWindowsDirectoryW
KERNEL32.dll	969	LocalAlloc
KERNEL32.dll	698	GetProcessHeap
KERNEL32.dll	777	GetThreadLocale
KERNEL32.dll	638	GetModuleHandleA
KERNEL32.dll	1263	SetCurrentDirectoryW
KERNEL32.dll	962	LoadLibraryExW
KERNEL32.dll	577	GetEnvironmentVariableA
KERNEL32.dll	1273	SetEnvironmentVariableA
KERNEL32.dll	963	LoadLibraryW
KERNEL32.dll	693	GetProcAddress
KERNEL32.dll	637	GetModuleFileNameW
KERNEL32.dll	769	GetTempPathW
KERNEL32.dll	578	GetEnvironmentVariableW
KERNEL32.dll	483	GetCommandLineW
KERNEL32.dll	239	CreateProcessW
KERNEL32.dll	142	CloseHandle
KERNEL32.dll	618	GetLastError
KERNEL32.dll	1360	SetUnhandledExceptionFilter
KERNEL32.dll	547	GetCurrentProcess
KERNEL32.dll	1391	TerminateProcess
KERNEL32.dll	875	InterlockedCompareExchange
KERNEL32.dll	1375	Sleep
KERNEL32.dll	240	CreateRemoteThread
KERNEL32.dll	1412	TlsSetValue
USER32.dll	60	CharUpperW
USER32.dll	439	GetUserObjectInformationW
USER32.dll	429	GetThreadDesktop
USER32.dll	747	SetProcessWindowStation
USER32.dll	97	CreateDesktopW
USER32.dll	402	GetProcessWindowStation
USER32.dll	117	CreateWindowStationW
USER32.dll	76	CloseDesktop
USER32.dll	80	CloseWindowStation
USER32.dll	587	MessageBoxW
USERENV.dll	34	GetProfileType
VERSION.dll	7	GetFileVersionInfoSizeW
VERSION.dll	16	VerQueryValueW
VERSION.dll	8	GetFileVersionInfoW
WINMM.dll	148	timeGetTime
ADVAPI32.dll	397	InitializeSecurityDescriptor
ADVAPI32.dll	238	DuplicateToken
ADVAPI32.dll	239	DuplicateTokenEx
ADVAPI32.dll	142	CreateRestrictedToken
ADVAPI32.dll	609	RegCreateKeyExW
ADVAPI32.dll	530	OpenProcessToken
ADVAPI32.dll	139	CreateProcessAsUserW
ADVAPI32.dll	750	SetThreadToken
ADVAPI32.dll	131	ConvertStringSidToSidW
ADVAPI32.dll	330	GetLengthSid
ADVAPI32.dll	751	SetTokenInformation
ADVAPI32.dll	700	RevertToSelf
ADVAPI32.dll	625	RegDisablePredefinedCache
ADVAPI32.dll	649	RegOpenKeyExW
ADVAPI32.dll	600	RegCloseKey
ADVAPI32.dll	367	GetTokenInformation
ADVAPI32.dll	429	LookupPrivilegeValueW
ADVAPI32.dll	133	CopySid
ADVAPI32.dll	146	CreateWellKnownSid
ADVAPI32.dll	739	SetSecurityDescriptorDacl
ADVAPI32.dll	354	GetSecurityInfo
ADVAPI32.dll	723	SetEntriesInAclW
ADVAPI32.dll	662	RegQueryValueExW
ADVAPI32.dll	656	RegQueryInfoKeyW
ADVAPI32.dll	631	RegEnumKeyExW
ADVAPI32.dll	123	ConvertSidToStringSidW
ADVAPI32.dll	369	GetTraceEnableLevel
ADVAPI32.dll	368	GetTraceEnableFlags
ADVAPI32.dll	370	GetTraceLoggerHandle
ADVAPI32.dll	690	RegisterTraceGuidsW
ADVAPI32.dll	816	UnregisterTraceGuids
ADVAPI32.dll	801	TraceEvent
ADVAPI32.dll	280	EqualSid

ord	entry_va	function_name
1	0x1360	CrashForException
2	0x1240	DumpProcess
3	0x1250	DumpProcessWithoutCrash
4	0x1280	InjectDumpProcessWithoutCrash
5	0x7270	SetActiveURL
6	0x19e0	SetClientId
7	0x4b70	SetCommandLine2
8	0xb010	SetExperimentList2
9	0x7450	SetExtensionID
10	0x1a30	SetGpuInfo
11	0x3330	SetNumberOfExtensions
12	0x3350	SetNumberOfViews
13	0x9420	SetPrinterInfo

module_name	iron.exe
flags	0
timestamp	2012-10-06 00:03:02
version	0.0
ordinal_base	1
nFunctions	13
nNames	13
Names(13)	0x10fd3c
Functions(13)	0x10fd08
NameOrdinals(13)	0x10fd70

StringTable 040904b0

CompanyName	SRWare
FileDescription	SRWare Iron
FileVersion	22.0.1250.0
InternalName	Iron
LegalCopyright	Copyright (C) 2006-2009 The Chromium Authors. All Rights Reserved.
OriginalFilename	iron.exe
ProductName	SRWare Iron
ProductVersion	22.0.1250.0
CompanyShortName	SRWare
ProductShortName	Iron
LastChange	160000
Official Build	1

VS_FIXEDFILEINFO

FileVersion	22.0.1250.0
ProductVersion	22.0.1250.0
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	1280512	EXE	10/06/2012 00:03:02	#
15c1	15	HTM		#
114a2c	80527	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x113cbc

iron.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

iron.exe
-