filenameNtuucode.exe
size30992 (0x7910)
md54865163bb05556109e0d8207da84d04d
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xc8

Rich Header

lib idversiontimes used
2727435
109
1981527
619661
00233

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x36c5da49
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion5.12
SizeOfCode0x4c00
SizeOfInitializedData0x2600
SizeOfUninitializedData0
AddressOfEntryPoint0x4750
BaseOfCode0x1000
BaseOfData0x6000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion5.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xa000
SizeOfHeaders0x600
CheckSum0x149a8
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++

Sections

namevavsizeraw sizeflags
.text0x10000x4ba00x4c00R-X CODE
.data0x60000x3600x400RW- IDATA
.rsrc0x70000x21780x2200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x54b00x78
RESOURCE0x70000x2178
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x14100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x404
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#211840
ICON#17440
MENU#25420
DIALOG#1003900
DIALOG#1018820
STRING#1480
STRING#20493100
STRING#3585580
STRING#36012960
STRING#36021760
STRING#36036640
STRING#36052400
STRING#36061700
STRING#3697700
STRING#37131340
STRING#38255040
STRING#38261340
ACCELERATORS#21040
GROUP_ICON#2200
VERSION#16920
idlangstring
21033NTUUCODE
327681033Decode.
327691033If checked, the screen will clear after each decode.
327701033Checked if drive is NTFS
327711033(default) Checked if drive is FAT.
327731033Load the decoded file.
573441033NTUUCODE
573451033Ready
576001033Create a new document
576011033Open an existing encoded file.
576021033Close the active document
576031033Save the active document
576041033Save the encoded data as a file.
576161033Open this document
576171033Open this document
576181033Open this document
576191033Open this document
576321033Erase the selection
576331033Erase everything
576341033Copy the selection and put it on the Clipboard
576351033Cut the selection and put it on the Clipboard
576361033Find the specified text
576371033Insert Clipboard contents
576401033Repeat the last action
576411033Replace specific text with different text
576421033Select the entire document
576431033Undo the last action
576441033Redo the previously undone action
576641033Display program information, version number and copyright
576651033Quit the application; prompts to save documents
576801033Switch to the next window pane
576811033Switch back to the previous window pane
591361033EXT
591371033CAP
591381033NUM
591391033SCRL
591401033OVR
591411033REC
593921033Show or hide the toolbar
593931033Show or hide the status bar
611841033Change the window size
611851033Change the window position
611861033Reduce the window to an icon
611871033Enlarge the window to full size
611881033Switch to the next document window
611891033Switch to the previous document window
611901033Close the active window and prompts to save the documents
612021033Restore the window to normal size
612031033Activate Task List
module_namehintordfunction_name
SHELL32.dll38FindExecutableA
MFC42.DLL2512
MFC42.DLL5731
MFC42.DLL3922
MFC42.DLL2554
MFC42.DLL4486
MFC42.DLL1089
MFC42.DLL2396
MFC42.DLL3346
MFC42.DLL5300
MFC42.DLL5302
MFC42.DLL5199
MFC42.DLL4079
MFC42.DLL4698
MFC42.DLL2725
MFC42.DLL5289
MFC42.DLL5714
MFC42.DLL2982
MFC42.DLL3147
MFC42.DLL3259
MFC42.DLL4465
MFC42.DLL3136
MFC42.DLL3262
MFC42.DLL2985
MFC42.DLL5307
MFC42.DLL2976
MFC42.DLL3830
MFC42.DLL3831
MFC42.DLL3825
MFC42.DLL3079
MFC42.DLL3081
MFC42.DLL4622
MFC42.DLL4424
MFC42.DLL3738
MFC42.DLL561
MFC42.DLL825
MFC42.DLL815
MFC42.DLL986
MFC42.DLL520
MFC42.DLL823
MFC42.DLL4159
MFC42.DLL5943
MFC42.DLL5265
MFC42.DLL4376
MFC42.DLL4853
MFC42.DLL4998
MFC42.DLL4710
MFC42.DLL2514
MFC42.DLL6052
MFC42.DLL4078
MFC42.DLL4080
MFC42.DLL4407
MFC42.DLL5241
MFC42.DLL2385
MFC42.DLL5163
MFC42.DLL6374
MFC42.DLL4353
MFC42.DLL5280
MFC42.DLL3798
MFC42.DLL4837
MFC42.DLL4441
MFC42.DLL1775
MFC42.DLL2055
MFC42.DLL6376
MFC42.DLL3749
MFC42.DLL5065
MFC42.DLL1727
MFC42.DLL5261
MFC42.DLL2446
MFC42.DLL2124
MFC42.DLL5277
MFC42.DLL4627
MFC42.DLL4425
MFC42.DLL3597
MFC42.DLL324
MFC42.DLL641
MFC42.DLL4234
MFC42.DLL1842
MFC42.DLL4242
MFC42.DLL2723
MFC42.DLL2390
MFC42.DLL3059
MFC42.DLL5100
MFC42.DLL5103
MFC42.DLL4467
MFC42.DLL4303
MFC42.DLL3350
MFC42.DLL5012
MFC42.DLL975
MFC42.DLL5472
MFC42.DLL3403
MFC42.DLL2879
MFC42.DLL2878
MFC42.DLL4151
MFC42.DLL6055
MFC42.DLL4077
MFC42.DLL1776
MFC42.DLL5237
MFC42.DLL5282
MFC42.DLL2649
MFC42.DLL1665
MFC42.DLL2648
MFC42.DLL6375
MFC42.DLL4427
MFC42.DLL796
MFC42.DLL674
MFC42.DLL554
MFC42.DLL529
MFC42.DLL366
MFC42.DLL807
MFC42.DLL6000
MFC42.DLL2117
MFC42.DLL5883
MFC42.DLL4147
MFC42.DLL2120
MFC42.DLL4457
MFC42.DLL1825
MFC42.DLL4238
MFC42.DLL4696
MFC42.DLL3058
MFC42.DLL3065
MFC42.DLL6336
MFC42.DLL2510
MFC42.DLL4274
MFC42.DLL5243
MFC42.DLL5740
MFC42.DLL1746
MFC42.DLL5577
MFC42.DLL3172
MFC42.DLL5653
MFC42.DLL4420
MFC42.DLL4953
MFC42.DLL4858
MFC42.DLL2399
MFC42.DLL4387
MFC42.DLL3454
MFC42.DLL3198
MFC42.DLL6080
MFC42.DLL6175
MFC42.DLL4623
MFC42.DLL4426
MFC42.DLL652
MFC42.DLL540
MFC42.DLL338
MFC42.DLL800
MFC42.DLL4823
MFC42.DLL1830
MFC42.DLL4239
MFC42.DLL2400
MFC42.DLL5061
MFC42.DLL4938
MFC42.DLL4940
MFC42.DLL4629
MFC42.DLL4589
MFC42.DLL4586
MFC42.DLL4897
MFC42.DLL4368
MFC42.DLL4891
MFC42.DLL5076
MFC42.DLL4341
MFC42.DLL4349
MFC42.DLL4723
MFC42.DLL4886
MFC42.DLL4531
MFC42.DLL4545
MFC42.DLL4543
MFC42.DLL4526
MFC42.DLL4529
MFC42.DLL4524
MFC42.DLL4964
MFC42.DLL4961
MFC42.DLL4108
MFC42.DLL5240
MFC42.DLL5290
MFC42.DLL3748
MFC42.DLL1723
MFC42.DLL5251
MFC42.DLL4432
MFC42.DLL5817
MFC42.DLL344
MFC42.DLL657
MFC42.DLL665
MFC42.DLL603
MFC42.DLL926
MFC42.DLL924
MFC42.DLL922
MFC42.DLL537
MFC42.DLL6199
MFC42.DLL3499
MFC42.DLL2515
MFC42.DLL355
MFC42.DLL4224
MFC42.DLL1979
MFC42.DLL1969
MFC42.DLL5836
MFC42.DLL273
MFC42.DLL5186
MFC42.DLL354
MFC42.DLL860
MFC42.DLL3184
MFC42.DLL858
MFC42.DLL3177
MFC42.DLL2379
MFC42.DLL2370
MFC42.DLL6334
MFC42.DLL4610
MFC42.DLL4612
MFC42.DLL4436
MFC42.DLL5252
MFC42.DLL2542
MFC42.DLL1576
MFC42.DLL1168
MSVCRT.dll668putc
MSVCRT.dll706strstr
MSVCRT.dll599fputs
MSVCRT.dll701strncmp
MSVCRT.dll591fgets
MSVCRT.dll596fopen
MSVCRT.dll690sscanf
MSVCRT.dll585fclose
MSVCRT.dll602fread
MSVCRT.dll208_exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll141_acmdln
MSVCRT.dll88__getmainargs
MSVCRT.dll667printf
MSVCRT.dll268_initterm
MSVCRT.dll155_adjust_fdiv
MSVCRT.dll105__p__commode
MSVCRT.dll665perror
MSVCRT.dll128__set_app_type
MSVCRT.dll199_except_handler3
MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll85__dllonexit
MSVCRT.dll387_onexit
MSVCRT.dll180_controlfp
MSVCRT.dll582exit
MSVCRT.dll272_iob
MSVCRT.dll597fprintf
MSVCRT.dll66_EH_prolog
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll130__setusermatherr
MSVCRT.dll110__p__fmode
MSVCRT.dll423_setmbcp
KERNEL32.dll92DeleteFileA
KERNEL32.dll774WinExec
KERNEL32.dll792WritePrivateProfileStringA
KERNEL32.dll335GetPrivateProfileStringA
KERNEL32.dll314GetModuleHandleA
KERNEL32.dll358GetStartupInfoA
USER32.dll536SendMessageA
USER32.dll185EnableWindow

StringTable 040904E4

CompanyName
FileDescriptionNTUUCODE MFC Application
FileVersion1.0.001
InternalNameNTUUCODE
LegalCopyright
LegalTrademarks
OriginalFilenameNTUUCODE.EXE
ProductNameNTUUCODE
ProductVersion1.0.001

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10001
FileType1
FileSubtype0
offsetsizetypecomment
030720EXE02/13/1999 20:02:17#
15c115HTM#
7800272BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK