img.exe - Geqpeevn.exe - Pikusy Aqugik Ewimy

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	img.exe
size	288379 (0x4667b)
md5	49ee7488e5a3d6d72041b94575a649bc

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd0

Rich Header

lib id	version	times used
4	8047	14286871
5	8447	9699350
10	8047	8847400
10	8168	9502775
6	1735	8650789
14	7299	1507331

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4d355dea
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x35000
SizeOfInitializedData	0x62000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x3423b
BaseOfCode	0x1000
BaseOfData	0x36000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	9.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x98000
SizeOfHeaders	0x400
CheckSum	0x6c
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.textZ	0x1000	0x34f4f	0x35000	R-X CODE
.rdata�	0x36000	0x4bef	0x4c00	R-- IDATA
.rsrc�	0x3b000	0xd28	0xe00	R-- IDATA
.data�	0x3c000	0x57370	0x8400	RW- IDATA
.pdata�	0x94000	0x3400	0x3400	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x365ac	0x140
RESOURCE	0x3b000	0xd28
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x4410c	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x43e44	0x40
Bound_IAT	0	0
IAT	0x36000	0x5ac
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
DIALOG	#1	1148
DIALOG	#2	1148
VERSION	#1	840

module_name	hint	ord	function_name
NTDLL.dll			ZwSetSystemInformation
NTDLL.dll			NtQuerySection
NTDLL.dll			ZwSetEaFile
NTDLL.dll			RtlAddAttributeActionToRXact
NTDLL.dll			NtQueryPerformanceCounter
NTDLL.dll			ZwAreMappedFilesTheSame
NTDLL.dll			RtlFindMessage
NTDLL.dll			NtSetQuotaInformationFile
NTDLL.dll			NtWriteFileGather
NTDLL.dll			RtlLargeIntegerNegate
NTDLL.dll			RtlEnumProcessHeaps
NTDLL.dll			RtlSubAuthoritySid
NTDLL.dll			NtUnlockFile
NTDLL.dll			RtlQueryProcessLockInformation
NTDLL.dll			NtOpenEventPair
NTDLL.dll			RtlCompareString
NTDLL.dll			ZwCreateDirectoryObject
NTDLL.dll			RtlAbortRXact
NTDLL.dll			ZwSetInformationFile
NTDLL.dll			NtGetDevicePowerState
NTDLL.dll			KiUserCallbackDispatcher
NTDLL.dll			NtWriteRequestData
NTDLL.dll			LdrGetDllHandle
NTDLL.dll			RtlIsDosDeviceName_U
NTDLL.dll			RtlIsGenericTableEmpty
NTDLL.dll			ZwQueryVolumeInformationFile
NTDLL.dll			RtlGetLongestNtPathLength
NTDLL.dll			RtlApplyRXact
NTDLL.dll			NtOpenEvent
NTDLL.dll			RtlLargeIntegerShiftRight
NTDLL.dll			ZwAllocateUuids
MSWSOCK.dll			inet_network
MSWSOCK.dll			AcceptEx
MSWSOCK.dll			GetNameByTypeW
MSWSOCK.dll			getnetbyname
MSWSOCK.dll			dn_expand
MSWSOCK.dll			sethostname
MSWSOCK.dll			EnumProtocolsA
MSWSOCK.dll			GetTypeByNameA
MSWSOCK.dll			rresvport
MSWSOCK.dll			NPLoadNameSpaces
MSWSOCK.dll			GetNameByTypeA
MSWSOCK.dll			GetTypeByNameW
MSWSOCK.dll			SetServiceW
MSWSOCK.dll			GetAddressByNameW
MSWSOCK.dll			rcmd
MSWSOCK.dll			rexec
RASAPI32.dll			RasCreatePhonebookEntryW
RASAPI32.dll			UnInitializeRAS
RASAPI32.dll			RasDialW
RASAPI32.dll			RasDeleteEntryW
RASAPI32.dll			RasClearLinkStatistics
RASAPI32.dll			RasGetAutodialParamW
RASAPI32.dll			RasHangUpW
RASAPI32.dll			RasGetCredentialsW
RASAPI32.dll			RasAutodialEntryToNetwork
RASAPI32.dll			RasAutoDialSharedConnection
RASAPI32.dll			RasGetSubEntryHandleW
RASAPI32.dll			RasValidateEntryNameA
RASAPI32.dll			RasGetSubEntryPropertiesA
RASAPI32.dll			RasGetCredentialsA
RASAPI32.dll			RasGetSubEntryPropertiesW
RASAPI32.dll			RasGetConnectionStatistics
RASAPI32.dll			RasGetHport
RASAPI32.dll			RasQuerySharedAutoDial
RASAPI32.dll			RasGetEapUserIdentityA
RASAPI32.dll			RasSetSubEntryPropertiesA
RASAPI32.dll			RasSetSubEntryPropertiesW
RASAPI32.dll			DwEnumEntryDetails
RASAPI32.dll			RasGetSubEntryHandleA
RASAPI32.dll			RasSetCredentialsA
RASAPI32.dll			RasGetConnectStatusA
RASAPI32.dll			RasGetEntryDialParamsA
RASAPI32.dll			DwCloneEntry
QUERY.dll			InitializeCIISAPIPerformanceData
QUERY.dll			LoadBinaryFilter
QUERY.dll			BindIFilterFromStorage
QUERY.dll			CollectCIISAPIPerformanceData
QUERY.dll			SetupCache
QUERY.dll			BindIFilterFromStream
QUERY.dll			LoadTextFilter
QUERY.dll			CITextToSelectTreeEx
QUERY.dll			CollectCIPerformanceData
QUERY.dll			CIGetGlobalPropertyList
QUERY.dll			CiSvcMain
QUERY.dll			EndCacheTransaction
QUERY.dll			SvcEntry_CiSvc
QUERY.dll			SetCatalogState
QUERY.dll			CICreateCommand
QUERY.dll			CITextToFullTree
QUERY.dll			CIRestrictionToFullTree
QUERY.dll			InitializeCIPerformanceData
QUERY.dll			CIBuildQueryNode
QUERY.dll			CITextToFullTreeEx
QUERY.dll			CITextToSelectTree
OLEACC.dll			AccessibleObjectFromEvent
OLEACC.dll			CreateStdAccessibleObject
OLEACC.dll			GetRoleTextA
OLEACC.dll			LresultFromObject
OLEACC.dll			CreateStdAccessibleProxyW
OLEACC.dll			GetStateTextA
OLEACC.dll			AccessibleObjectFromPoint
OLEACC.dll			WindowFromAccessibleObject
OLEACC.dll			GetStateTextW
OLEACC.dll			AccessibleChildren
OLEACC.dll			CreateStdAccessibleProxyA
SETUPAPI.dll			SetupDiGetDeviceInstanceIdW
SETUPAPI.dll			CM_Free_Range_List
SETUPAPI.dll			SetupDiRemoveDevice
SETUPAPI.dll			SetupDiGetHwProfileListExA
SETUPAPI.dll			SetupQuerySourceListW
SETUPAPI.dll			CM_Get_Res_Des_Data
SETUPAPI.dll			CM_Locate_DevNode_ExW
SETUPAPI.dll			SetupDiCreateDeviceInfoW
SETUPAPI.dll			SetupDiGetClassInstallParamsA
SETUPAPI.dll			SetupFindNextMatchLineW
SETUPAPI.dll			SetupDiGetSelectedDriverA
SETUPAPI.dll			SetupDiCallClassInstaller
SETUPAPI.dll			SetupDiDeleteDeviceInfo
SETUPAPI.dll			CM_Set_HW_Prof_FlagsW
SETUPAPI.dll			CM_Reenumerate_DevNode
SETUPAPI.dll			SetupRenameErrorA
SETUPAPI.dll			CM_Set_DevNode_Problem_Ex
SETUPAPI.dll			SetupDiDeleteDeviceInterfaceData
SETUPAPI.dll			CM_Open_Class_KeyA
SETUPAPI.dll			SetupDiGetHwProfileList
SETUPAPI.dll			CM_Get_Hardware_Profile_Info_ExW
SETUPAPI.dll			CM_Get_HW_Prof_Flags_ExW
SETUPAPI.dll			SetupRemoveFromDiskSpaceListW
SETUPAPI.dll			CM_Get_Device_ID_List_Size_ExW
SETUPAPI.dll			CM_Request_Eject_PC
SETUPAPI.dll			SetupDiSetClassInstallParamsA
SETUPAPI.dll			SetupDiGetHwProfileFriendlyNameExW
SETUPAPI.dll			SetupCommitFileQueueW
SETUPAPI.dll			SetupQueueDeleteSectionA
SETUPAPI.dll			SetupGetInfFileListW
SETUPAPI.dll			CM_Get_Class_Name_ExW
SETUPAPI.dll			SetupQueueDeleteA
RPCRT4.dll			NdrUserMarshalSimpleTypeConvert
RPCRT4.dll			I_RpcFreeBuffer
RPCRT4.dll			NdrInterfacePointerBufferSize
RPCRT4.dll			NdrClientContextUnmarshall
RPCRT4.dll			RpcServerUseProtseqEpExW
RPCRT4.dll			I_RpcTransServerNewConnection
RPCRT4.dll			RpcMgmtSetComTimeout
RPCRT4.dll			I_RpcTransDatagramAllocate2
RPCRT4.dll			RpcBindingInqObject
RPCRT4.dll			NdrFixedArrayUnmarshall
RPCRT4.dll			NdrConformantVaryingStructFree
RPCRT4.dll			I_RpcMapWin32Status
RPCRT4.dll			NdrConformantVaryingStructMemorySize
RPCRT4.dll			NdrFreeBuffer
RPCRT4.dll			NdrStubCall2
RPCRT4.dll			I_RpcServerRegisterForwardFunction
RPCRT4.dll			NdrNonConformantStringUnmarshall
RPCRT4.dll			NdrDllCanUnloadNow
RPCRT4.dll			I_RpcNsInterfaceExported
RPCRT4.dll			RpcMgmtInqDefaultProtectLevel
RPCRT4.dll			NdrUserMarshalBufferSize
RPCRT4.dll			UuidHash
RPCRT4.dll			NdrSimpleTypeMarshall
RPCRT4.dll			NdrServerInitialize
RPCRT4.dll			RpcBindingInqAuthClientA
RPCRT4.dll			NDRCContextUnmarshall
RPCRT4.dll			NdrVaryingArrayFree
RPCRT4.dll			RpcEpRegisterW
RPCRT4.dll			RpcServerUseProtseqIfExA
RPCRT4.dll			I_RpcNsBindingSetEntryNameA
RPCRT4.dll			RpcServerYield
USER32.dll			CreateIcon
SAMLIB.dll			SamConnectWithCreds
SAMLIB.dll			SamQueryInformationDomain
SAMLIB.dll			SamRemoveMultipleMembersFromAlias
SAMLIB.dll			SamGetMembersInGroup
SAMLIB.dll			SamGetDisplayEnumerationIndex
SAMLIB.dll			SamCreateAliasInDomain
SAMLIB.dll			SamChangePasswordUser
SAMLIB.dll			SamLookupNamesInDomain
SAMLIB.dll			SamQueryInformationGroup
SAMLIB.dll			SamiChangePasswordUser
SAMLIB.dll			SamGetAliasMembership
SAMLIB.dll			SamSetInformationUser
SAMLIB.dll			SamEnumerateGroupsInDomain
SAMLIB.dll			SamSetInformationGroup
SAMLIB.dll			SamChangePasswordUser2
SAMLIB.dll			SamAddMemberToAlias
SAMLIB.dll			SamLookupIdsInDomain
SAMLIB.dll			SamDeleteUser
SAMLIB.dll			SamRemoveMemberFromForeignDomain
SAMLIB.dll			SamTestPrivateFunctionsUser
SAMLIB.dll			SamCreateGroupInDomain
SAMLIB.dll			SamEnumerateUsersInDomain
SAMLIB.dll			SamGetGroupsForUser
SAMLIB.dll			SamiSetDSRMPassword
SAMLIB.dll			SamQuerySecurityObject
SAMLIB.dll			SamTestPrivateFunctionsDomain
KERNEL32.dll			RemoveDirectoryW
KERNEL32.dll			ExitProcess
KERNEL32.dll			BackupRead
KERNEL32.dll			GetThreadLocale
NETAPI32.dll			NetLocalGroupAddMembers
NETAPI32.dll			NetDfsAddStdRootForced
NETAPI32.dll			NetSessionEnum
NETAPI32.dll			NetAuditWrite
NETAPI32.dll			NetFileGetInfo
NETAPI32.dll			NetConnectionEnum
NETAPI32.dll			NetServiceInstall
NETAPI32.dll			NetServerTransportAddEx
NETAPI32.dll			NetSessionGetInfo
NETAPI32.dll			I_BrowserQueryStatistics
NETAPI32.dll			NetLocalGroupSetInfo
NETAPI32.dll			I_NetServerPasswordSet2
NETAPI32.dll			I_NetLogonControl
NETAPI32.dll			NetUserDel
NETAPI32.dll			I_BrowserQueryOtherDomains
NETAPI32.dll			NetStatisticsGet
NETAPI32.dll			NetUseAdd
NETAPI32.dll			NetReplSetInfo
NETAPI32.dll			DsDeregisterDnsHostRecordsW
NETAPI32.dll			NetSessionDel
NETAPI32.dll			NetGroupSetInfo
NETAPI32.dll			NetLocalGroupGetInfo
NETAPI32.dll			NetDfsRemoveFtRootForced
NETAPI32.dll			NetGetDCName
NETAPI32.dll			NetErrorLogWrite
NETAPI32.dll			NetReplExportDirDel
NETAPI32.dll			NetGroupAdd
NETAPI32.dll			DsEnumerateDomainTrustsA
NETAPI32.dll			NetValidateName
NETAPI32.dll			DsAddressToSiteNamesA
NETAPI32.dll			NetJoinDomain
WINMM.dll			mixerGetControlDetailsA
WINMM.dll			mixerGetNumDevs
WINMM.dll			timeGetDevCaps
WINMM.dll			joyConfigChanged
WINMM.dll			waveOutOpen
WINMM.dll			mixerGetLineInfoW
WINMM.dll			midiInClose
WINMM.dll			waveInStart
WINMM.dll			mciGetYieldProc
WINMM.dll			auxSetVolume
WINMM.dll			mmioRenameA
WINMM.dll			joySetCapture
WINMM.dll			auxGetDevCapsA
WINMM.dll			mixerGetDevCapsW
WINMM.dll			midiInAddBuffer
WINMM.dll			mciSetYieldProc
WINMM.dll			mixerGetLineControlsA
WINMM.dll			midiOutShortMsg
WINMM.dll			midiInGetNumDevs
WINMM.dll			wod32Message
WINMM.dll			midiInPrepareHeader
WINMM.dll			mciGetDeviceIDA
WINMM.dll			PlaySoundA
WINMM.dll			midiInMessage
WINMM.dll			midiOutClose
WINMM.dll			waveOutUnprepareHeader
WINMM.dll			NotifyCallbackData
WINMM.dll			timeGetSystemTime
CLUSAPI.dll			AddClusterResourceNode
CLUSAPI.dll			ClusterNetworkOpenEnum
CLUSAPI.dll			CloseClusterResource
CLUSAPI.dll			RestoreClusterDatabase
CLUSAPI.dll			CloseCluster
CLUSAPI.dll			RegisterClusterNotify
CLUSAPI.dll			SetClusterResourceName
CLUSAPI.dll			ClusterResourceTypeEnum
CLUSAPI.dll			CanResourceBeDependent
CLUSAPI.dll			AddClusterResourceDependency
CLUSAPI.dll			ClusterRegQueryInfoKey
CLUSAPI.dll			ClusterRegGetKeySecurity
CLUSAPI.dll			GetClusterNetworkKey
CLUSAPI.dll			ClusterRegQueryValue
CLUSAPI.dll			GetClusterResourceKey
CLUSAPI.dll			ClusterResourceControl
CLUSAPI.dll			SetClusterGroupName
CLUSAPI.dll			MoveClusterGroup
CLUSAPI.dll			OpenCluster
CLUSAPI.dll			ClusterRegSetValue
CLUSAPI.dll			ClusterNetworkControl
CLUSAPI.dll			OfflineClusterResource
CLUSAPI.dll			GetClusterGroupState
CLUSAPI.dll			GetClusterNodeId
CLUSAPI.dll			ClusterResourceTypeControl
CLUSAPI.dll			GetClusterNetInterface
CLUSAPI.dll			CloseClusterNode
CLUSAPI.dll			GetClusterNodeKey
CLUSAPI.dll			GetClusterNetworkState
WINSPOOL.drv			GetJobW
WINSPOOL.drv			SetFormW
WINSPOOL.drv			SpoolerPrinterEvent
WINSPOOL.drv			EnumPortsW
WINSPOOL.drv			CloseSpoolFileHandle
WINSPOOL.drv			DEVICEMODE
WINSPOOL.drv			DEVICECAPABILITIES
WINSPOOL.drv			SetFormA
WINSPOOL.drv			FreePrinterNotifyInfo
WINSPOOL.drv			GetPrinterW
WINSPOOL.drv			PrinterMessageBoxW
WINSPOOL.drv			AddPrinterConnectionW
WINSPOOL.drv			AddFormA
WINSPOOL.drv			GetPrinterDataA
WINSPOOL.drv			EndDocPrinter
WINSPOOL.drv			ReadPrinter
WINSPOOL.drv			GetFormA
WINSPOOL.drv			PrinterProperties
WINSPOOL.drv			SetDefaultPrinterA
WINSPOOL.drv			AbortPrinter
WINSPOOL.drv			ConvertUnicodeDevModeToAnsiDevmode
WINSPOOL.drv			AddPrinterDriverW
WINSPOOL.drv			FindFirstPrinterChangeNotification
WINSPOOL.drv			EXTDEVICEMODE
WINSPOOL.drv			EnumPrinterKeyW
WINSPOOL.drv			QueryColorProfile
WINSPOOL.drv			OpenPrinterA
WINSPOOL.drv			ExtDeviceMode
WINSPOOL.drv			DeleteMonitorW
WINSPOOL.drv			DeletePrinterConnectionW
WINSPOOL.drv			DocumentEvent
WINSPOOL.drv			EnumPrinterDataExA
IMM32.dll			ImmGetHotKey
IMM32.dll			ImmInstallIMEA
IMM32.dll			ImmLockIMC
IMM32.dll			ImmConfigureIMEA
IMM32.dll			ImmDestroyContext
IMM32.dll			ImmGenerateMessage
IMM32.dll			ImmGetRegisterWordStyleA
IMM32.dll			ImmGetIMEFileNameA
IMM32.dll			ImmGetDescriptionW
IMM32.dll			ImmNotifyIME
IMM32.dll			ImmGetCandidateListA
IMM32.dll			ImmGetCandidateWindow
IMM32.dll			ImmSetHotKey
IMM32.dll			ImmGetIMEFileNameW
IMM32.dll			ImmGetGuideLineW
IMM32.dll			ImmEnumRegisterWordW
IMM32.dll			ImmSetCompositionStringA
IMM32.dll			ImmGetCompositionStringA
IMM32.dll			ImmGetProperty
IMM32.dll			ImmGetContext
IMM32.dll			ImmReSizeIMCC
IMM32.dll			ImmGetRegisterWordStyleW
IMM32.dll			ImmGetIMCLockCount
IMM32.dll			ImmGetCandidateListCountA
IMM32.dll			ImmAssociateContextEx
IMM32.dll			ImmSetOpenStatus
IMM32.dll			ImmGetDefaultIMEWnd
IMM32.dll			ImmGetVirtualKey

StringTable 040904B0

CompanyName	Speedy Softwares
ProductVersion	8
FileVersion	8, 2, 6
InternalName	Ohy
LegalTrademarks	Gap Didihu Awusuki Ikulav Yqesysy Beje Nyzaze Caticot Umuno Nyh
LegalCopyright	1995
OriginalFilename	Geqpeevn.exe
ProductName	Kofuju
FileDescription	Pikusy Aqugik Ewimy

VS_FIXEDFILEINFO

FileVersion	8.2.0.0
ProductVersion	8.2.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	288256	EXE	01/18/2011 09:31:22	#
15c1	15	HTM		#
46600	123	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 288379 bytes (282 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

img.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

img.exe
-