filenameAdressGUI_781.EXE
size543776 (0x84c20)
md5519f95cd700ce822731658e64ae23a90
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x56acee15
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion2.55
SizeOfCode0x30e00
SizeOfInitializedData0x53a00
SizeOfUninitializedData0x2bc800
AddressOfEntryPoint0x1219
BaseOfCode0x1000
BaseOfData0x32000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x345000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ (3.0 old crap)

Sections

namevavsizeraw sizeflags
.text0x10000x30c300x30c30R-X CODE
.bss0x320000x2bc77c0RW- UDATA
.data0x2ef0000x514500x51450RW- IDATA
.idata0x3410000x10340x1034RW- CODE IDATA
.rsrc0x3430000x10100x1010RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x3410000x1034
RESOURCE0x3430000x1010
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
DIALOG#9002840
DIALOG#9108040
DIALOG#9203480
DIALOG#9305600
DIALOG#9405000
DIALOG#9503720
GROUP_ICON#124200
module_namehintordfunction_name
KERNEL32.dll107DeleteFileA
KERNEL32.dll155ExitProcess
KERNEL32.dll173FindClose
KERNEL32.dll177FindFirstFileA
KERNEL32.dll237GetCommandLineA
KERNEL32.dll271GetCurrentDirectoryA
KERNEL32.dll277GetCurrentThreadId
KERNEL32.dll298GetFileAttributesA
KERNEL32.dll316GetLastError
KERNEL32.dll329GetModuleHandleA
KERNEL32.dll355GetPrivateProfileStringA
KERNEL32.dll359GetProcAddress
KERNEL32.dll444GlobalAlloc
KERNEL32.dll451GlobalFree
KERNEL32.dll455GlobalLock
KERNEL32.dll462GlobalUnlock
KERNEL32.dll515LoadLibraryA
KERNEL32.dll550MultiByteToWideChar
KERNEL32.dll632RtlUnwind
KERNEL32.dll691SetLastError
KERNEL32.dll802WritePrivateProfileStringA
USER32.DLL104EnableWindow
USER32.DLL107SetWindowTextA
USER32.DLL109GetWindowTextA
USER32.DLL113GetWindowTextLengthA
USER32.DLL116GetWindowRect
USER32.DLL119GetParent
USER32.DLL129IsWindow
USER32.DLL135SystemParametersInfoA
USER32.DLL148DialogBoxParamA
USER32.DLL150DialogBoxIndirectParamA
USER32.DLL152EndDialog
USER32.DLL155GetDlgItem
USER32.DLL160GetDlgItemTextA
USER32.DLL171MapDialogRect
USER32.DLL172IsDialogMessageA
USER32.DLL175OpenClipboard
USER32.DLL176CloseClipboard
USER32.DLL178EmptyClipboard
USER32.DLL179SetClipboardData
USER32.DLL203InvalidateRect
USER32.DLL207RedrawWindow
USER32.DLL208SetFocus
USER32.DLL211GetActiveWindow
USER32.DLL227GetAsyncKeyState
USER32.DLL25LoadCursorA
USER32.DLL267SetTimer
USER32.DLL268KillTimer
USER32.DLL27LoadIconA
USER32.DLL283GetSystemMenu
USER32.DLL294AppendMenuA
USER32.DLL306SetScrollPos
USER32.DLL308SetScrollRange
USER32.DLL321MessageBoxA
USER32.DLL341SetCursor
USER32.DLL35GetMessageA
USER32.DLL362GetWindowLongA
USER32.DLL364SetWindowLongA
USER32.DLL366GetDesktopWindow
USER32.DLL37PeekMessageA
USER32.DLL39TranslateMessage
USER32.DLL40DispatchMessageA
USER32.DLL413SetWindowsHookExA
USER32.DLL415UnhookWindowsHookEx
USER32.DLL441GetDC
USER32.DLL442ReleaseDC
USER32.DLL510CharLowerA
USER32.DLL512CharUpperA
USER32.DLL52SendMessageA
USER32.DLL573GetClassInfoExA
USER32.DLL596RegisterClassExA
USER32.DLL65PostQuitMessage
USER32.DLL73GetSystemMetrics
USER32.DLL74GetSysColor
USER32.DLL7UnregisterClassA
USER32.DLL79ShowWindow
USER32.DLL83CreateWindowExA
USER32.DLL85DestroyWindow
USER32.DLL86SetWindowPos
USER32.DLL90MoveWindow
USER32.DLL91BringWindowToTop
USER32.DLL98DefWindowProcA
GDI32.DLL137GetStockObject
GDI32.DLL147GetTextExtentPoint32A
GDI32.DLL197SelectObject
GDI32.DLL202SetBkColor
GDI32.DLL203SetBkMode
GDI32.DLL221SetTextColor
GDI32.DLL50CreateSolidBrush
GDI32.DLL54DeleteObject
COMCTL32.DLL13InitCommonControlsEx
COMDLG32.DLL19GetOpenFileNameA
COMDLG32.DLL21GetSaveFileNameA
CRTDLL.DLL200_iob
CRTDLL.DLL232_itoa
CRTDLL.DLL24__GetMainArgs
CRTDLL.DLL422_stricmp
CRTDLL.DLL431_strnicmp
CRTDLL.DLL509atof
CRTDLL.DLL510atoi
CRTDLL.DLL522exit
CRTDLL.DLL525fclose
CRTDLL.DLL528fflush
CRTDLL.DLL529fgetc
CRTDLL.DLL530fgetpos
CRTDLL.DLL531fgets
CRTDLL.DLL535fopen
CRTDLL.DLL537fputc
CRTDLL.DLL540fread
CRTDLL.DLL541free
CRTDLL.DLL545fseek
CRTDLL.DLL549fwrite
CRTDLL.DLL551getc
CRTDLL.DLL555gmtime
CRTDLL.DLL585localeconv
CRTDLL.DLL586localtime
CRTDLL.DLL590malloc
CRTDLL.DLL596memcpy
CRTDLL.DLL597memmove
CRTDLL.DLL598memset
CRTDLL.DLL602pow
CRTDLL.DLL608raise
CRTDLL.DLL610realloc
CRTDLL.DLL618signal
CRTDLL.DLL61_chdir
CRTDLL.DLL625strcat
CRTDLL.DLL626strchr
CRTDLL.DLL627strcmp
CRTDLL.DLL632strftime
CRTDLL.DLL635strncmp
CRTDLL.DLL643strtol
CRTDLL.DLL651time
CRTDLL.DLL658ungetc
CRTDLL.DLL673wcslen
CRTDLL.DLL687wctomb
offsetsizetypecomment
0543248EXE01/30/2016 17:08:37#
15c115HTM#
84a10528BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 543776 bytes (532 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK