filenamedumped - 167C1A_.exe
size2252800 (0x226000)
md555b96d2b9831be9a002c1580f3b26aaf
typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
126503273
1105072743
1255072756
10950727126
95403510
2891781
1081686
93403525
10515
11450727256
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4728b2ff
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x91000
SizeOfInitializedData0x7000
SizeOfUninitializedData0x18a000
AddressOfEntryPoint0x167c1a
BaseOfCode0x18b000
BaseOfData0x21c000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x226000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 2005

Sections

namevavsizeraw sizeflags
UPX00x10000x18a0000x18a000RWX UDATA
UPX10x18b0000x910000x91000RWX IDATA
.rsrc0x21c0000x70000x7000RW- IDATA
.mackt0x2230000x30000x3000RWX CODE IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2230000xf0
RESOURCE0x21c0000x6678
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
PICKLE#10181252
CURSOR#73081252
CURSOR#83081252
CURSOR#93081252
ICON#113841252
ICON#222161252
ICON#337521252
ICON#411281252
ICON#542641252
ICON#696401252
GROUP_CURSOR#6601201252
GROUP_CURSOR#6602201252
GROUP_CURSOR#6603201252
GROUP_ICON#102901252
VERSION#118881252
MANIFEST#18631252
module_namehintordfunction_name
advapi32.dll1639RegSetValueExW
advapi32.dll1561RegCloseKey
advapi32.dll1609RegOpenKeyExA
advapi32.dll1569RegCreateKeyExA
advapi32.dll1591RegEnumKeyExA
advapi32.dll1574RegDeleteKeyA
advapi32.dll1594RegEnumValueA
advapi32.dll1623RegQueryValueExW
advapi32.dll1622RegQueryValueExA
advapi32.dll1638RegSetValueExA
advapi32.dll1584RegDeleteValueA
advapi32.dll1616RegQueryInfoKeyA
advapi32.dll1646RegisterServiceCtrlHandlerA
advapi32.dll1705SetServiceStatus
advapi32.dll1712StartServiceCtrlDispatcherA
comctl32.dll17InitCommonControls
comctl32.dll49ImageList_Destroy
comctl32.dll42ImageList_Add
comctl32.dll91InitCommonControlsEx
comctl32.dll48ImageList_Create
gdi32.dll1065CreateDIBSection
gdi32.dll1519GetObjectA
gdi32.dll1066CreateDIBitmap
gdi32.dll1542GetSystemPaletteEntries
gdi32.dll1085CreatePalette
gdi32.dll1470GetDIBits
gdi32.dll1610Polygon
gdi32.dll1688SetTextAlign
gdi32.dll1654SetBrushOrgEx
gdi32.dll1070CreateEnhMetaFileA
gdi32.dll1082CreateMetaFileA
gdi32.dll1043CloseMetaFile
gdi32.dll1071CreateEnhMetaFileW
gdi32.dll1041CloseEnhMetaFile
gdi32.dll1083CreateMetaFileW
gdi32.dll1308EnumFontsW
gdi32.dll1307EnumFontsA
gdi32.dll1304EnumFontFamiliesExA
gdi32.dll1305EnumFontFamiliesExW
gdi32.dll1046CombineRgn
gdi32.dll1091CreateRectRgn
gdi32.dll1630RoundRect
gdi32.dll1561GetTextMetricsA
gdi32.dll1578LineTo
gdi32.dll1087CreatePen
gdi32.dll1641SelectClipRgn
gdi32.dll1086CreatePatternBrush
gdi32.dll1661SetDIBitsToDevice
gdi32.dll1553GetTextExtentPoint32A
gdi32.dll1681SetPixelV
gdi32.dll1053CreateBitmap
gdi32.dll1488GetFontLanguageInfo
gdi32.dll1249Ellipse
gdi32.dll1582MoveToEx
gdi32.dll1096CreateSolidBrush
gdi32.dll1461GetClipRgn
gdi32.dll1690SetTextColor
gdi32.dll1619Rectangle
gdi32.dll1528GetPixel
gdi32.dll1562GetTextMetricsW
gdi32.dll1509GetMetaFileA
gdi32.dll1476GetEnhMetaFileA
gdi32.dll1302EnumEnhMetaFile
gdi32.dll1240DeleteEnhMetaFile
gdi32.dll1480GetEnhMetaFileHeader
gdi32.dll1241DeleteMetaFile
gdi32.dll1073CreateFontIndirectA
gdi32.dll1693SetViewportOrgEx
gdi32.dll1317ExcludeClipRect
gdi32.dll1672SetMapMode
gdi32.dll1077CreateFontW
gdi32.dll1072CreateFontA
gdi32.dll1056CreateBrushIndirect
gdi32.dll1692SetViewportExtEx
gdi32.dll1696SetWindowExtEx
gdi32.dll1254EndPage
gdi32.dll1699StartDocA
gdi32.dll1645SetAbortProc
gdi32.dll1702StartPage
gdi32.dll1251EndDoc
gdi32.dll1080CreateICA
gdi32.dll1242DeleteObject
gdi32.dll1686SetStretchBltMode
gdi32.dll1643SelectObject
gdi32.dll1537GetStockObject
gdi32.dll1061CreateDCA
gdi32.dll1031BitBlt
gdi32.dll1554GetTextExtentPoint32W
gdi32.dll1644SelectPalette
gdi32.dll1060CreateCompatibleDC
gdi32.dll1239DeleteDC
gdi32.dll1059CreateCompatibleBitmap
gdi32.dll1703StretchBlt
gdi32.dll1616RealizePalette
gdi32.dll1704StretchDIBits
gdi32.dll1651SetBkMode
gdi32.dll1471GetDeviceCaps
gdi32.dll1710TranslateCharsetInfo
kernel32.dll519GetLocaleInfoW
kernel32.dll835LoadResource
kernel32.dll1356lstrcpy
kernel32.dll853LockResource
kernel32.dll334FindResourceA
kernel32.dll1339_hread
kernel32.dll1343_llseek
kernel32.dll1344_lopen
kernel32.dll1263VirtualAlloc
kernel32.dll1341_lclose
kernel32.dll906OutputDebugStringA
kernel32.dll1279WaitForSingleObject
kernel32.dll284ExitProcess
kernel32.dll1019ReleaseMutex
kernel32.dll833LoadLibraryW
kernel32.dll158CreateMutexA
kernel32.dll1303WideCharToMultiByte
kernel32.dll288ExpandEnvironmentStringsW
kernel32.dll478GetEnvironmentVariableA
kernel32.dll393GetCommandLineA
kernel32.dll1113SetEnvironmentVariableA
kernel32.dll1114SetEnvironmentVariableW
kernel32.dll394GetCommandLineW
kernel32.dll479GetEnvironmentVariableW
kernel32.dll451GetCurrentProcess
kernel32.dll670GetUserDefaultLangID
kernel32.dll133CreateEventA
kernel32.dll363GetACP
kernel32.dll780IsValidCodePage
kernel32.dll676GetVersion
kernel32.dll871MulDiv
kernel32.dll522GetLogicalDrives
kernel32.dll754InterlockedIncrement
kernel32.dll750InterlockedDecrement
kernel32.dll127CreateDirectoryA
kernel32.dll389GetCommModemStatus
kernel32.dll1041ResetEvent
kernel32.dll83ClearCommError
kernel32.dll391GetCommState
kernel32.dll1060SetCommBreak
kernel32.dll390GetCommProperties
kernel32.dll283EscapeCommFunction
kernel32.dll82ClearCommBreak
kernel32.dll1063SetCommState
kernel32.dll1064SetCommTimeouts
kernel32.dll718HeapAlloc
kernel32.dll1269VirtualProtect
kernel32.dll722HeapFree
kernel32.dll1266VirtualFree
kernel32.dll587GetProcessHeap
kernel32.dll761IsBadReadPtr
kernel32.dll1221TerminateProcess
kernel32.dll612GetStartupInfoA
kernel32.dll635GetSystemTimeAsFileTime
kernel32.dll725HeapReAlloc
kernel32.dll1192SetUnhandledExceptionFilter
kernel32.dll770IsDebuggerPresent
kernel32.dll1228TlsGetValue
kernel32.dll1226TlsAlloc
kernel32.dll1229TlsSetValue
kernel32.dll1227TlsFree
kernel32.dll1141SetLastError
kernel32.dll456GetCurrentThreadId
kernel32.dll727HeapSize
kernel32.dll946RaiseException
kernel32.dll614GetStdHandle
kernel32.dll721HeapDestroy
kernel32.dll720HeapCreate
kernel32.dll316FindFirstFileW
kernel32.dll486GetFileAttributesA
kernel32.dll214DeleteFileA
kernel32.dll1123SetFileAttributesW
kernel32.dll610GetShortPathNameA
kernel32.dll326FindNextFileA
kernel32.dll305FindClose
kernel32.dll120CopyFileW
kernel32.dll1120SetFileAttributesA
kernel32.dll217DeleteFileW
kernel32.dll689GetWindowsDirectoryW
kernel32.dll626GetSystemDirectoryW
kernel32.dll115CopyFileA
kernel32.dll1025RemoveDirectoryA
kernel32.dll868MoveFileW
kernel32.dll625GetSystemDirectoryA
kernel32.dll688GetWindowsDirectoryA
kernel32.dll373GetCPInfo
kernel32.dll568GetOEMCP
kernel32.dll813LCMapStringA
kernel32.dll815LCMapStringW
kernel32.dll355FreeEnvironmentStringsA
kernel32.dll475GetEnvironmentStrings
kernel32.dll1132SetFileTime
kernel32.dll611GetShortPathNameW
kernel32.dll1028RemoveDirectoryW
kernel32.dll450GetCurrentDirectoryW
kernel32.dll132CreateDirectoryW
kernel32.dll520GetLogicalDriveStringsA
kernel32.dll499GetFileTime
kernel32.dll491GetFileAttributesW
kernel32.dll309FindFirstFileA
kernel32.dll863MoveFileA
kernel32.dll328FindNextFileW
kernel32.dll1102SetCurrentDirectoryA
kernel32.dll449GetCurrentDirectoryA
kernel32.dll709GlobalSize
kernel32.dll694GlobalAlloc
kernel32.dll701GlobalFree
kernel32.dll708GlobalReAlloc
kernel32.dll452GetCurrentProcessId
kernel32.dll99CompareFileTime
kernel32.dll296FileTimeToSystemTime
kernel32.dll516GetLocalTime
kernel32.dll457GetDateFormatA
kernel32.dll840LocalFileTimeToFileTime
kernel32.dll633GetSystemTime
kernel32.dll295FileTimeToLocalFileTime
kernel32.dll663GetTimeFormatA
kernel32.dll1217SystemTimeToFileTime
kernel32.dll666GetTimeZoneInformation
kernel32.dll1128SetFilePointer
kernel32.dll644GetTempFileNameA
kernel32.dll497GetFileSize
kernel32.dll139CreateFileA
kernel32.dll646GetTempPathA
kernel32.dll645GetTempFileNameW
kernel32.dll85CloseHandle
kernel32.dll515GetLastError
kernel32.dll1323WriteFile
kernel32.dll647GetTempPathW
kernel32.dll346FlushFileBuffers
kernel32.dll146CreateFileW
kernel32.dll1241UnhandledExceptionFilter
kernel32.dll961ReadFile
kernel32.dll1110SetEndOfFile
kernel32.dll742InitializeCriticalSection
kernel32.dll241EnterCriticalSection
kernel32.dll212DeleteCriticalSection
kernel32.dll827LeaveCriticalSection
kernel32.dll712GlobalUnlock
kernel32.dll705GlobalLock
kernel32.dll677GetVersionExA
kernel32.dll1206Sleep
kernel32.dll582GetProcAddress
kernel32.dll872MultiByteToWideChar
kernel32.dll669GetUserDefaultLCID
kernel32.dll357FreeLibrary
kernel32.dll830LoadLibraryA
kernel32.dll937QueryPerformanceFrequency
kernel32.dll936QueryPerformanceCounter
kernel32.dll662GetTickCount
kernel32.dll103CompareStringW
kernel32.dll100CompareStringA
kernel32.dll517GetLocaleInfoA
kernel32.dll769IsDBCSLeadByteEx
kernel32.dll616GetStringTypeA
kernel32.dll534GetModuleHandleA
kernel32.dll532GetModuleFileNameA
kernel32.dll537GetModuleHandleW
kernel32.dll533GetModuleFileNameW
kernel32.dll356FreeEnvironmentStringsW
kernel32.dll477GetEnvironmentStringsW
kernel32.dll1137SetHandleCount
kernel32.dll500GetFileType
kernel32.dll1050RtlUnwind
kernel32.dll619GetStringTypeW
kernel32.dll413GetConsoleCP
kernel32.dll431GetConsoleMode
kernel32.dll1162SetStdHandle
kernel32.dll1312WriteConsoleA
kernel32.dll435GetConsoleOutputCP
kernel32.dll569GetOverlappedResult
kernel32.dll1322WriteConsoleW
oleaut32.dll419OleCreatePictureIndirect
oleaut32.dll6SysFreeString
oleaut32.dll2SysAllocString
oleaut32.dll424OleLoadPicturePath
shell32.dll279DragFinish
shell32.dll280DragQueryFile
shell32.dll283DragQueryFileW
shell32.dll441Shell_NotifyIcon
shell32.dll444Shell_NotifyIconW
shell32.dll360SHGetDesktopFolder
shell32.dll395SHGetSpecialFolderLocation
shell32.dll321SHBrowseForFolder
shell32.dll384SHGetMalloc
shell32.dll390SHGetPathFromIDListW
shell32.dll387SHGetPathFromIDList
shell32.dll433ShellExecuteA
shell32.dll437ShellExecuteW
shell32.dll278DragAcceptFiles
user32.dll1667DeleteMenu
user32.dll1948InsertMenuA
user32.dll1723EnableMenuItem
user32.dll1951InsertMenuW
user32.dll1704DrawEdge
user32.dll2202SetScrollPos
user32.dll1882GetScrollInfo
user32.dll1884GetScrollRange
user32.dll1883GetScrollPos
user32.dll2203SetScrollRange
user32.dll2201SetScrollInfo
user32.dll1851GetMenuState
user32.dll2276TranslateMDISysAccel
user32.dll1974IsIconic
user32.dll1614CreateMDIWindowW
user32.dll2103RegisterClassW
user32.dll2104RegisterClipboardFormatA
user32.dll1613CreateMDIWindowA
user32.dll1809GetFocus
user32.dll1779GetClassInfoW
user32.dll1776GetClassInfoA
user32.dll1732EnumChildWindows
user32.dll1991IsZoomed
user32.dll1907GetWindow
user32.dll1898GetTopWindow
user32.dll1518BringWindowToTop
user32.dll1504AdjustWindowRect
user32.dll1890GetSystemMenu
user32.dll1762FrameRect
user32.dll2311VkKeyScanA
user32.dll2331wsprintfA
user32.dll1612CreateIconIndirect
user32.dll1698DragDetect
user32.dll2309ValidateRect
user32.dll1782GetClassNameA
user32.dll1956InvalidateRgn
user32.dll1619CreateWindowExW
user32.dll2191SetParent
user32.dll1516BeginPaint
user32.dll2298UpdateWindow
user32.dll1729EndPaint
user32.dll2243ShowCursor
user32.dll2273TranslateAccelerator
user32.dll2100RegisterClassA
user32.dll2212SetTimer
user32.dll1992KillTimer
user32.dll1684DispatchMessageW
user32.dll1858GetMessageW
user32.dll2076PeekMessageW
user32.dll2153SetCapture
user32.dll2054MsgWaitForMultipleObjectsEx
user32.dll2078PostMessageA
user32.dll2325WindowFromPoint
user32.dll2125ReleaseCapture
user32.dll1854GetMessageA
user32.dll2260SystemParametersInfoA
user32.dll1709DrawIconEx
user32.dll1707DrawFrameControl
user32.dll2248ShowWindow
user32.dll1765GetActiveWindow
user32.dll1759FindWindowW
user32.dll1756FindWindowA
user32.dll1840GetMenu
user32.dll1618CreateWindowExA
user32.dll1673DestroyMenu
user32.dll1675DestroyWindow
user32.dll2099RedrawWindow
user32.dll1671DestroyCursor
user32.dll1599CreateCursor
user32.dll2007LoadImageA
user32.dll1925GetWindowTextA
user32.dll1849GetMenuItemInfoW
user32.dll1926GetWindowTextLengthA
user32.dll1846GetMenuItemCount
user32.dll1615CreateMenu
user32.dll2187SetMenuItemInfoW
user32.dll2052MoveWindow
user32.dll2134ScreenToClient
user32.dll1824GetKeyNameTextA
user32.dll2030MapVirtualKeyA
user32.dll1825GetKeyNameTextW
user32.dll2159SetClipboardData
user32.dll1787GetClipboardData
user32.dll1722EmptyClipboard
user32.dll1610CreateIconFromResource
user32.dll1611CreateIconFromResourceEx
user32.dll2004LoadIconA
user32.dll1957InvertRect
user32.dll1708DrawIcon
user32.dll1889GetSysColorBrush
user32.dll1911GetWindowDC
user32.dll1891GetSystemMetrics
user32.dll1705DrawFocusRect
user32.dll1717DrawTextW
user32.dll1714DrawTextA
user32.dll1816GetIconInfo
user32.dll1998LoadCursorFromFileA
user32.dll2223SetWindowPos
user32.dll1865GetParent
user32.dll2149SendMessageW
user32.dll1755FillRect
user32.dll2277TranslateMessage
user32.dll2172SetForegroundWindow
user32.dll1683DispatchMessageA
user32.dll1989IsWindowVisible
user32.dll2039MessageBoxA
user32.dll1751EnumWindows
user32.dll2075PeekMessageA
user32.dll1921GetWindowRect
user32.dll1580ClientToScreen
user32.dll1785GetClientRect
user32.dll1810GetForegroundWindow
user32.dll2271TrackPopupMenu
user32.dll1797GetCursorPos
user32.dll1616CreatePopupMenu
user32.dll1659DefFrameProcA
user32.dll1660DefFrameProcW
user32.dll1914GetWindowLongA
user32.dll2126ReleaseDC
user32.dll2221SetWindowLongW
user32.dll1664DefWindowProcA
user32.dll1798GetDC
user32.dll1662DefMDIChildProcW
user32.dll1661DefMDIChildProcA
user32.dll1531CallWindowProcA
user32.dll2220SetWindowLongA
user32.dll1532CallWindowProcW
user32.dll1915GetWindowLongW
user32.dll1665DefWindowProcW
user32.dll1847GetMenuItemID
user32.dll1572CheckMenuItem
user32.dll1710DrawMenuBar
user32.dll1594CopyRect
user32.dll1946InflateRect
user32.dll1826GetKeyState
user32.dll1871GetPropA
user32.dll2227SetWindowTextA
user32.dll1725EnableWindow
user32.dll2228SetWindowTextW
user32.dll2129RemovePropA
user32.dll1856GetMessagePos
user32.dll2197SetPropA
user32.dll1887GetSubMenu
user32.dll1577ChildWindowFromPointEx
user32.dll1853GetMenuStringW
user32.dll2038MessageBeep
user32.dll1808GetDoubleClickTime
user32.dll2062OffsetRect
user32.dll2199SetRect
user32.dll2137ScrollWindow
user32.dll1582CloseClipboard
user32.dll1955InvalidateRect
user32.dll2171SetFocus
user32.dll2323WindowFromDC
user32.dll1567CharUpperBuffA
user32.dll1546CharLowerBuffA
user32.dll1772GetAsyncKeyState
user32.dll2144SendMessageA
user32.dll1997LoadCursorA
user32.dll1852GetMenuStringA
user32.dll1967IsClipboardFormatAvailable
user32.dll1928GetWindowTextW
user32.dll2063OpenClipboard
user32.dll2161SetCursor
user32.dll2181SetMenu
user32.dll1857GetMessageTime
user32.dll1888GetSysColor
user32.dll2046MessageBoxW
version.dll1GetFileVersionInfoA
version.dll14VerQueryValueA
version.dll7GetFileVersionInfoW
version.dll4GetFileVersionInfoSizeA
version.dll15VerQueryValueW
version.dll6GetFileVersionInfoSizeW
winmm.dll76midiOutClose
winmm.dll86midiOutOpen
winmm.dll52mciSendStringA
winmm.dll53mciSendStringW
winmm.dll90midiOutShortMsg
comdlg32.dll116GetSaveFileNameW
comdlg32.dll118PageSetupDlgA
comdlg32.dll120PrintDlgA
comdlg32.dll102ChooseColorA
comdlg32.dll115GetSaveFileNameA
comdlg32.dll114GetOpenFileNameW
comdlg32.dll113GetOpenFileNameA
iphlpapi.dll64GetAdaptersInfo
ole32.dll26CoCreateInstance
ole32.dll72CoInitialize
ole32.dll118CoUninitialize
ole32.dll18CLSIDFromString
ole32.dll48CoGetClassObject
ole32.dll114CoTaskMemFree
ole32.dll16CLSIDFromProgID
ole32.dll308OleInitialize
ole32.dll331OleUninitialize
ole32.dll113CoTaskMemAlloc
ole32.dll344RegisterDragDrop
ole32.dll346RevokeDragDrop
ole32.dll147DoDragDrop

StringTable 040904B0

CompanyName
FileVersion2.2.2.0
Country
ReleaseFinal
FileDescription
LegalCopyright
ProductVersion
ProductName
OriginalFilenameWindows Loader.exe
InternalName

VS_FIXEDFILEINFO

FileVersion2.2.2.0
ProductVersion2.2.2.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0xa
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
02252800EXE10/31/2007 16:53:19#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] invalid VS_VERSIONINFO child type "xml ve"