cp.exe

info
MZ
PE
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	cp.exe
size	164878 (0x2840e)
md5	576f7520cceff0aed601625339ea4b8a

type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4eaa28d4
PointerToSymbolTable	0x28400
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x32f
Magic	0x10b
LinkerVersion	2.22
SizeOfCode	0x22c00
SizeOfInitializedData	0x28000
SizeOfUninitializedData	0xc00
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x24000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2c000
SizeOfHeaders	0x400
CheckSum	0x32fda
Subsystem	3
DllCharacteristics	0x8000
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x22af8	0x22c00	R-X CODE IDATA
.data	0x24000	0x4260	0x4400	RW- IDATA
/4	0x29000	0xcc	0x200	RW- IDATA
.bss	0x2a000	0xc00	0	RW- UDATA
.idata	0x2b000	0xd64	0xe00	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x2b000	0xd64
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2b284	0x20c
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
cygattr-1.dll	2	attr_copy_fd
cygattr-1.dll	3	attr_copy_file
cygwin1.dll	15	__assert_func
cygwin1.dll	18	__ctype_ptr__
cygwin1.dll	31	__errno
cygwin1.dll	52	__getreent
cygwin1.dll	58	__locale_mb_cur_max
cygwin1.dll	59	__main
cygwin1.dll	102	_acl32
cygwin1.dll	182	_dll_crt0@0
cygwin1.dll	206	_exit
cygwin1.dll	239	_facl32
cygwin1.dll	243	_fchown32
cygwin1.dll	248	_fcntl64
cygwin1.dll	290	_fseeko64
cygwin1.dll	294	_fstat64
cygwin1.dll	303	_ftruncate64
cygwin1.dll	323	_geteuid32
cygwin1.dll	367	_impure_ptr
cygwin1.dll	402	_lchown32
cygwin1.dll	426	_lseek64
cygwin1.dll	428	_lstat64
cygwin1.dll	442	_mknod32
cygwin1.dll	461	_open64
cygwin1.dll	564	_stat64
cygwin1.dll	673	abort
cygwin1.dll	677	access
cygwin1.dll	720	atexit
cygwin1.dll	733	btowc
cygwin1.dll	741	calloc
cygwin1.dll	769	chmod
cygwin1.dll	778	clock_gettime
cygwin1.dll	782	close
cygwin1.dll	783	closedir
cygwin1.dll	832	cygwin_conv_path
cygwin1.dll	839	cygwin_detach_dll
cygwin1.dll	841	cygwin_internal
cygwin1.dll	855	dirfd
cygwin1.dll	862	dll_dllcrt0
cygwin1.dll	903	euidaccess
cygwin1.dll	911	exit
cygwin1.dll	925	fchmod
cygwin1.dll	929	fclose
cygwin1.dll	940	fdopendir
cygwin1.dll	960	fflush
cygwin1.dll	992	fprintf
cygwin1.dll	995	fputs
cygwin1.dll	999	free
cygwin1.dll	1004	frexp
cygwin1.dll	1034	futimens
cygwin1.dll	1036	futimesat
cygwin1.dll	1039	fwrite
cygwin1.dll	1063	getenv
cygwin1.dll	1079	getline
cygwin1.dll	1086	getopt_long
cygwin1.dll	1088	getpagesize
cygwin1.dll	1117	gettimeofday
cygwin1.dll	1195	iswalnum
cygwin1.dll	1199	iswctype
cygwin1.dll	1202	iswlower
cygwin1.dll	1203	iswprint
cygwin1.dll	1205	iswspace
cygwin1.dll	1223	ldexp
cygwin1.dll	1233	linkat
cygwin1.dll	1277	malloc
cygwin1.dll	1285	mbrtowc
cygwin1.dll	1286	mbsinit
cygwin1.dll	1293	memchr
cygwin1.dll	1294	memcmp
cygwin1.dll	1295	memcpy
cygwin1.dll	1297	memmove
cygwin1.dll	1298	mempcpy
cygwin1.dll	1299	memset
cygwin1.dll	1300	mkdir
cygwin1.dll	1303	mkfifo
cygwin1.dll	1346	nl_langinfo
cygwin1.dll	1355	opendir
cygwin1.dll	1358	optarg
cygwin1.dll	1360	optind
cygwin1.dll	1363	pathconf
cygwin1.dll	1385	printf
cygwin1.dll	1386	program_invocation_name
cygwin1.dll	1387	program_invocation_short_name
cygwin1.dll	1469	putc_unlocked
cygwin1.dll	1471	putchar_unlocked
cygwin1.dll	1487	read
cygwin1.dll	1488	readdir
cygwin1.dll	1490	readlink
cygwin1.dll	1493	realloc
cygwin1.dll	1511	rename
cygwin1.dll	1662	snprintf
cygwin1.dll	1673	sprintf
cygwin1.dll	1684	stpcpy
cygwin1.dll	1686	strcasecmp
cygwin1.dll	1689	strchr
cygwin1.dll	1691	strcmp
cygwin1.dll	1693	strcpy
cygwin1.dll	1695	strdup
cygwin1.dll	1697	strerror_r
cygwin1.dll	1702	strlen
cygwin1.dll	1706	strncmp
cygwin1.dll	1709	strnlen
cygwin1.dll	1712	strrchr
cygwin1.dll	1734	symlink
cygwin1.dll	1774	tolower
cygwin1.dll	1775	toupper
cygwin1.dll	1777	towlower
cygwin1.dll	1778	towupper
cygwin1.dll	1789	umask
cygwin1.dll	1794	unlink
cygwin1.dll	1802	utimensat
cygwin1.dll	1803	utimes
cygwin1.dll	1843	wcrtomb
cygwin1.dll	1848	wcscoll
cygwin1.dll	1882	wctype
cygwin1.dll	1892	write
cygiconv-2.dll	4	libiconv
cygiconv-2.dll	5	libiconv_close
cygiconv-2.dll	6	libiconv_open
cygintl-8.dll	25	libintl_bindtextdomain
cygintl-8.dll	31	libintl_gettext
cygintl-8.dll	46	libintl_setlocale
cygintl-8.dll	47	libintl_textdomain
KERNEL32.dll	358	GetACP
KERNEL32.dll	529	GetModuleHandleA
KERNEL32.dll	577	GetProcAddress

show previews

offset	size	type	comment
0	164864	EXE	10/28/2011 04:00:20	#
15c1	15	HTM		#
28400	14	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 164878 bytes (162 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK