filenameTROUT.EXE
size33280 (0x8200)
md55ff79967b2e097e9383129839fba9d0e
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
1272911
1472991
10879711
487972
005
19803411
10135
1187995
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3a15717c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x3c00
SizeOfInitializedData0x8200
SizeOfUninitializedData0
AddressOfEntryPoint0x4910
BaseOfCode0x1000
BaseOfData0x5000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion4.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x3aa00x3c00R-X CODE
.rdata0x50000xd940xe00R-- IDATA
.data0x60000x4a6c0xc00RW- IDATA
.rsrc0xb0000x26280x2800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x52f40xa0
RESOURCE0xb0000x2628
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x50000x23c
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#10522160
ICON#17440
ICON#222160
MENU#1037800
MENU#135800
DIALOG#1133700
DIALOG#11812620
DIALOG#1234320
ACCELERATORS#143720
GROUP_ICON#113340
VERSION#18240
module_namehintordfunction_name
KERNEL32.dll770lstrcpyA
KERNEL32.dll308GetPrivateProfileIntA
KERNEL32.dll741WritePrivateProfileStringA
KERNEL32.dll314GetPrivateProfileStringA
KERNEL32.dll292GetModuleFileNameA
KERNEL32.dll85DeleteCriticalSection
KERNEL32.dll102EnterCriticalSection
KERNEL32.dll365GetTickCount
KERNEL32.dll403GlobalUnlock
KERNEL32.dll396GlobalLock
KERNEL32.dll385GlobalAlloc
KERNEL32.dll294GetModuleHandleA
KERNEL32.dll426InitializeCriticalSection
KERNEL32.dll773lstrcpynA
KERNEL32.dll718WaitForSingleObject
KERNEL32.dll336GetStartupInfoA
KERNEL32.dll449LeaveCriticalSection
KERNEL32.dll52CreateFileA
KERNEL32.dll739WritePrivateProfileSectionA
KERNEL32.dll27CloseHandle
KERNEL32.dll735WriteFile
USER32.dll259GetDlgItemInt
USER32.dll258GetDlgItem
USER32.dll527SendDlgItemMessageA
USER32.dll603SetWindowPos
USER32.dll555SetDlgItemInt
USER32.dll378InvalidateRect
USER32.dll260GetDlgItemTextA
USER32.dll22CallWindowProcA
USER32.dll342GetWindowLongA
USER32.dll79CreateDialogParamA
USER32.dll600SetWindowLongA
USER32.dll185EndDialog
USER32.dll60CloseClipboard
USER32.dll147DialogBoxParamA
USER32.dll414LoadIconA
USER32.dll467OpenClipboard
USER32.dll457MoveWindow
USER32.dll141DestroyMenu
USER32.dll132DefWindowProcA
USER32.dll532SendMessageA
USER32.dll405KillTimer
USER32.dll142DestroyWindow
USER32.dll499RegisterClassExA
USER32.dll52CheckMenuItem
USER32.dll89CreateWindowExA
USER32.dll570SetMenuItemInfoA
USER32.dll678WinHelpA
USER32.dll252GetCursorPos
USER32.dll480PostQuitMessage
USER32.dll322GetSubMenu
USER32.dll636TrackPopupMenu
USER32.dll639TranslateAcceleratorA
USER32.dll298GetMessageA
USER32.dll392IsDialogMessageA
USER32.dll606SetWindowTextA
USER32.dll642TranslateMessage
USER32.dll149DispatchMessageA
USER32.dll181EnableMenuItem
USER32.dll183EnableWindow
USER32.dll284GetMenu
USER32.dll559SetFocus
USER32.dll574SetParent
USER32.dll55ChildWindowFromPoint
USER32.dll657UpdateWindow
USER32.dll348GetWindowRect
USER32.dll410LoadCursorA
USER32.dll594SetTimer
USER32.dll399IsWindow
USER32.dll478PostMessageA
USER32.dll684wsprintfA
USER32.dll580SetRect
USER32.dll422LoadMenuA
USER32.dll406LoadAcceleratorsA
USER32.dll446MessageBoxA
USER32.dll618ShowWindow
USER32.dll547SetClipboardData
USER32.dll180EmptyClipboard
USER32.dll556SetDlgItemTextA
USER32.dll326GetSystemMetrics
GDI32.dll351GetStockObject
GDI32.dll83DeleteObject
GDI32.dll55CreateFontIndirectA
GDI32.dll77CreateSolidBrush
comdlg32.dllChooseColorA
comdlg32.dll11GetSaveFileNameA
WSOCK32.dll17
WSOCK32.dll16
WSOCK32.dll4
WSOCK32.dll111
WSOCK32.dll19
WSOCK32.dll12
WSOCK32.dll8
WSOCK32.dll2
WSOCK32.dll107
WSOCK32.dll116
WSOCK32.dll115
WSOCK32.dll3
WSOCK32.dll23
WSOCK32.dll101
WSOCK32.dll21
WSOCK32.dll20
WSOCK32.dll10
WSOCK32.dll52
WSOCK32.dll51
COMCTL32.dll67InitCommonControlsEx
COMCTL32.dll8CreateToolbarEx
COMCTL32.dll6
MSVCRT.dll606free
MSVCRT.dll627isdigit
MSVCRT.dll705strncpy
MSVCRT.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCRT.dll441_splitpath
MSVCRT.dll328_makepath
MSVCRT.dll166_beginthreadex
MSVCRT.dll690sprintf
MSVCRT.dll453_strnicmp
MSVCRT.dll576calloc
MSVCRT.dll732vsprintf
MSVCRT.dll211_exit
MSVCRT.dll308_itoa
MSVCRT.dll585exit
MSVCRT.dll143_acmdln
MSVCRT.dll72_XcptFilter
MSVCRT.dll271_initterm
MSVCRT.dll131__setusermatherr
MSVCRT.dll88__getmainargs
MSVCRT.dll106__p__commode
MSVCRT.dll111__p__fmode
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll202_except_handler3
MSVCRT.dll129__set_app_type
MSVCRT.dll183_controlfp
MSVCRT.dll695strchr
MSVCRT.dll456_strrev
MSVCRT.dll16void __cdecl operator delete(void *)

??3@YAXPAX@Z

StringTable 040904b0

Comments
CompanyNameFoundstone Inc.
FileDescriptiontrout
FileVersion2, 0, 0, 0
InternalNametrout
LegalCopyrightCopyright © 2000 FOundstone
LegalTrademarks
OriginalFilenametrout.exe
PrivateBuild
ProductName trout
ProductVersion2, 0, 0, 0
SpecialBuild

VS_FIXEDFILEINFO

FileVersion2.0.0.0
ProductVersion2.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
033280EXE11/17/2000 17:57:16#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK