filenamea5v_37.exe
size285599 (0x45b9f)
md56022ec27e3a03f76e3d0858baf4d24e7
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
2232100528
2252100569
22421005204
2036550113
10133
229311014
219210051
222311011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5ddcd043
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x23e00
SizeOfInitializedData0x24600
SizeOfUninitializedData0
AddressOfEntryPoint0xf108
BaseOfCode0x1000
BaseOfData0x25000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x4b000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x23c270x23e00R-X CODE
.rdata0x250000x1ce6a0x1d000R-- IDATA
.data0x420000x48280x1c00RW- IDATA
.rsrc0x470000x1e00x200R-- IDATA
.reloc0x480000x29340x2a00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x413c40x8c
RESOURCE0x470000x1e0
EXCEPTION00
SECURITY00
BASERELOC0x480000x2934
DEBUG0x252a00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3fab00x40
Bound_IAT00
IAT0x250000x1f0
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#13810
module_namehintordfunction_name
DSOUND.dll1
DDRAW.dll7DirectDrawCreate
KERNEL32.dll939LoadResource
KERNEL32.dll127CloseHandle
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll476GetConsoleCP
KERNEL32.dll402FlushFileBuffers
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll551GetEnvironmentStringsW
KERNEL32.dll413FreeEnvironmentStringsW
KERNEL32.dll420GetACP
KERNEL32.dll882IsValidCodePage
KERNEL32.dll646GetOEMCP
KERNEL32.dll822HeapReAlloc
KERNEL32.dll935LoadLibraryExW
KERNEL32.dll1018OutputDebugStringW
KERNEL32.dll1102ReadConsoleW
KERNEL32.dll1314SetStdHandle
KERNEL32.dll1504WriteConsoleW
KERNEL32.dll194CreateFileW
KERNEL32.dll1258SetEndOfFile
KERNEL32.dll1070QueryPerformanceFrequency
KERNEL32.dll612GetModuleHandleA
KERNEL32.dll957LockResource
KERNEL32.dll494GetConsoleMode
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll390FindResourceA
KERNEL32.dll610GetModuleFileNameA
KERNEL32.dll289EncodePointer
KERNEL32.dll254DecodePointer
KERNEL32.dll293EnterCriticalSection
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll1485WideCharToMultiByte
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll709GetStringTypeW
KERNEL32.dll592GetLastError
KERNEL32.dll819HeapFree
KERNEL32.dll815HeapAlloc
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll456GetCommandLineA
KERNEL32.dll1088RaiseException
KERNEL32.dll1197RtlUnwind
KERNEL32.dll435GetCPInfo
KERNEL32.dll1410UnhandledExceptionFilter
KERNEL32.dll1347SetUnhandledExceptionFilter
KERNEL32.dll1291SetLastError
KERNEL32.dll840InitializeCriticalSectionAndSpinCount
KERNEL32.dll1362Sleep
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll1377TerminateProcess
KERNEL32.dll1395TlsAlloc
KERNEL32.dll1397TlsGetValue
KERNEL32.dll1398TlsSetValue
KERNEL32.dll1396TlsFree
KERNEL32.dll702GetStartupInfoW
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll669GetProcAddress
KERNEL32.dll918LCMapStringW
KERNEL32.dll596GetLocaleInfoW
KERNEL32.dll884IsValidLocale
KERNEL32.dll764GetUserDefaultLCID
KERNEL32.dll327EnumSystemLocalesW
KERNEL32.dll674GetProcessHeap
KERNEL32.dll337ExitProcess
KERNEL32.dll614GetModuleHandleExW
KERNEL32.dll27AreFileApisANSI
KERNEL32.dll704GetStdHandle
KERNEL32.dll1505WriteFile
KERNEL32.dll611GetModuleFileNameW
KERNEL32.dll824HeapSize
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll574GetFileType
KERNEL32.dll1104ReadFile
KERNEL32.dll1277SetFilePointerEx
USER32.dll625PostQuitMessage
USER32.dll546LoadIconA
USER32.dll160DefWindowProcA
USER32.dll367GetMessageA
USER32.dll695SendMessageA
USER32.dll879WaitMessage
USER32.dll308GetDC
USER32.dll831TranslateMessage
USER32.dll795ShowCursor
USER32.dll323GetForegroundWindow
USER32.dll755SetRect
USER32.dll582MessageBoxA
USER32.dll112CreateWindowExA
USER32.dll619PeekMessageA
USER32.dll677ReleaseDC
USER32.dll311GetDesktopWindow
USER32.dll800ShowWindow
USER32.dll180DispatchMessageA
USER32.dll548LoadImageA
USER32.dll855UpdateWindow
USER32.dll647RegisterClassA
GDI32.dll19BitBlt
GDI32.dll772SetTextColor
GDI32.dll268DeleteDC
GDI32.dll61CreateFontA
GDI32.dll503GetDeviceCaps
GDI32.dll785StretchBlt
GDI32.dll732SetBkColor
GDI32.dll761SetPixel
GDI32.dll271DeleteObject
GDI32.dll725SelectObject
GDI32.dll49CreateCompatibleDC
GDI32.dll661Rectangle
GDI32.dll278Ellipse
GDI32.dll76CreatePen
GDI32.dll672RoundRect
GDI32.dll560GetPixel
GDI32.dll551GetObjectA
GDI32.dll569GetStockObject
GDI32.dll86CreateSolidBrush
GDI32.dll790TextOutA
ADVAPI32.dll192CryptAcquireContextA
offsetsizetypecomment
0285184EXE11/26/2019 07:12:03#
15c115HTM#
45a00415BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 285599 bytes (279 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK