filenameTestProject.exe
size58368 (0xe400)
md561e336997983ba3427962922e76d0e2f
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
147307292
149307291
1313072921
132307292
123507277
1063
138307292
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x517a8f63
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0xe00
SizeOfInitializedData0xd200
SizeOfUninitializedData0
AddressOfEntryPoint0x16c8
BaseOfCode0x1000
BaseOfData0x2000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x12000
SizeOfHeaders0x400
CheckSum0x12f27
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000xc0e0xe00R-X CODE
.rdata0x20000x81e0xa00R-- IDATA
.data0x30000x5280x200RW- IDATA
.rsrc0x40000xc1a00xc200R-- IDATA
.reloc0x110000x2880x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x224c0x64
RESOURCE0x40000xc1a0
EXCEPTION00
SECURITY00
BASERELOC0x110000x190
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x21880x40
Bound_IAT00
IAT0x20000x10c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17441252
ICON#22961252
ICON#337521252
ICON#422161252
ICON#513841252
ICON#696401252
ICON#742641252
ICON#811281252
ICON#97441252
ICON#102961252
ICON#1137521252
ICON#1222161252
ICON#1313841252
ICON#1496401252
ICON#1542641252
ICON#1611281252
MENU#109741252
DIALOG#1034241252
STRING#7761252
ACCELERATORS#109161252
GROUP_ICON#1071181252
GROUP_ICON#1081181252
MANIFEST#15981252
idlangstring
1031033TestProject
1091033TESTPROJECT
module_namehintordfunction_name
SHLWAPI.dll279StrCmpIW
USER32.dll776wsprintfW
USER32.dll290GetDlgItemTextW
USER32.dll544PostQuitMessage
USER32.dll213EndPaint
USER32.dll14BeginPaint
USER32.dll150DefWindowProcW
USER32.dll160DestroyWindow
USER32.dll511MessageBoxW
USER32.dll166DialogBoxParamW
USER32.dll745UpdateWindow
USER32.dll211EndDialog
USER32.dll104CreateWindowExW
USER32.dll565RegisterClassExW
USER32.dll469LoadCursorW
USER32.dll471LoadIconW
USER32.dll169DispatchMessageW
USER32.dll725TranslateMessage
USER32.dll723TranslateAcceleratorW
USER32.dll334GetMessageW
USER32.dll463LoadAcceleratorsW
USER32.dll484LoadStringW
USER32.dll696ShowWindow
MSVCR90.dll319_controlfp_s
MSVCR90.dll523_invoke_watson
MSVCR90.dll371_except_handler4_common
MSVCR90.dll352_decode_pointer
MSVCR90.dll796_onexit
MSVCR90.dll630_lock
MSVCR90.dll150__dllonexit
MSVCR90.dll998_unlock
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll277_amsg_exit
MSVCR90.dll247__wgetmainargs
MSVCR90.dll300_cexit
MSVCR90.dll380_exit
MSVCR90.dll102_XcptFilter
MSVCR90.dll1228exit
MSVCR90.dll1066_wcmdln
MSVCR90.dll516_initterm
MSVCR90.dll517_initterm_e
MSVCR90.dll316_configthreadlocale
MSVCR90.dll227__setusermatherr
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll203__p__commode
MSVCR90.dll207__p__fmode
MSVCR90.dll362_encode_pointer
MSVCR90.dll224__set_app_type
MSVCR90.dll331_crt_debugger_hook
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll614GetTickCount
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll1069TerminateProcess
KERNEL32.dll570GetStartupInfoW
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll1057Sleep
KERNEL32.dll701InterlockedExchange
offsetsizetypecomment
058368EXE04/26/2013 14:29:55#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK