filenameFuzzzzzzzzz.exe
size3831296 (0x3a7600)
md56317b3542ed2586228639cf933af95b2
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5eb7de91
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x23
Magic0x20b
LinkerVersion8.0
SizeOfCode0x4fa00
SizeOfInitializedData0x357800
SizeOfUninitializedData0
AddressOfEntryPoint0x3a800
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x3af000
SizeOfHeaders0x400
CheckSum0x3b04bd
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 8.0 (MFC)

Sections

namevavsizeraw sizeflags
.text0x10000x4f97a0x4fa00R-X CODE
.rdata0x510000x20cbc0x20e00R-- IDATA
.data0x720000xb3580x7e00RW- IDATA
.pdata0x7e0000x47400x4800R-- IDATA
.vmp00x830000x2ec0040x2ec200R-X CODE IDATA
.rsrc0x3700000x3e0fc0x3e200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x705a80xdc
RESOURCE0x3700000x3e0fc
EXCEPTION0x36a0300x4fd4
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x510000x730
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#142640
RCDATA#152482010
GROUP_ICON#32512200
VERSION#18480
MANIFEST#14900
module_namehintordfunction_name
KERNEL32.dll795SetEnvironmentVariableW
KERNEL32.dll814SetLastError
KERNEL32.dll559IsBadReadPtr
KERNEL32.dll903VirtualAlloc
KERNEL32.dll393GetNativeSystemInfo
KERNEL32.dll530HeapAlloc
KERNEL32.dll421GetProcessHeap
KERNEL32.dll536HeapFree
KERNEL32.dll476GetThreadLocale
KERNEL32.dll371GetLastError
KERNEL32.dll61CompareStringW
KERNEL32.dll54CloseHandle
KERNEL32.dll918WaitForSingleObject
KERNEL32.dll625MultiByteToWideChar
KERNEL32.dll797SetEvent
KERNEL32.dll326GetCurrentProcessId
KERNEL32.dll60CompareStringA
KERNEL32.dll231FindResourceExA
KERNEL32.dll325GetCurrentProcess
KERNEL32.dll692ReadProcessMemory
KERNEL32.dll689ReadFile
KERNEL32.dll246FormatMessageA
KERNEL32.dll86CreateFileA
KERNEL32.dll383GetModuleFileNameA
KERNEL32.dll802SetFilePointer
KERNEL32.dll82CreateEventA
KERNEL32.dll132DeleteCriticalSection
KERNEL32.dll549InitializeCriticalSection
KERNEL32.dll188ExitProcess
KERNEL32.dll408GetPrivateProfileIntA
KERNEL32.dll922WideCharToMultiByte
KERNEL32.dll493GetVolumeInformationA
KERNEL32.dll791SetEndOfFile
KERNEL32.dll937WriteConsoleW
KERNEL32.dll312GetConsoleOutputCP
KERNEL32.dll927WriteConsoleA
KERNEL32.dll241FlushFileBuffers
KERNEL32.dll829SetStdHandle
KERNEL32.dll447GetStringTypeW
KERNEL32.dll444GetStringTypeA
KERNEL32.dll577LCMapStringW
KERNEL32.dll576LCMapStringA
KERNEL32.dll671QueryPerformanceCounter
KERNEL32.dll276GetCommandLineW
KERNEL32.dll275GetCommandLineA
KERNEL32.dll346GetEnvironmentStringsW
KERNEL32.dll250FreeEnvironmentStringsW
KERNEL32.dll344GetEnvironmentStrings
KERNEL32.dll249FreeEnvironmentStringsA
KERNEL32.dll384GetModuleFileNameW
KERNEL32.dll484GetTimeZoneInformation
KERNEL32.dll310GetConsoleMode
KERNEL32.dll293GetConsoleCP
KERNEL32.dll441GetStartupInfoA
KERNEL32.dll361GetFileType
KERNEL32.dll810SetHandleCount
KERNEL32.dll571IsValidCodePage
KERNEL32.dll405GetOEMCP
KERNEL32.dll263GetCPInfo
KERNEL32.dll734RtlVirtualUnwind
KERNEL32.dll443GetStdHandle
KERNEL32.dll938WriteFile
KERNEL32.dll532HeapCreate
KERNEL32.dll541HeapSetInformation
KERNEL32.dll236FlsAlloc
KERNEL32.dll876TlsSetValue
KERNEL32.dll983lstrlenW
KERNEL32.dll974lstrcmpiW
KERNEL32.dll794SetEnvironmentVariableA
KERNEL32.dll562IsBadWritePtr
KERNEL32.dll908VirtualProtect
KERNEL32.dll910VirtualQuery
KERNEL32.dll973lstrcmpiA
KERNEL32.dll860Sleep
KERNEL32.dll251FreeLibrary
KERNEL32.dll481GetTickCount
KERNEL32.dll970lstrcmpA
KERNEL32.dll590LoadLibraryA
KERNEL32.dll418GetProcAddress
KERNEL32.dll385GetModuleHandleA
KERNEL32.dll513GlobalFree
KERNEL32.dll976lstrcpyA
KERNEL32.dll524GlobalUnlock
KERNEL32.dll982lstrlenA
KERNEL32.dll517GlobalLock
KERNEL32.dll506GlobalAlloc
KERNEL32.dll609LockResource
KERNEL32.dll595LoadResource
KERNEL32.dll589LeaveCriticalSection
KERNEL32.dll859SizeofResource
KERNEL32.dll155EnterCriticalSection
KERNEL32.dll230FindResourceA
KERNEL32.dll501GetWindowsDirectoryA
KERNEL32.dll329GetCurrentThreadId
KERNEL32.dll237FlsFree
KERNEL32.dll874TlsFree
KERNEL32.dll239FlsSetValue
KERNEL32.dll238FlsGetValue
KERNEL32.dll733RtlUnwindEx
KERNEL32.dll727RtlLookupFunctionEntry
KERNEL32.dll729RtlPcToFileHeader
KERNEL32.dll442GetStartupInfoW
KERNEL32.dll460GetSystemTimeAsFileTime
KERNEL32.dll720RtlCaptureContext
KERNEL32.dll565IsDebuggerPresent
KERNEL32.dll848SetUnhandledExceptionFilter
KERNEL32.dll884UnhandledExceptionFilter
KERNEL32.dll868TerminateProcess
KERNEL32.dll113CreateThread
KERNEL32.dll718ResumeThread
KERNEL32.dll189ExitThread
KERNEL32.dll455GetSystemInfo
KERNEL32.dll542HeapSize
KERNEL32.dll540HeapReAlloc
KERNEL32.dll534HeapDestroy
KERNEL32.dll374GetLocaleInfoA
KERNEL32.dll256GetACP
KERNEL32.dll491GetVersionExA
KERNEL32.dll675RaiseException
USER32.dll445LoadCursorA
USER32.dll351GetSystemMetrics
USER32.dll368GetWindowLongA
USER32.dll327GetParent
USER32.dll269GetCursorPos
USER32.dll272GetDesktopWindow
USER32.dll477MapWindowPoints
USER32.dll650SetWindowPos
USER32.dll574SendMessageA
USER32.dll604SetForegroundWindow
USER32.dll556ReleaseCapture
USER32.dll517PostMessageA
USER32.dll13BeginPaint
USER32.dll594SetCursor
USER32.dll376GetWindowRect
USER32.dll586SetClassLongA
USER32.dll557ReleaseDC
USER32.dll257GetClientRect
USER32.dll226FillRect
USER32.dll270GetDC
USER32.dll198EndDialog
USER32.dll153DestroyWindow
USER32.dll698UnregisterClassA
USER32.dll645SetWindowLongA
USER32.dll316GetMessageA
USER32.dll689TranslateMessage
USER32.dll734wsprintfA
USER32.dll462LoadStringA
USER32.dll482MessageBoxA
USER32.dll440KillTimer
USER32.dll200EndPaint
USER32.dll639SetTimer
USER32.dll82CreateDialogIndirectParamA
USER32.dll449LoadIconA
USER32.dll161DispatchMessageA
USER32.dll527PtInRect
USER32.dll182DrawIcon
GDI32.dll143DeleteObject
GDI32.dll58CreateFontIndirectA
GDI32.dll50CreateDIBSection
GDI32.dll80CreateSolidBrush
GDI32.dll461LineTo
GDI32.dll71CreatePen
GDI32.dll44CreateCompatibleBitmap
GDI32.dll542SetDIBColorTable
GDI32.dll18BitBlt
GDI32.dll590TextOutA
GDI32.dll438GetTextExtentPointA
GDI32.dll45CreateCompatibleDC
GDI32.dll534SetBkMode
GDI32.dll140DeleteDC
GDI32.dll421GetStockObject
GDI32.dll572SetTextColor
GDI32.dll405GetObjectA
GDI32.dll526SelectObject
GDI32.dll361GetDIBColorTable
GDI32.dll585StretchBlt
GDI32.dll465MoveToEx
ADVAPI32.dll465RegCreateKeyExA
ADVAPI32.dll516RegSetValueExA
ADVAPI32.dll503RegQueryValueExA
ADVAPI32.dll459RegCloseKey
ole32.dll64CoInitializeEx
ole32.dll135CreateStreamOnHGlobal
OLEAUT32.dll200
OLEAUT32.dll411
OLEAUT32.dll23
OLEAUT32.dll16
OLEAUT32.dll9
OLEAUT32.dll2
OLEAUT32.dll8
OLEAUT32.dll26
OLEAUT32.dll4
OLEAUT32.dll24
gdiplus.dll73GdipCreateBitmapFromStream
gdiplus.dll224GdipFree
gdiplus.dll608GdiplusStartup
gdiplus.dll33GdipAlloc
gdiplus.dll142GdipDisposeImage
gdiplus.dll165GdipDrawImageI
gdiplus.dll607GdiplusShutdown
gdiplus.dll41GdipBitmapUnlockBits
gdiplus.dll38GdipBitmapLockBits
gdiplus.dll72GdipCreateBitmapFromScan0
gdiplus.dll277GdipGetImagePalette
gdiplus.dll134GdipDeleteGraphics
gdiplus.dll278GdipGetImagePaletteSize
gdiplus.dll274GdipGetImageGraphicsContext
gdiplus.dll279GdipGetImagePixelFormat
gdiplus.dll275GdipGetImageHeight
gdiplus.dll284GdipGetImageWidth
gdiplus.dll49GdipCloneImage
MSIMG32.dll3TransparentBlt
MSIMG32.dllAlphaBlend
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA

StringTable 000004b0

Comments
CompanyNameMicrosoft
FileDescriptionFuzzzzzzzzz
FileVersion1.0.0.0
InternalNameFuzzzzzzzzz.exe
LegalCopyrightCopyright © Microsoft 2020
LegalTrademarks
OriginalFilenameFuzzzzzzzzz.exe
ProductNameFuzzzzzzzz
ProductVersion1.0.0.0
Assembly Version1.0.0.0

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d03825712BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK