filenameProject1.exe
size7168 (0x1c00)
md569e578eab48c2104a7a42812ecfdbaa2
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x508545aa
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion5.0
SizeOfCode0x1000
SizeOfInitializedData0x1000
SizeOfUninitializedData0
AddressOfEntryPoint0x1018
BaseOfCode0x1000
BaseOfData0x2000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x9000
SizeOfHeaders0x600
CheckSum0
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland C++ for Win32 1999

Sections

namevavsizeraw sizeflags
.text0x10000x10000x600R-X CODE
.data0x20000x10000x200RW- IDATA
.tls0x30000x10000x200RW- IDATA
.rdata0x40000x10000x200R-- IDATA SHARED
.idata0x50000x10000x400R-- IDATA
.edata0x60000x10000x200R-- IDATA
.rsrc0x70000x10000x200R-- IDATA
.reloc0x80000x10000x200R-- IDATA SHARED

Data Directory

typevasize
EXPORT0x60000x6c
IMPORT0x50000x3c4
RESOURCE0x70000x200
EXCEPTION00
SECURITY00
BASERELOC0x80000xd0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x40000x18
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4030000x40309c0x40209f0x40401000
typenamesizecp
RCDATADVCLAL160
module_namehintordfunction_name
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLGetProcessHeap
KERNEL32.DLLHeapAlloc
KERNEL32.DLLHeapFree
USER32.DLLMessageBoxA
CC32100.DLL_InitTermAndUnexPtrs()

@_InitTermAndUnexPtrs$qv

CC32100.DLL___CRTL_MEM_UseBorMM
CC32100.DLL___CRTL_TLS_Alloc
CC32100.DLL___CRTL_TLS_ExitThread
CC32100.DLL___CRTL_TLS_Free
CC32100.DLL___CRTL_TLS_GetValue
CC32100.DLL___CRTL_TLS_InitThread
CC32100.DLL___CRTL_TLS_SetValue
CC32100.DLL__argc
CC32100.DLL__argv
CC32100.DLL__argv_default_expand
CC32100.DLL__exitargv
CC32100.DLL__handle_exitargv
CC32100.DLL__handle_setargv
CC32100.DLL__handle_wexitargv
CC32100.DLL__handle_wsetargv
CC32100.DLL__matherr
CC32100.DLL__matherrl
CC32100.DLL__setargv
CC32100.DLL__startup
CC32100.DLL__wargv_default_expand
CC32100.DLL_gets
CC32100.DLL_memcpy
CC32100.DLL_printf
CC32100.DLL_strcat
CC32100.DLL_strcpy
CC32100.DLL_wcscpy
ordentry_vafunction_name
10x1071__GetExceptDLLinfo
20x20ac___CPPdebugHook
module_nameProject1.exe
flags0
timestamp0
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x6030
Functions(2)0x6028
NameOrdinals(2)0x6038
offsetsizetypecomment
07168EXE10/22/2012 13:10:02#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK