deupx_ipz.exe_

info
MZ
PE
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	deupx_ipz.exe__
size	672368 (0xa4270)
md5	6a3ff8408ebe58070e6cf2f054e33206

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
96	3077	2
105	2067	11
15	3077	28
93	2067	2
19	9049	2
0	0	9
1	0	195
93	2179	11
95	3077	512
90	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4c9d2f21
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x71000
SizeOfInitializedData	0x32000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x6555b
BaseOfCode	0x1000
BaseOfData	0x72000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xa9000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x70d28	0x71000	R-X CODE
.rdata	0x72000	0x2c03a	0x2d000	R-- IDATA
.data	0x9f000	0x94a8	0x5000	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x9d0c8	0xa0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x9d018	0x48
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	ord	function_name
KERNEL32.DLL		GetTickCount
KERNEL32.DLL		MultiByteToWideChar
KERNEL32.DLL		WideCharToMultiByte
KERNEL32.DLL		InterlockedIncrement
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetVersion
KERNEL32.DLL		GetFileType
KERNEL32.DLL		GetStdHandle
KERNEL32.DLL		QueryPerformanceCounter
KERNEL32.DLL		FreeLibrary
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetVersionExA
KERNEL32.DLL		GetSystemTime
KERNEL32.DLL		GetLocalTime
KERNEL32.DLL		WaitForSingleObject
KERNEL32.DLL		ReleaseMutex
KERNEL32.DLL		OutputDebugStringA
KERNEL32.DLL		CreateMutexA
KERNEL32.DLL		CloseHandle
KERNEL32.DLL		SetEndOfFile
KERNEL32.DLL		GlobalMemoryStatus
KERNEL32.DLL		GetCurrentProcessId
KERNEL32.DLL		GetCurrentThreadId
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		GetTempPathA
KERNEL32.DLL		GetTempFileNameA
KERNEL32.DLL		CreateProcessA
KERNEL32.DLL		WaitForMultipleObjects
KERNEL32.DLL		TerminateThread
KERNEL32.DLL		CreateThread
KERNEL32.DLL		UnmapViewOfFile
KERNEL32.DLL		CreateFileA
KERNEL32.DLL		GetLastError
KERNEL32.DLL		GetModuleFileNameA
KERNEL32.DLL		SetConsoleCtrlHandler
KERNEL32.DLL		Sleep
KERNEL32.DLL		GetFileSize
KERNEL32.DLL		CreateFileMappingA
KERNEL32.DLL		FlushConsoleInputBuffer
KERNEL32.DLL		MapViewOfFile
KERNEL32.DLL		DeleteFileA
KERNEL32.DLL		FileTimeToSystemTime
KERNEL32.DLL		FileTimeToLocalFileTime
KERNEL32.DLL		GetFileInformationByHandle
KERNEL32.DLL		PeekNamedPipe
KERNEL32.DLL		FindClose
KERNEL32.DLL		GetDriveTypeA
KERNEL32.DLL		FindFirstFileA
KERNEL32.DLL		GetFullPathNameA
KERNEL32.DLL		GetCurrentDirectoryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		HeapFree
KERNEL32.DLL		HeapAlloc
KERNEL32.DLL		GetSystemTimeAsFileTime
KERNEL32.DLL		HeapReAlloc
KERNEL32.DLL		GetCommandLineA
KERNEL32.DLL		EnterCriticalSection
KERNEL32.DLL		LeaveCriticalSection
KERNEL32.DLL		TerminateProcess
KERNEL32.DLL		GetCurrentProcess
KERNEL32.DLL		RtlUnwind
KERNEL32.DLL		ReadConsoleInputA
KERNEL32.DLL		SetConsoleMode
KERNEL32.DLL		GetConsoleMode
KERNEL32.DLL		ExitThread
KERNEL32.DLL		ResumeThread
KERNEL32.DLL		HeapDestroy
KERNEL32.DLL		HeapCreate
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		DeleteCriticalSection
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		WriteFile
KERNEL32.DLL		ReadFile
KERNEL32.DLL		UnhandledExceptionFilter
KERNEL32.DLL		FreeEnvironmentStringsA
KERNEL32.DLL		GetEnvironmentStrings
KERNEL32.DLL		FreeEnvironmentStringsW
KERNEL32.DLL		GetEnvironmentStringsW
KERNEL32.DLL		SetHandleCount
KERNEL32.DLL		GetStartupInfoA
KERNEL32.DLL		TlsAlloc
KERNEL32.DLL		SetLastError
KERNEL32.DLL		TlsFree
KERNEL32.DLL		TlsSetValue
KERNEL32.DLL		TlsGetValue
KERNEL32.DLL		GetTimeZoneInformation
KERNEL32.DLL		InterlockedExchange
KERNEL32.DLL		VirtualQuery
KERNEL32.DLL		SetStdHandle
KERNEL32.DLL		SetFilePointer
KERNEL32.DLL		FlushFileBuffers
KERNEL32.DLL		LCMapStringA
KERNEL32.DLL		LCMapStringW
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		GetSystemInfo
KERNEL32.DLL		InitializeCriticalSection
KERNEL32.DLL		GetACP
KERNEL32.DLL		GetOEMCP
KERNEL32.DLL		GetCPInfo
KERNEL32.DLL		GetStringTypeA
KERNEL32.DLL		GetStringTypeW
KERNEL32.DLL		GetLocaleInfoA
KERNEL32.DLL		CompareStringA
KERNEL32.DLL		CompareStringW
KERNEL32.DLL		SetEnvironmentVariableA
KERNEL32.DLL		HeapSize
KERNEL32.DLL		CreateFileW
ADVAPI32.dll		CryptSignHashA
ADVAPI32.dll		CryptAcquireContextA
ADVAPI32.dll		CryptGetProvParam
ADVAPI32.dll		CryptDestroyKey
ADVAPI32.dll		CryptReleaseContext
ADVAPI32.dll		CryptEnumProvidersA
ADVAPI32.dll		SetServiceStatus
ADVAPI32.dll		RegisterEventSourceA
ADVAPI32.dll		ReportEventA
ADVAPI32.dll		DeregisterEventSource
ADVAPI32.dll		OpenServiceA
ADVAPI32.dll		ControlService
ADVAPI32.dll		CryptDecrypt
ADVAPI32.dll		CryptCreateHash
ADVAPI32.dll		CryptSetHashParam
ADVAPI32.dll		CryptGetUserKey
ADVAPI32.dll		CryptDestroyHash
ADVAPI32.dll		CryptExportKey
ADVAPI32.dll		DeleteService
ADVAPI32.dll		OpenSCManagerA
ADVAPI32.dll		CreateServiceA
ADVAPI32.dll		StartServiceA
ADVAPI32.dll		CloseServiceHandle
ADVAPI32.dll		StartServiceCtrlDispatcherA
ADVAPI32.dll		RegisterServiceCtrlHandlerExA
CRYPT32.dll		CertGetCertificateContextProperty
CRYPT32.dll		CertOpenStore
CRYPT32.dll		CertEnumCertificatesInStore
CRYPT32.dll		CertCloseStore
CRYPT32.dll		CertDuplicateCertificateContext
CRYPT32.dll		CertFindCertificateInStore
CRYPT32.dll		CertFreeCertificateContext
GDI32.dll		CreateCompatibleDC
GDI32.dll		DeleteObject
GDI32.dll		GetDIBits
GDI32.dll		CreateDCA
GDI32.dll		DeleteDC
GDI32.dll		GetDeviceCaps
GDI32.dll		CreateCompatibleBitmap
GDI32.dll		SelectObject
GDI32.dll		BitBlt
ICMP.dll		IcmpCreateFile
ICMP.dll		IcmpCloseHandle
ICMP.dll		IcmpSendEcho
USER32.dll		MessageBoxA
USER32.dll		GetProcessWindowStation
USER32.dll		GetUserObjectInformationW
USER32.dll		GetDesktopWindow
USER32.dll		GetWindowRect
USER32.dll		GetCursorPos
USER32.dll		EnumDisplayDevicesA
WS2_32.dll	116
WS2_32.dll	115
WS2_32.dll	1
WS2_32.dll	14
WS2_32.dll	15
WS2_32.dll	2
WS2_32.dll	13
WS2_32.dll	16
WS2_32.dll	19
WS2_32.dll	23
WS2_32.dll	10
WS2_32.dll	8
WS2_32.dll	9
WS2_32.dll	4
WS2_32.dll	111
WS2_32.dll	18
WS2_32.dll	151
WS2_32.dll	3

show previews

offset	size	type	comment
0	671744	EXE	09/24/2010 23:07:13	#
15c1	15	HTM		#
a4000	624	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 672368 bytes (657 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

deupx_ipz.exe__

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory