SCP.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	SCP.exe
size	12800 (0x3200)
md5	7231c0b5b26b3e353164a4dc8a89878a

type	PE32 executable (Windows CE) ARM Thumb, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
95	4091	2
96	4091	2
93	4017	9
1	0	52
95	4237	3
96	4237	1
90	4017	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x1c2
NumberOfSections	3
TimeDateStamp	0x4589480f
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x12f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x2a00
SizeOfInitializedData	0x600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x338c
BaseOfCode	0x1000
BaseOfData	0x4000
ImageBase	0x10000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x6000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x28f8	0x2a00	R-X CODE
.data	0x4000	0x291	0x200	RW- IDATA
.pdata	0x5000	0xe8	0x200	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3674	0x64
RESOURCE	0	0
EXCEPTION	0x5000	0xe8
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x1000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x4000	0xe0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
WS2.dll	16		WSAGetLastError
COREDLL.dll		87
COREDLL.dll		63
COREDLL.dll		1068
COREDLL.dll		1018
COREDLL.dll		56
COREDLL.dll		1041
COREDLL.dll		1957
COREDLL.dll		180
COREDLL.dll		181
COREDLL.dll		167
COREDLL.dll		517
COREDLL.dll		1044
COREDLL.dll		1100
COREDLL.dll		1122
COREDLL.dll		1116
COREDLL.dll		1115
COREDLL.dll		516
COREDLL.dll		1417
COREDLL.dll		1047
COREDLL.dll		1065
COREDLL.dll		1064
COREDLL.dll		1404
COREDLL.dll		1124
COREDLL.dll		1403
COREDLL.dll		2031
COREDLL.dll		2046
COREDLL.dll		1054
COREDLL.dll		36
COREDLL.dll		537
COREDLL.dll		1645
COREDLL.dll		33
COREDLL.dll		193
sshCompat.dll	27		strdupUnicodeToAscii
sshCompat.dll	7		_mkdir
sshCompat.dll	5		_ftruncate
sshCompat.dll	8		_open
sshCompat.dll	3		_close
sshCompat.dll	9		_read
sshCompat.dll	13		_write
sshCompat.dll	4		_fdopen
sshCompat.dll			ConvertWindowsToUnixTime
sshCompat.dll	31		unicodeToAscii
sshCompat.dll	26		strdupAsciiToUnicode
sshCompat.dll	25		stat
sshCompat.dll	28		strerror
OpenBSDCompat.dll	2		BSDoptind
OpenBSDCompat.dll	1		BSDoptarg
OpenBSDCompat.dll	26		strlcpy
OpenBSDCompat.dll	13		fatal
OpenBSDCompat.dll			BSDgetopt
OpenBSDCompat.dll	20		snprintf

show previews

offset	size	type	comment
0	12800	EXE	12/20/2006 14:26:23	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK