filenamesoft1.exe
size922112 (0xe1200)
md57255a35b6a44c0fce653e800f9c6c465
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
1473072921
10172
170303195
0017
154303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x54212b6a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion10.0
SizeOfCode0x6e800
SizeOfInitializedData0xe2a00
SizeOfUninitializedData0
AddressOfEntryPoint0x3ae20
BaseOfCode0x1000
BaseOfData0x70000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x154000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8001
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.textB�0x10000x6e7c40x6e800R-X CODE
.rdata60x700000x15b3c0x15c00R-- IDATA
.data�0x860000x88a600x18800RW- IDATA
.rsrc�0x10f0000x440d80x44200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x84b680xdc
RESOURCE0x10f0000x440d8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x700000x2d8
Delay_IAT00
CLR_Header00
typenamesizecp
BZ221W7W4#16276590
DE0MO#15276590
DGAIU49H7#21276590
FDA28D7#24276590
P8L0MJMV#19276590
Q06HUC0DK6#18276590
Q34Y3#20276590
QS0SQ8#23276590
RFWB9REL2#22276590
Y55O1H172#17276590
DIALOG#33100
VERSION#17320
module_namehintordfunction_name
ADVAPI32.dll81CheckTokenMembership
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll384IsTextUnicode
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll616RegQueryInfoKeyW
ole32.dll108CoUninitialize
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll1126SetFilePointer
KERNEL32.dll780IsValidLocale
KERNEL32.dll1135SetHandleCount
KERNEL32.dll717HeapCreate
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll675GetVersionExA
KERNEL32.dll136CreateFileA
KERNEL32.dll100CompareStringW
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll1358lstrlenW
KERNEL32.dll828LoadLibraryA
KERNEL32.dll960ReadFile
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll454GetDateFormatA
KERNEL32.dll1224TlsSetValue
KERNEL32.dll627GetSystemInfo
KERNEL32.dll698GlobalFree
KERNEL32.dll446GetCurrentDirectoryA
KERNEL32.dll1346lstrcmpW
KERNEL32.dll352FreeEnvironmentStringsA
KERNEL32.dll214DeleteFileW
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll706GlobalSize
KERNEL32.dll281ExitProcess
KERNEL32.dll456GetDateFormatW
KERNEL32.dll158CreateMutexW
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll334FindResourceW
KERNEL32.dll722HeapReAlloc
KERNEL32.dll831LoadLibraryW
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll1222TlsFree
KERNEL32.dll499GetFileType
KERNEL32.dll718HeapDestroy
KERNEL32.dll870MulDiv
KERNEL32.dll840LocalFree
KERNEL32.dll846LocalUnlock
KERNEL32.dll360GetACP
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll514GetLastError
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll715HeapAlloc
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll778IsValidCodePage
KERNEL32.dll391GetCommandLineW
KERNEL32.dll586GetProcessHeap
KERNEL32.dll719HeapFree
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll614GetStringTypeA
KERNEL32.dll676GetVersionExW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll466GetDriveTypeA
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll447GetCurrentDirectoryW
USER32.dll461IsDialogMessageW
USER32.dll648SetCursor
USER32.dll586RedrawWindow
USER32.dll640SetCapture
USER32.dll198DrawFrameControl
USER32.dll107CreatePopupMenu
USER32.dll654SetDlgItemInt
USER32.dll624ScrollWindow
USER32.dll30CallWindowProcW
USER32.dll425HideCaret
USER32.dll688SetScrollInfo
USER32.dll576PtInRect
USER32.dll290GetDCEx
USER32.dll300GetFocus
USER32.dll317GetKeyState
USER32.dll411GetWindowPlacement
USER32.dll636SendMessageW
USER32.dll264GetCapture
USER32.dll566PostMessageW
USER32.dll97CreateDialogIndirectParamW
USER32.dll250FindWindowW
USER32.dll218EndDialog
USER32.dll322GetKeyboardState
USER32.dll457IsChild
USER32.dll295GetDlgItem
USER32.dll274GetClassNameW
USER32.dll715SetWindowTextW
USER32.dll748SystemParametersInfoW
USER32.dll685SetPropW
USER32.dll34ChangeClipboardChain
USER32.dll156DefWindowProcW
USER32.dll689SetScrollPos
USER32.dll46CharLowerW
USER32.dll48CharNextExA
USER32.dll758TrackPopupMenu
USER32.dll579RealChildWindowFromPoint
USER32.dll658SetFocus
USER32.dll612ReleaseCapture
USER32.dll379GetSysColor
USER32.dll14BeginPaint
USER32.dll730ShowCursor
USER32.dll382GetSystemMetrics
USER32.dll28CallNextHookEx
USER32.dll64CheckMenuRadioItem
USER32.dll482IsZoomed
USER32.dll157DeferWindowPos
USER32.dll337GetMenuItemCount
USER32.dll708SetWindowLongW
USER32.dll812WindowFromPoint
USER32.dll256GetActiveWindow
USER32.dll613ReleaseDC
USER32.dll99CreateDialogParamW
USER32.dll503LoadMenuW
USER32.dll550OpenClipboard
USER32.dll158DeleteMenu
USER32.dll412GetWindowRect
USER32.dll656SetDlgItemTextW
USER32.dll294GetDlgCtrlID
USER32.dll378GetSubMenu
USER32.dll298GetDlgItemTextW
USER32.dll535ModifyMenuW
USER32.dll567PostQuitMessage
USER32.dll10AppendMenuW
USER32.dll199DrawIcon
USER32.dll288GetCursorPos
USER32.dll785UpdateWindow
USER32.dll563PeekMessageW
USER32.dll480IsWindowVisible
USER32.dll344GetMenuStringW
USER32.dll200DrawIconEx
USER32.dll709SetWindowPlacement
USER32.dll592RegisterClipboardFormatW
RASAPI32.dll8RasClearConnectionStatistics
SHELL32.dll27DragFinish
SHELL32.dll31DragQueryFileW
SHELL32.dll207SHGetMalloc
SHELL32.dll223SHGetSpecialFolderLocation
SHELL32.dll290ShellExecuteW
GDI32.dll509GetObjectW
GDI32.dll47CreateCompatibleBitmap
GDI32.dll425GetBkColor
GDI32.dll48CreateCompatibleDC
GDI32.dll41CreateBitmap
GDI32.dll516GetPixel
GDI32.dll230DeleteObject
GDI32.dll690StartPage
GDI32.dll545GetTextExtentPointW
GDI32.dll671SetROP2
GDI32.dll642SetBrushOrgEx
GDI32.dll67CreateHatchBrush
GDI32.dll688StartDocW
GDI32.dll617RestoreDC
GDI32.dll570MoveToEx
GDI32.dll293EnumFontFamiliesExW
PSAPI.DLLEmptyWorkingSet
COMCTL32.dll79ImageList_AddMasked
COMCTL32.dll146_TrackMouseEvent
COMCTL32.dll88ImageList_DragMove
COMCTL32.dll90ImageList_Draw
COMCTL32.dll100ImageList_GetImageCount
COMCTL32.dll83ImageList_Create
COMCTL32.dll94ImageList_EndDrag
SHLWAPI.dll149PathStripPathW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll137PathRemoveExtensionW

StringTable 040904E2

CompanyNameSamsung Software Center, Moscow
FileDescriptionR23RVa69
FileVersion0.9.8.8
InternalNamej5617PR.exe
LegalCopyrightCopyright 1 - 1988 - 2001
OriginalFilenamej5617PR.exe
ProductVersion0.9.8.8
ProductNameD045975

VS_FIXEDFILEINFO

FileVersion0.9.8.8
ProductVersion0.9.8.8
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0922112EXE09/23/2014 08:12:26#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK