BlankDesktopApplication (VS2019 Preview 16.8-pre1) x86.exe

info
MZ
PE
resources
strings
imports
foremost
hexdump
disasm
log
discuss
donate

filename	BlankDesktopApplication (VS2019 Preview 16.8-pre1) x86.exe
size	104960 (0x19a00)
md5	742b4a78206366e2de70e2c0c312d32b

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
147	30729	10
257	28920	2
261	28920	19
260	28920	12
259	28920	1
257	28900	5
1	0	64
265	29115	1
255	29115	1
151	0	1
258	29115	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5f2bb7c0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.28
SizeOfCode	0x1000
SizeOfInitializedData	0x18a00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x152b
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x1d000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xf9d	0x1000	R-X CODE
.rdata	0x2000	0xcaa	0xe00	R-- IDATA
.data	0x3000	0x520	0x200	RW- IDATA
.rsrc	0x4000	0x17330	0x17400	R-- IDATA
.reloc	0x1c000	0x18c	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x25bc	0xb4
RESOURCE	0x4000	0x17330
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1c000	0x18c
DEBUG	0x2140	0x70
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x21b0	0x40
Bound_IAT	0	0
IAT	0x2000	0x108
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	4442
ICON	#2	3752
ICON	#3	2216
ICON	#4	1384
ICON	#5	2315
ICON	#6	16936
ICON	#7	9640
ICON	#8	4264
ICON	#9	1128
ICON	#10	4442
ICON	#11	3752
ICON	#12	2216
ICON	#13	1384
ICON	#14	2315
ICON	#15	16936
ICON	#16	9640
ICON	#17	4264
ICON	#18	1128
MENU	#109	74
DIALOG	#103	476
STRING	#7	218
ACCELERATORS	#109	16
GROUP_ICON	#107	132
GROUP_ICON	#108	132
MANIFEST	#1	381

id	lang	string
103	1033	BlankDesktopApplication (VS2019 Preview 16.8-pre1)
109	1033	BLANKDESKTOPAPPLICATIONVS2019PREVIEW168PRE1

module_name	hint	function_name
USER32.dll	242	EndDialog
USER32.dll	118	CreateWindowExW
USER32.dll	728	RegisterClassExW
USER32.dll	167	DefWindowProcW
USER32.dll	391	GetMessageW
USER32.dll	590	LoadAcceleratorsW
USER32.dll	611	LoadStringW
USER32.dll	902	ShowWindow
USER32.dll	189	DispatchMessageW
USER32.dll	932	TranslateAcceleratorW
USER32.dll	934	TranslateMessage
USER32.dll	598	LoadIconW
USER32.dll	596	LoadCursorW
USER32.dll	682	PostQuitMessage
USER32.dll	186	DialogBoxParamW
USER32.dll	960	UpdateWindow
USER32.dll	17	BeginPaint
USER32.dll	181	DestroyWindow
USER32.dll	244	EndPaint
VCRUNTIME140.dll	28	__current_exception
VCRUNTIME140.dll	72	memset
VCRUNTIME140.dll	53	_except_handler4_common
VCRUNTIME140.dll	29	__current_exception_context
api-ms-win-crt-runtime-l1-1-0.dll	54	_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	62	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	31	_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	29	_controlfp_s
api-ms-win-crt-runtime-l1-1-0.dll	106	terminate
api-ms-win-crt-runtime-l1-1-0.dll	56	_initterm
api-ms-win-crt-runtime-l1-1-0.dll	37	_exit
api-ms-win-crt-runtime-l1-1-0.dll	22	_c_exit
api-ms-win-crt-runtime-l1-1-0.dll	49	_get_wide_winmain_command_line
api-ms-win-crt-runtime-l1-1-0.dll	55	_initialize_wide_environment
api-ms-win-crt-runtime-l1-1-0.dll	26	_configure_wide_argv
api-ms-win-crt-runtime-l1-1-0.dll	23	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	68	_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll	66	_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll	63	_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll	88	exit
api-ms-win-crt-runtime-l1-1-0.dll	57	_initterm_e
api-ms-win-crt-math-l1-1-0.dll	46	__setusermatherr
api-ms-win-crt-stdio-l1-1-0.dll	1	__p__commode
api-ms-win-crt-stdio-l1-1-0.dll	84	_set_fmode
api-ms-win-crt-locale-l1-1-0.dll	8	_configthreadlocale
api-ms-win-crt-heap-l1-1-0.dll	22	_set_new_mode
KERNEL32.dll	1458	UnhandledExceptionFilter
KERNEL32.dll	1394	SetUnhandledExceptionFilter
KERNEL32.dll	537	GetCurrentProcess
KERNEL32.dll	1425	TerminateProcess
KERNEL32.dll	906	IsProcessorFeaturePresent
KERNEL32.dll	1104	QueryPerformanceCounter
KERNEL32.dll	538	GetCurrentProcessId
KERNEL32.dll	542	GetCurrentThreadId
KERNEL32.dll	747	GetSystemTimeAsFileTime
KERNEL32.dll	871	InitializeSListHead
KERNEL32.dll	899	IsDebuggerPresent
KERNEL32.dll	722	GetStartupInfoW
KERNEL32.dll	634	GetModuleHandleW

show previews

offset	size	type	comment
0	104960	EXE	08/06/2020 07:56:48	#
15c1	15	HTM		#
2970	4442	PNG	(256 x 256)	#
5788	2315	PNG	(256 x 256)	#
de00	4442	PNG	(256 x 256)	#
10c18	2315	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER