nginx.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	nginx.exe
size	2688000 (0x290400)
md5	777d9d64e36615819864570989aaf20b

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
171	30319	45
158	30319	48
147	30729	13
1	0	209
170	30319	814
154	30319	1
157	30319	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x52b05189
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0x1f8200
SizeOfInitializedData	0xa6a00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x17a44a
BaseOfCode	0x1000
BaseOfData	0x1fa000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x2a2000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1f80b4	0x1f8200	R-X CODE
.rdata	0x1fa000	0x66f48	0x67000	R-- IDATA
.data	0x261000	0x288cc	0x19e00	RW- IDATA
.idata	0x28a000	0x1b01	0x1c00	RW- IDATA
.rsrc	0x28c000	0x99c	0xa00	R-- IDATA
.reloc	0x28d000	0x14821	0x14a00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x28a000	0x8c
RESOURCE	0x28c000	0x99c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x28d000	0x12144
DEBUG	0x1fad50	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x28a578	0x4ec
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	816
ICON	#2	304
ICON	#3	176
GROUP_ICON	NGINX	48

module_name	hint	ord	function_name
KERNEL32.dll	884		OpenEventA
KERNEL32.dll	479		GetExitCodeProcess
KERNEL32.dll	1271		WaitForMultipleObjects
KERNEL32.dll	390		GetCommandLineA
KERNEL32.dll	531		GetModuleFileNameA
KERNEL32.dll	181		CreateThread
KERNEL32.dll	1221		TlsAlloc
KERNEL32.dll	1224		TlsSetValue
KERNEL32.dll	475		GetEnvironmentVariableA
KERNEL32.dll	627		GetSystemInfo
KERNEL32.dll	675		GetVersionExA
KERNEL32.dll	1113		SetEvent
KERNEL32.dll	130		CreateEventA
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	1069		SetConsoleCtrlHandler
KERNEL32.dll	351		FreeConsole
KERNEL32.dll	1018		ReleaseMutex
KERNEL32.dll	892		OpenMutexA
KERNEL32.dll	155		CreateMutexA
KERNEL32.dll	1110		SetEnvironmentVariableA
KERNEL32.dll	148		CreateIoCompletionPort
KERNEL32.dll	606		GetQueuedCompletionStatus
KERNEL32.dll	1039		ResetEvent
KERNEL32.dll	1024		RemoveDirectoryA
KERNEL32.dll	1216		TerminateProcess
KERNEL32.dll	164		CreateProcessA
KERNEL32.dll	664		GetTimeZoneInformation
KERNEL32.dll	633		GetSystemTimeAsFileTime
KERNEL32.dll	1127		SetFilePointerEx
KERNEL32.dll	1107		SetEndOfFile
KERNEL32.dll	137		CreateFileMappingA
KERNEL32.dll	855		MapViewOfFile
KERNEL32.dll	487		GetFileAttributesExW
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	527		GetLongPathNameW
KERNEL32.dll	460		GetDiskFreeSpaceA
KERNEL32.dll	323		FindNextFileA
KERNEL32.dll	306		FindFirstFileA
KERNEL32.dll	1238		UnmapViewOfFile
KERNEL32.dll	1130		SetFileTime
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	960		ReadFile
KERNEL32.dll	349		FormatMessageA
KERNEL32.dll	586		GetProcessHeap
KERNEL32.dll	467		GetDriveTypeW
KERNEL32.dll	1316		WriteConsoleW
KERNEL32.dll	724		HeapSize
KERNEL32.dll	100		CompareStringW
KERNEL32.dll	1101		SetCurrentDirectoryW
KERNEL32.dll	447		GetCurrentDirectoryW
KERNEL32.dll	909		PeekNamedPipe
KERNEL32.dll	504		GetFullPathNameA
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	1048		RtlUnwind
KERNEL32.dll	343		FlushFileBuffers
KERNEL32.dll	410		GetConsoleCP
KERNEL32.dll	611		GetStartupInfoW
KERNEL32.dll	1135		SetHandleCount
KERNEL32.dll	474		GetEnvironmentStringsW
KERNEL32.dll	353		FreeEnvironmentStringsW
KERNEL32.dll	617		GetStringTypeW
KERNEL32.dll	780		IsValidLocale
KERNEL32.dll	1202		Sleep
KERNEL32.dll	1212		SwitchToThread
KERNEL32.dll	745		InterlockedCompareExchange
KERNEL32.dll	136		CreateFileA
KERNEL32.dll	1139		SetLastError
KERNEL32.dll	302		FindClose
KERNEL32.dll	612		GetStdHandle
KERNEL32.dll	492		GetFileInformationByHandle
KERNEL32.dll	749		InterlockedExchangeAdd
KERNEL32.dll	124		CreateDirectoryA
KERNEL32.dll	211		DeleteFileA
KERNEL32.dll	1159		SetStdHandle
KERNEL32.dll	453		GetCurrentThreadId
KERNEL32.dll	449		GetCurrentProcessId
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	446		GetCurrentDirectoryA
KERNEL32.dll	862		MoveFileA
KERNEL32.dll	514		GetLastError
KERNEL32.dll	1223		TlsGetValue
KERNEL32.dll	871		MultiByteToWideChar
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	533		GetModuleHandleA
KERNEL32.dll	674		GetVersion
KERNEL32.dll	499		GetFileType
KERNEL32.dll	659		GetTickCount
KERNEL32.dll	935		QueryPerformanceCounter
KERNEL32.dll	703		GlobalMemoryStatus
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	828		LoadLibraryA
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	342		FlushConsoleInputBuffer
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	281		ExitProcess
KERNEL32.dll	202		DecodePointer
KERNEL32.dll	719		HeapFree
KERNEL32.dll	715		HeapAlloc
KERNEL32.dll	747		InterlockedDecrement
KERNEL32.dll	751		InterlockedIncrement
KERNEL32.dll	661		GetTimeFormatA
KERNEL32.dll	454		GetDateFormatA
KERNEL32.dll	723		HeapSetInformation
KERNEL32.dll	238		EnterCriticalSection
KERNEL32.dll	825		LeaveCriticalSection
KERNEL32.dll	722		HeapReAlloc
KERNEL32.dll	748		InterlockedExchange
KERNEL32.dll	234		EncodePointer
KERNEL32.dll	293		FileTimeToSystemTime
KERNEL32.dll	292		FileTimeToLocalFileTime
KERNEL32.dll	466		GetDriveTypeA
KERNEL32.dll	307		FindFirstFileExA
KERNEL32.dll	949		ReadConsoleInputA
KERNEL32.dll	1085		SetConsoleMode
KERNEL32.dll	428		GetConsoleMode
KERNEL32.dll	907		PeekConsoleInputA
KERNEL32.dll	565		GetNumberOfConsoleInputEvents
KERNEL32.dll	1235		UnhandledExceptionFilter
KERNEL32.dll	1189		SetUnhandledExceptionFilter
KERNEL32.dll	768		IsDebuggerPresent
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	739		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	209		DeleteCriticalSection
KERNEL32.dll	288		FatalAppExitA
KERNEL32.dll	772		IsProcessorFeaturePresent
KERNEL32.dll	831		LoadLibraryW
KERNEL32.dll	518		GetLocaleInfoW
KERNEL32.dll	1222		TlsFree
KERNEL32.dll	452		GetCurrentThread
KERNEL32.dll	532		GetModuleFileNameW
KERNEL32.dll	717		HeapCreate
KERNEL32.dll	718		HeapDestroy
KERNEL32.dll	370		GetCPInfo
KERNEL32.dll	360		GetACP
KERNEL32.dll	567		GetOEMCP
KERNEL32.dll	778		IsValidCodePage
KERNEL32.dll	813		LCMapStringW
KERNEL32.dll	667		GetUserDefaultLCID
KERNEL32.dll	516		GetLocaleInfoA
KERNEL32.dll	269		EnumSystemLocalesA
USER32.dll	54		CharToOemBuffA
USER32.dll	526		MessageBoxA
USER32.dll	291		GetDesktopWindow
USER32.dll	360		GetProcessWindowStation
USER32.dll	395		GetUserObjectInformationW
ADVAPI32.dll	189		CryptEnumProvidersA
ADVAPI32.dll	179		CryptCreateHash
ADVAPI32.dll	219		DeregisterEventSource
ADVAPI32.dll	654		ReportEventA
ADVAPI32.dll	642		RegisterEventSourceA
ADVAPI32.dll	560		RegCloseKey
ADVAPI32.dll	637		RegSetValueExA
ADVAPI32.dll	568		RegCreateKeyExA
ADVAPI32.dll	204		CryptSetHashParam
ADVAPI32.dll	211		CryptSignHashA
ADVAPI32.dll	182		CryptDestroyHash
ADVAPI32.dll	191		CryptExportKey
ADVAPI32.dll	199		CryptGetUserKey
ADVAPI32.dll	176		CryptAcquireContextA
ADVAPI32.dll	198		CryptGetProvParam
ADVAPI32.dll	183		CryptDestroyKey
ADVAPI32.dll	203		CryptReleaseContext
ADVAPI32.dll	180		CryptDecrypt
WS2_32.dll		115
WS2_32.dll	54		WSAIoctl
WS2_32.dll	73		WSASend
WS2_32.dll	44		WSAGetOverlappedResult
WS2_32.dll	68		WSARecv
WS2_32.dll		10
WS2_32.dll		1
WS2_32.dll		4
WS2_32.dll		57
WS2_32.dll	82		WSASocketA
WS2_32.dll		21
WS2_32.dll		151
WS2_32.dll		3
WS2_32.dll		18
WS2_32.dll		16
WS2_32.dll		22
WS2_32.dll		112
WS2_32.dll		13
WS2_32.dll		6
WS2_32.dll		111
WS2_32.dll		7
WS2_32.dll	137		getaddrinfo
WS2_32.dll	136		freeaddrinfo
WS2_32.dll		15
WS2_32.dll		9
WS2_32.dll		14
WS2_32.dll		8
WS2_32.dll		2
WS2_32.dll		19
GDI32.dll	48		CreateCompatibleDC
GDI32.dll	459		GetDeviceCaps
GDI32.dll	631		SelectObject
GDI32.dll	507		GetObjectA
GDI32.dll	19		BitBlt
GDI32.dll	423		GetBitmapBits
GDI32.dll	230		DeleteObject
GDI32.dll	49		CreateDCA
GDI32.dll	227		DeleteDC
GDI32.dll	47		CreateCompatibleBitmap
CRYPT32.dll	18		CertCloseStore
CRYPT32.dll	44		CertEnumCertificatesInStore
CRYPT32.dll	53		CertFindCertificateInStore
CRYPT32.dll	87		CertOpenStore
CRYPT32.dll	70		CertGetCertificateContextProperty
CRYPT32.dll	64		CertFreeCertificateContext
CRYPT32.dll	37		CertDuplicateCertificateContext

show previews

offset	size	type	comment
0	2688000	EXE	12/17/2013 13:28:41	#
15c1	15	HTM		#
261eec	85	HTM		#
269f70	43	GIF	(1 x 1)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK