filenameabyssws.exe
size1045504 (0xff400)
md578aeba40c0a015b575cf4e7f39bdc078
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1234031019
10276
1094031082
125403102
1134031048
124403101
120403101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections5
TimeDateStamp0x534819a6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x23
Magic0x20b
LinkerVersion8.0
SizeOfCode0x95400
SizeOfInitializedData0x69c00
SizeOfUninitializedData0
AddressOfEntryPoint0x95d90
BaseOfCode0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x106000
SizeOfHeaders0x400
CheckSum0x107bef
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000x952ae0x95400R-X CODE
.rdata0x970000x4c2c60x4c400R-- IDATA
.data0xe40000xd2e10xa600RW- IDATA
.pdata0xf20000xb9700xba00R-- IDATA
.rsrc0xfe0000x77e80x7800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xe18880xc8
RESOURCE0xfe0000x77e8
EXCEPTION0xf20000xb970
SECURITY00
BASERELOC00
DEBUG0x979100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x970000x8e8
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17441252
ICON#22961252
ICON#322161252
ICON#413841252
ICON#596401252
ICON#642641252
ICON#72961252
ICON#813841252
ICON#92961252
ICON#1013841252
ICON#112961252
ICON#1213841252
MENU#1111101252
MENU#1144581252
MENU#1481201252
DIALOG#1133481252
DIALOG#1151321252
DIALOG#1324081252
DIALOG#1404281252
DIALOG#1456541252
STRING#647041252
MESSAGETABLE#1281252
GROUP_ICON#102901252
GROUP_ICON#129341252
GROUP_ICON#130341252
GROUP_ICON#131341252
VERSION#17961252
MANIFEST#111651252
idlangstring
10091033Abyss Web Server
10101033Abyss Web Server
10111033Abyss Web Server [Halted]
10121033This computer software is protected by copyright laws and international treaties. Unauthorized distribution or reproduction of this software, or any portion of it, may result in severe civil and criminal penalties, and will be prosecuted to the maximum extent possible under law.
module_namehintordfunction_name
zlib1.dll13deflateInit2_
zlib1.dll9deflate
zlib1.dll12deflateEnd
KERNEL32.dll326GetCurrentProcessId
KERNEL32.dll814SetLastError
KERNEL32.dll191ExpandEnvironmentStringsA
KERNEL32.dll10AllocConsole
KERNEL32.dll848SetUnhandledExceptionFilter
KERNEL32.dll275GetCommandLineA
KERNEL32.dll642OpenProcess
KERNEL32.dll248FreeConsole
KERNEL32.dll868TerminateProcess
KERNEL32.dll353GetFileAttributesA
KERNEL32.dll982lstrlenA
KERNEL32.dll246FormatMessageA
KERNEL32.dll371GetLastError
KERNEL32.dll600LocalFree
KERNEL32.dll671QueryPerformanceCounter
KERNEL32.dll481GetTickCount
KERNEL32.dll329GetCurrentThreadId
KERNEL32.dll460GetSystemTimeAsFileTime
KERNEL32.dll884UnhandledExceptionFilter
KERNEL32.dll734RtlVirtualUnwind
KERNEL32.dll727RtlLookupFunctionEntry
KERNEL32.dll720RtlCaptureContext
KERNEL32.dll86CreateFileA
KERNEL32.dll373GetLocalTime
KERNEL32.dll418GetProcAddress
KERNEL32.dll590LoadLibraryA
KERNEL32.dll954__C_specific_handler
KERNEL32.dll910VirtualQuery
KERNEL32.dll562IsBadWritePtr
KERNEL32.dll559IsBadReadPtr
KERNEL32.dll385GetModuleHandleA
KERNEL32.dll869TerminateThread
KERNEL32.dll922WideCharToMultiByte
KERNEL32.dll875TlsGetValue
KERNEL32.dll876TlsSetValue
KERNEL32.dll874TlsFree
KERNEL32.dll873TlsAlloc
KERNEL32.dll365GetFullPathNameW
KERNEL32.dll802SetFilePointer
KERNEL32.dll364GetFullPathNameA
KERNEL32.dll213FindFirstFileA
KERNEL32.dll99CreateMutexA
KERNEL32.dll216FindFirstFileW
KERNEL32.dll356GetFileAttributesW
KERNEL32.dll223FindNextFileA
KERNEL32.dll224FindNextFileW
KERNEL32.dll786SetCurrentDirectoryW
KERNEL32.dll323GetCurrentDirectoryA
KERNEL32.dll324GetCurrentDirectoryW
KERNEL32.dll249FreeEnvironmentStringsA
KERNEL32.dll344GetEnvironmentStrings
KERNEL32.dll250FreeEnvironmentStringsW
KERNEL32.dll346GetEnvironmentStringsW
KERNEL32.dll348GetEnvironmentVariableW
KERNEL32.dll134DeleteFileA
KERNEL32.dll135DeleteFileW
KERNEL32.dll78CreateDirectoryA
KERNEL32.dll81CreateDirectoryW
KERNEL32.dll806SetFileTime
KERNEL32.dll865SystemTimeToFileTime
KERNEL32.dll458GetSystemTime
KERNEL32.dll791SetEndOfFile
KERNEL32.dll619MoveFileExA
KERNEL32.dll620MoveFileExW
KERNEL32.dll89CreateFileW
KERNEL32.dll378GetLogicalDrives
KERNEL32.dll589LeaveCriticalSection
KERNEL32.dll155EnterCriticalSection
KERNEL32.dll549InitializeCriticalSection
KERNEL32.dll132DeleteCriticalSection
KERNEL32.dll406GetOverlappedResult
KERNEL32.dll715ResetEvent
KERNEL32.dll920WaitNamedPipeA
KERNEL32.dll101CreateNamedPipeA
KERNEL32.dll916WaitForMultipleObjects
KERNEL32.dll255GenerateConsoleCtrlEvent
KERNEL32.dll653PeekNamedPipe
KERNEL32.dll108CreateProcessW
KERNEL32.dll591LoadLibraryExA
KERNEL32.dll592LoadLibraryExW
KERNEL32.dll251FreeLibrary
KERNEL32.dll484GetTimeZoneInformation
KERNEL32.dll200FileTimeToSystemTime
KERNEL32.dll199FileTimeToLocalFileTime
KERNEL32.dll702ReleaseMutex
KERNEL32.dll82CreateEventA
KERNEL32.dll428GetProcessTimes
KERNEL32.dll797SetEvent
KERNEL32.dll811SetHandleInformation
KERNEL32.dll54CloseHandle
KERNEL32.dll150DuplicateHandle
KERNEL32.dll104CreatePipe
KERNEL32.dll757SetConsoleCtrlHandler
KERNEL32.dll443GetStdHandle
KERNEL32.dll241FlushFileBuffers
KERNEL32.dll689ReadFile
KERNEL32.dll105CreateProcessA
KERNEL32.dll349GetExitCodeProcess
KERNEL32.dll938WriteFile
KERNEL32.dll918WaitForSingleObject
KERNEL32.dll383GetModuleFileNameA
KERNEL32.dll827SetProcessWorkingSetSize
KERNEL32.dll785SetCurrentDirectoryA
KERNEL32.dll860Sleep
KERNEL32.dll325GetCurrentProcess
KERNEL32.dll979lstrcpynA
KERNEL32.dll209FindClose
KERNEL32.dll441GetStartupInfoA
USER32.dll462LoadStringA
USER32.dll604SetForegroundWindow
USER32.dll347GetSubMenu
USER32.dll440KillTimer
USER32.dll683TrackPopupMenu
USER32.dll639SetTimer
USER32.dll594SetCursor
USER32.dll59CheckRadioButton
USER32.dll422IsDlgButtonChecked
USER32.dll56CheckDlgButton
USER32.dll227FindWindowA
USER32.dll302GetMenu
USER32.dll379GetWindowTextA
USER32.dll482MessageBoxA
USER32.dll194EnableMenuItem
USER32.dll275GetDlgItem
USER32.dll457LoadMenuA
USER32.dll269GetCursorPos
USER32.dll314GetMenuStringA
USER32.dll665ShowWindow
USER32.dll184DrawMenuBar
USER32.dll517PostMessageA
USER32.dll558RemoveMenu
USER32.dll231FlashWindow
USER32.dll612SetMenuDefaultItem
USER32.dll400InsertMenuA
USER32.dll653SetWindowTextA
USER32.dll451LoadImageA
USER32.dll196EnableWindow
USER32.dll151DestroyMenu
USER32.dll445LoadCursorA
USER32.dll158DialogBoxParamA
USER32.dll150DestroyIcon
USER32.dll490ModifyMenuA
USER32.dll380GetWindowTextLengthA
USER32.dll574SendMessageA
USER32.dll198EndDialog
USER32.dll554RegisterWindowMessageA
ADVAPI32.dll516RegSetValueExA
ADVAPI32.dll293GetUserNameW
ADVAPI32.dll66ControlService
ADVAPI32.dll465RegCreateKeyExA
ADVAPI32.dll472RegDeleteValueA
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll492RegOpenKeyExA
ADVAPI32.dll586StartServiceCtrlDispatcherA
ADVAPI32.dll524RegisterServiceCtrlHandlerA
ADVAPI32.dll478RegEnumKeyExA
ADVAPI32.dll481RegEnumValueA
ADVAPI32.dll431OpenServiceA
ADVAPI32.dll62CloseServiceHandle
ADVAPI32.dll521RegisterEventSourceA
ADVAPI32.dll175DeleteService
ADVAPI32.dll100CreateServiceA
ADVAPI32.dll176DeregisterEventSource
ADVAPI32.dll468RegDeleteKeyA
ADVAPI32.dll54ChangeServiceConfigA
ADVAPI32.dll532ReportEventA
ADVAPI32.dll451QueryServiceStatus
ADVAPI32.dll580SetServiceStatus
ADVAPI32.dll429OpenSCManagerA
ADVAPI32.dll446QueryServiceConfigA
ADVAPI32.dll503RegQueryValueExA
SHELL32.dll263ShellExecuteA
SHELL32.dll265ShellExecuteExA
SHELL32.dll275Shell_NotifyIconA
ole32.dll63CoInitialize
msvcrt.dll631isalpha
msvcrt.dll560abort
msvcrt.dll724strtod
msvcrt.dll718strncmp
msvcrt.dll688rand
msvcrt.dll739toupper
msvcrt.dll654isxdigit
msvcrt.dll467_vsnprintf
msvcrt.dll717strncat
msvcrt.dll633isdigit
msvcrt.dll432_strnicmp
msvcrt.dll727strtoul
msvcrt.dll723strstr
msvcrt.dll726strtol
msvcrt.dll721strrchr
msvcrt.dll219_getcwd
msvcrt.dll689realloc
msvcrt.dll738tolower
msvcrt.dll347_mbsrchr
msvcrt.dll126_beginthreadex
msvcrt.dll163_endthreadex
msvcrt.dll672memmove
msvcrt.dll671memcpy
msvcrt.dll673memset
msvcrt.dll669memchr
msvcrt.dll707sscanf
msvcrt.dll686qsort
msvcrt.dll640isupper
msvcrt.dll706srand
msvcrt.dll696setlocale
msvcrt.dll481_wcsnicmp
msvcrt.dll759wcsncmp
msvcrt.dll624getenv
msvcrt.dll715strftime
msvcrt.dll166_errno
msvcrt.dll608fputs
msvcrt.dll664longjmp
msvcrt.dll399_setjmp
msvcrt.dll710strcmp
msvcrt.dll670memcmp
msvcrt.dll716strlen
msvcrt.dll575bsearch
msvcrt.dll54_XcptFilter
msvcrt.dll127_c_exit
msvcrt.dll175_exit
msvcrt.dll130_cexit
msvcrt.dll112_acmdln
msvcrt.dll81__getmainargs
msvcrt.dll244_initterm
msvcrt.dll98__setusermatherr
msvcrt.dll142_commode
msvcrt.dll198_fmode
msvcrt.dll96__set_app_type
msvcrt.dll78__dllonexit
msvcrt.dll366_onexit
msvcrt.dll428_stricmp
msvcrt.dll735time
msvcrt.dll719strncpy
msvcrt.dll606fprintf
msvcrt.dll639isspace
msvcrt.dll426_strdup
msvcrt.dll406_snprintf
msvcrt.dll573atoi
msvcrt.dll328_mbsnbcat
msvcrt.dll612free
msvcrt.dll332_mbsnbcpy
msvcrt.dll703sprintf
msvcrt.dll588exit
msvcrt.dll683puts
msvcrt.dll245_iob
msvcrt.dll680printf
msvcrt.dll598fgets
msvcrt.dll709strchr
msvcrt.dll665malloc
msvcrt.dll630isalnum
WSOCK32.dll15
WSOCK32.dll6
WSOCK32.dll12
WSOCK32.dll18
WSOCK32.dll111
WSOCK32.dll151
WSOCK32.dll13
WSOCK32.dll2
WSOCK32.dll9
WSOCK32.dll4
WSOCK32.dll16
WSOCK32.dll19
WSOCK32.dll22
WSOCK32.dll21
WSOCK32.dll3
WSOCK32.dll23
WSOCK32.dll14
WSOCK32.dll115
WSOCK32.dll116
WSOCK32.dll1
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA

StringTable 040904b0

CompanyNameAprelium
FileDescriptionAbyss Web Server X1
FileVersion2. 9. 3. 2
InternalNameabyssws
LegalCopyrightCopyright © Aprelium 2001-2014 - All rights reserved
OriginalFilenameabyssws.exe
ProductNameAbyss Web Server X1
ProductVersion2. 9. 3. 2

VS_FIXEDFILEINFO

FileVersion2.9.3.2
ProductVersion2.9.3.2
StrucVersion0x10000
FileFlagsMask0x1f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
96d36211120HTM#
ca5e6216602BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK