filenamecalc.exe
size642053 (0x9cc05)
md578e4d94e6b2f664efadb0b3fd2a62f04
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
149210229
10367
1472102229
13221022129
1312102225
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x48ccbd34
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x4aa00
SizeOfInitializedData0x53200
SizeOfUninitializedData0
AddressOfEntryPoint0x3830b
BaseOfCode0x1000
BaseOfData0x4c000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.256
SubsystemVersion5.1
Reserved10
SizeOfImage0xa1000
SizeOfHeaders0x400
CheckSum0xa897b
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x4a99a0x4aa00R-X CODE
.data0x4c0000x431c0x3000RW- IDATA
.rsrc0x510000x4ab070x4ac00R-- IDATA
.reloc0x9c0000x41f60x4200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x49c1c0x12c
RESOURCE0x510000x4ab07
EXCEPTION00
SECURITY00
BASERELOC0x9c0000x3588
DEBUG0x16100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3d780x40
Bound_IAT0x2800x12c
IAT0x10000x594
Delay_IAT0x49bac0x40
CLR_Header00
typenamesizecp
IMAGE#15774650
IMAGE#16540860
IMAGE#17042340
IMAGE#17546250
IMAGE#18048730
IMAGE#20430480
IMAGE#20830520
IMAGE#21232170
IMAGE#21633380
IMAGE#21741910
IMAGE#21842290
IMAGE#21941100
IMAGE#22040650
IMAGE#96132350
IMAGE#9814700
IMAGE#9825870
IMAGE#9835180
IMAGE#300053440
IMAGE#301541540
IMAGE#304548150
IMAGE#305160380
IMAGE#306042900
IMAGE#307548150
IMAGE#309145500
IMAGE#310015450
IMAGE#310215180
IMAGE#31038530
IMAGE#31045930
IMAGE#310633980
IMAGE#310736050
IMAGE#310835080
IMAGE#310937610
MUI#12800
WEVT_TEMPLATE#147500
BITMAPIDT_BTN_STR_STATISTICS10640
BITMAP#96510640
BITMAP#97510640
BITMAP#97710640
BITMAP#97910640
BITMAP#98010640
BITMAP#98510640
BITMAP#310527400
ICON#17440
ICON#22960
ICON#316400
ICON#47440
ICON#52960
ICON#637520
ICON#722160
ICON#813840
ICON#9601750
ICON#1096400
ICON#1142640
ICON#1211280
ICON#1316400
ICON#147440
ICON#152960
ICON#1637520
ICON#1722160
ICON#1813840
ICON#19601750
ICON#2096400
ICON#2142640
ICON#2211280
ICON#238720
GROUP_ICONSC1460
GROUP_ICON#232340
GROUP_ICON#233200
GROUP_ICON#2341460
VERSION#18880
MANIFEST#111670
module_namehintordfunction_name
SHLWAPI.dll225
gdiplus.dll80GdipCreateBitmapFromScan0
gdiplus.dll95GdipCreateHBITMAPFromBitmap
gdiplus.dll130GdipCreateSolidFill
gdiplus.dll289GdipGetImageGraphicsContext
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll585GdipSetSmoothingMode
gdiplus.dll548GdipSetPageUnit
gdiplus.dll188GdipDrawLineI
gdiplus.dll155GdipDrawArcI
gdiplus.dll229GdipFillRectangleI
gdiplus.dll50GdipCloneBrush
gdiplus.dll152GdipDisposeImage
gdiplus.dll77GdipCreateBitmapFromHBITMAP
gdiplus.dll79GdipCreateBitmapFromResource
gdiplus.dll91GdipCreateFromHDC
gdiplus.dll184GdipDrawImageRectI
gdiplus.dll49GdipCloneBitmapAreaI
gdiplus.dll122GdipCreatePen1
gdiplus.dll138GdipDeleteBrush
gdiplus.dll33GdipAlloc
gdiplus.dll237GdipFree
gdiplus.dll629GdiplusStartup
gdiplus.dll628GdiplusShutdown
gdiplus.dll54GdipCloneImage
gdiplus.dll148GdipDeletePen
gdiplus.dll144GdipDeleteGraphics
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll598RegGetValueW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll270EventRegister
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll272EventWrite
ADVAPI32.dll271EventUnregister
OLEAUT32.dll150
OLEAUT32.dll7
OLEAUT32.dll8
OLEAUT32.dll9
OLEAUT32.dll6
OLEAUT32.dll2
ole32.dll16CoCreateInstance
ole32.dll62CoInitialize
ole32.dll108CoUninitialize
COMCTL32.dll392
COMCTL32.dll77ImageList_Add
COMCTL32.dll83ImageList_Create
COMCTL32.dll413
COMCTL32.dll410
COMCTL32.dll84ImageList_Destroy
ntdll.dll1370WinSqmAddToStream
KERNEL32.dll1291lstrlenA
KERNEL32.dll619GetStartupInfoA
KERNEL32.dll886OutputDebugStringA
KERNEL32.dll1125SetUnhandledExceptionFilter
KERNEL32.dll1136SizeofResource
KERNEL32.dll835LockResource
KERNEL32.dll818LoadResource
KERNEL32.dll332FindResourceW
KERNEL32.dll331FindResourceExW
KERNEL32.dll541GetModuleHandleW
KERNEL32.dll641GetSystemTime
KERNEL32.dll1052SetEvent
KERNEL32.dll538GetModuleHandleA
KERNEL32.dll1208WaitForSingleObject
KERNEL32.dll175CreateThread
KERNEL32.dll129CreateEventW
KERNEL32.dll978ResetEvent
KERNEL32.dll1280lstrcmpW
KERNEL32.dll718GlobalSize
KERNEL32.dll721GlobalUnlock
KERNEL32.dll714GlobalLock
KERNEL32.dll703GlobalAlloc
KERNEL32.dll853MulDiv
KERNEL32.dll707GlobalFindAtomW
KERNEL32.dll513GetLastError
KERNEL32.dll759InterlockedDecrement
KERNEL32.dll854MultiByteToWideChar
KERNEL32.dll514GetLocalTime
KERNEL32.dll454GetDateFormatW
KERNEL32.dll763InterlockedIncrement
KERNEL32.dll1257WritePrivateProfileStringW
KERNEL32.dll584GetPrivateProfileStringW
KERNEL32.dll1283lstrcmpiW
KERNEL32.dll516GetLocaleInfoEx
KERNEL32.dll587GetProcAddress
KERNEL32.dll816LoadLibraryW
KERNEL32.dll352FreeLibrary
KERNEL32.dll199DelayLoadFailureHook
KERNEL32.dll757InterlockedCompareExchange
KERNEL32.dll813LoadLibraryA
KERNEL32.dll825LocalFree
KERNEL32.dll828LocalReAlloc
KERNEL32.dll821LocalAlloc
KERNEL32.dll614GetProfileStringW
KERNEL32.dll1292lstrlenW
KERNEL32.dll97CompareStringW
KERNEL32.dll19ApplicationRecoveryInProgress
KERNEL32.dll1137Sleep
KERNEL32.dll18ApplicationRecoveryFinished
KERNEL32.dll946RegisterApplicationRecoveryCallback
KERNEL32.dll947RegisterApplicationRestart
KERNEL32.dll93CompareFileTime
KERNEL32.dll1148SystemTimeToFileTime
KERNEL32.dll653GetTempFileNameW
KERNEL32.dll489GetFileAttributesW
KERNEL32.dll291FileTimeToSystemTime
KERNEL32.dll207DeleteFileW
KERNEL32.dll139CreateFileW
KERNEL32.dll230EnterCriticalSection
KERNEL32.dll810LeaveCriticalSection
KERNEL32.dll750InitializeCriticalSection
KERNEL32.dll202DeleteCriticalSection
KERNEL32.dll685GetVersionExA
KERNEL32.dll916QueryPerformanceCounter
KERNEL32.dll669GetTickCount
KERNEL32.dll451GetCurrentThreadId
KERNEL32.dll447GetCurrentProcessId
KERNEL32.dll643GetSystemTimeAsFileTime
KERNEL32.dll1151TerminateProcess
KERNEL32.dll446GetCurrentProcess
KERNEL32.dll1170UnhandledExceptionFilter
KERNEL32.dll760InterlockedExchange
KERNEL32.dll927RaiseException
KERNEL32.dll592GetProcessHeap
KERNEL32.dll736HeapSize
KERNEL32.dll734HeapReAlloc
KERNEL32.dll731HeapFree
KERNEL32.dll727HeapAlloc
KERNEL32.dll1232WideCharToMultiByte
KERNEL32.dll79CloseHandle
KERNEL32.dll730HeapDestroy
USER32.dll553OpenClipboard
USER32.dll156DefWindowProcW
USER32.dll570PostQuitMessage
USER32.dll303GetFocus
USER32.dll175DispatchMessageW
USER32.dll768TranslateMessage
USER32.dll766TranslateAcceleratorW
USER32.dll351GetMessageW
USER32.dll713SetWindowPlacement
USER32.dll592RegisterClassExW
USER32.dll494LoadCursorW
USER32.dll496LoadIconW
USER32.dll208DrawTextW
USER32.dll617ReleaseDC
USER32.dll292GetDC
USER32.dll385GetSystemMetrics
USER32.dll225EnumChildWindows
USER32.dll689SetPropW
USER32.dll752SystemParametersInfoW
USER32.dll66CheckRadioButton
USER32.dll631SendDlgItemMessageW
USER32.dll653SetCursor
USER32.dll542MoveWindow
USER32.dll299GetDlgItemInt
USER32.dll659SetDlgItemInt
USER32.dll248FillRect
USER32.dll465IsDlgButtonChecked
USER32.dll196DrawFocusRect
USER32.dll356GetNextDlgTabItem
USER32.dll552OffsetRect
USER32.dll414GetWindowPlacement
USER32.dll353GetMonitorInfoW
USER32.dll541MonitorFromWindow
USER32.dll85CopyRect
USER32.dll448IntersectRect
USER32.dll232EnumDisplayMonitors
USER32.dll245EqualRect
USER32.dll540MonitorFromRect
USER32.dll278GetClassWord
USER32.dll227EnumDesktopWindows
USER32.dll215EmptyClipboard
USER32.dll650SetClipboardData
USER32.dll74CloseClipboard
USER32.dll281GetClipboardData
USER32.dll569PostMessageW
USER32.dll422GetWindowTextW
USER32.dll479IsWindowEnabled
USER32.dll712SetWindowLongW
USER32.dll275GetClassLongW
USER32.dll648SetClassLongW
USER32.dll382GetSysColor
USER32.dll216EnableMenuItem
USER32.dll65CheckMenuRadioItem
USER32.dll333GetMenu
USER32.dll64CheckMenuItem
USER32.dll509LoadStringW
USER32.dll421GetWindowTextLengthW
USER32.dll449InvalidateRect
USER32.dll790UpdateWindow
USER32.dll218EnableWindow
USER32.dll409GetWindowLongW
USER32.dll719SetWindowTextW
USER32.dll99CreateDialogParamW
USER32.dll166DestroyWindow
USER32.dll524MapWindowPoints
USER32.dll277GetClassNameW
USER32.dll319GetKeyState
USER32.dll663SetFocus
USER32.dll464IsDialogMessageW
USER32.dll488LoadAcceleratorsW
USER32.dll47CharNextA
USER32.dll358GetParent
USER32.dll279GetClientRect
USER32.dll739ShowWindow
USER32.dll110CreateWindowExW
USER32.dll172DialogBoxParamW
USER32.dll220EndDialog
USER32.dll298GetDlgItem
USER32.dll415GetWindowRect
USER32.dll714SetWindowPos
USER32.dll640SendMessageW
USER32.dll498LoadImageW
USER32.dll777UnregisterClassA
USER32.dll528MessageBeep
RPCRT4.dll504UuidCreate
RPCRT4.dll513UuidToStringW
WINMM.dll148timeGetTime
GDI32.dll47CreateCompatibleBitmap
GDI32.dll48CreateCompatibleDC
GDI32.dll306EqualRgn
GDI32.dll34CombineRgn
GDI32.dll677SetRectRgn
GDI32.dll80CreateRectRgnIndirect
GDI32.dll79CreateRectRgn
GDI32.dll74CreatePatternBrush
GDI32.dll683SetTextColor
GDI32.dll644SetBkMode
GDI32.dll530GetStockObject
GDI32.dll643SetBkColor
GDI32.dll230DeleteObject
GDI32.dll311ExtCreatePen
GDI32.dll575MoveToEx
GDI32.dll571LineTo
GDI32.dll84CreateSolidBrush
GDI32.dll555GetTextMetricsW
GDI32.dll547GetTextExtentPoint32W
GDI32.dll529GetRgnBox
GDI32.dll550GetTextExtentPointW
GDI32.dll44CreateBrushIndirect
GDI32.dll514GetObjectW
GDI32.dll636SelectObject
GDI32.dll64CreateFontIndirectW
GDI32.dll464GetDeviceCaps
GDI32.dll227DeleteDC
GDI32.dll19BitBlt
GDI32.dll53CreateDIBSection
msvcrt.dll884_strtoi64
msvcrt.dll887_strtoui64
msvcrt.dll1002_wcsdup
msvcrt.dll468_i64tow_s
msvcrt.dll1130_wtoi64
msvcrt.dll1387wcstoul
msvcrt.dll1214isalpha
msvcrt.dll1332time
msvcrt.dll1165difftime
msvcrt.dll1260memmove
msvcrt.dll274_callnewh
msvcrt.dll206__pctype_func
msvcrt.dll125___lc_codepage_func
msvcrt.dll127___lc_handle_func
msvcrt.dll342_errno
msvcrt.dll128___mb_cur_max_func
msvcrt.dll1286setlocale
msvcrt.dll137__crtGetStringTypeW
msvcrt.dll139__crtLCMapStringW
msvcrt.dll176__mb_cur_max
msvcrt.dll1337tolower
msvcrt.dll1222isspace
msvcrt.dll1142abort
msvcrt.dll1213isalnum
msvcrt.dll145__getmainargs
msvcrt.dll276_cexit
msvcrt.dll354_exit
msvcrt.dll1292sprintf_s
msvcrt.dll500_ismbblead
msvcrt.dll1167exit
msvcrt.dll231_acmdln
msvcrt.dll469_initterm
msvcrt.dll257_amsg_exit
msvcrt.dll212__setusermatherr
msvcrt.dll185__p__commode
msvcrt.dll190__p__fmode
msvcrt.dll210__set_app_type
msvcrt.dll17public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll934_unlock
msvcrt.dll141__dllonexit
msvcrt.dll578_lock
msvcrt.dll747_onexit
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll219__uncaught_exception
msvcrt.dll345_except_handler4_common
msvcrt.dll295_controlfp
msvcrt.dll1246malloc
msvcrt.dll764_purecall
msvcrt.dll1190free
msvcrt.dll12public: __thiscall exception::exception(void)

??0exception@@QAE@XZ

msvcrt.dll99_CxxThrowException
msvcrt.dll11public: __thiscall exception::exception(class exception const &)

??0exception@@QAE@ABV0@@Z

msvcrt.dll16public: virtual __thiscall exception::~exception(void)

??1exception@@UAE@XZ

msvcrt.dll57public: virtual char const * __thiscall exception::what(void)const

?what@exception@@UBEPBDXZ

msvcrt.dll9public: __thiscall exception::exception(char const * const &)

??0exception@@QAE@ABQBD@Z

msvcrt.dll1261memmove_s
msvcrt.dll1259memcpy_s
msvcrt.dll115__CxxFrameHandler3
msvcrt.dll1304strcspn
msvcrt.dll1256memchr
msvcrt.dll1241localeconv
msvcrt.dll14public: virtual __thiscall bad_cast::~bad_cast(void)

??1bad_cast@@UAE@XZ

msvcrt.dll5public: __thiscall bad_cast::bad_cast(class bad_cast const &)

??0bad_cast@@QAE@ABV0@@Z

msvcrt.dll1225iswalpha
msvcrt.dll1013_wcslwr_s
msvcrt.dll1229iswdigit
msvcrt.dll1017_wcsnicmp
msvcrt.dll1371wcsncmp
msvcrt.dll564_itow_s
msvcrt.dll1129_wtoi
msvcrt.dll561_itoa
msvcrt.dll1157calloc
msvcrt.dll1361wcschr
msvcrt.dll1007_wcsicmp
msvcrt.dll974_vsnwprintf
msvcrt.dll1258memcpy
msvcrt.dll1373wcsncpy_s
msvcrt.dll1384wcstol
msvcrt.dll1365wcscpy_s
msvcrt.dll1254mbstowcs_s
msvcrt.dll1338toupper
msvcrt.dll1237isxdigit
msvcrt.dll1216isdigit
msvcrt.dll405_ftol2_sse
msvcrt.dll1262memset
msvcrt.dll106_XcptFilter
msvcrt.dll404_ftol2
msvcrt.dll1023_wcsrev
SHELL32.dll165
SHELL32.dll224SHGetSpecialFolderPathW

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Calculator
FileVersion6.1.6801.0 (winmain_win7m3.080913-2030)
InternalNameCALC
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameCALC.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.6801.0

VS_FIXEDFILEINFO

FileVersion6.1.6801.0
ProductVersion6.1.6801.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0642048EXE09/14/2008 07:28:52#
15c115HTM#
4ec847465PNG(529 x 476)#
509b04086PNG(190 x 50)#
519a84234PNG(385 x 50)#
52a344625PNG(190 x 139)#
53c484873PNG(385 x 139)#
54f543048PNG(190 x 50)#
55b3c3052PNG(385 x 50)#
567283217PNG(190 x 139)#
573bc3338PNG(385 x 139)#
580c84191PNG(116 x 27)#
591284229PNG(116 x 27)#
5a1b04110PNG(116 x 16)#
5b1c04065PNG(116 x 16)#
5c1a43235PNG(16 x 14)#
5ce48470PNG(16 x 17)#
5d020587PNG(16 x 16)#
5d26c518PNG(16 x 17)#
5d4745344PNG(136 x 27)#
5e9544154PNG(136 x 27)#
5f9904815PNG(136 x 59)#
60c606038PNG(292 x 27)#
623f84290PNG(136 x 27)#
634bc4815PNG(136 x 59)#
6478c4550PNG(264 x 27)#
659541545PNG(136 x 27)#
65f601518PNG(325 x 63)#
66550853PNG(73 x 93)#
668a8593PNG(190 x 27)#
66afc3398PNG(245 x 242)#
678443605PNG(245 x 342)#
6865c3508PNG(330 x 242)#
694103761PNG(330 x 342)#
7097860175PNG(256 x 256)#
8567060175PNG(256 x 256)#
9cc005BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 642053 bytes (628 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x280