filenameSkyTa03.exe
size780800 (0xbea00)
md584bbe49e0b348045cf41218d8ddc513c
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0x8700
oem_info0xda6f
reserved20xb3d5e9e7
reserved30x2eccd7
reserved40x41d0c800
reserved50xb9c768fe
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
6173514286880
4844714680111
10816811796502
4844712255286
6192102883623

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4d938eec
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion7.0
SizeOfCode0x37a00
SizeOfInitializedData0x86c00
SizeOfUninitializedData0
AddressOfEntryPoint0x34692
BaseOfCode0x1000
BaseOfData0x39000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x12e000
SizeOfHeaders0x400
CheckSum0xc5bda
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text�0x10000x378100x37a00R-X CODE
.data�0x390000xa5ebc0x39000RW- IDATA
.rdata�0xdf0000x64580x6600RW- IDATA
.rsrc�0xe60000x4758c0x47600R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xe31140x64
RESOURCE0xe60000x4758c
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xdf0000x114
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#1676240
DIALOG#180534630
DIALOG#156134630
DIALOG#153234630
DIALOG#167434630
DIALOG#147134630
DIALOG#120934630
DIALOG#152834630
DIALOG#138734630
DIALOG#173434630
DIALOG#134934630
DIALOG#190034630
DIALOG#169134630
DIALOG#157234630
DIALOG#161434630
DIALOG#150334630
DIALOG#128634630
DIALOG#152334630
DIALOG#141234630
DIALOG#192334630
DIALOG#127834630
DIALOG#189734630
DIALOG#152834630
DIALOG#160534630
DIALOG#184234630
DIALOG#139334630
DIALOG#128034630
DIALOG#184834630
DIALOG#193734630
DIALOG#110734630
DIALOG#151034630
DIALOG#161734630
DIALOG#172634630
DIALOG#129234630
DIALOG#119134630
DIALOG#167534630
DIALOG#175234630
DIALOG#116634630
DIALOG#184034630
DIALOG#163834630
DIALOG#108334630
DIALOG#115634630
DIALOG#186834630
DIALOG#112934630
DIALOG#177734630
DIALOG#129234630
DIALOG#114434630
DIALOG#134134630
DIALOG#197434630
DIALOG#189234630
DIALOG#128234630
DIALOG#168834630
DIALOG#130634630
DIALOG#197934630
DIALOG#185334630
DIALOG#187934630
DIALOG#180134630
DIALOG#133034630
DIALOG#119734630
DIALOG#126134630
DIALOG#126034630
DIALOG#176534630
DIALOG#135434630
DIALOG#106334630
#13#634421880
#13#499102600
#13#386862000
GROUP_ICON#1200
VERSION#17280
module_namehintordfunction_name
KERNEL32.dllIsProcessorFeaturePresent
KERNEL32.dllCommConfigDialogA
KERNEL32.dllSetTapeParameters
COMCTL32.dllInitCommonControlsEx
IPHLPAPI.dllGetNumberOfInterfaces
IPHLPAPI.dllUnenableRouter
USER32.dllSendMessageW
USER32.dllPostMessageW
USER32.dllWinHelpW
USER32.dllGetWindowRect
USER32.dllGetDlgItem
USER32.dllGetSubMenu
USER32.dllGetMenu
USER32.dllGetWindowPlacement
USER32.dllTranslateAcceleratorW
USER32.dllGetForegroundWindow
USER32.dllMessageBoxA
USER32.dllLoadStringA
USER32.dllInvalidateRect
USER32.dllInvertRect
USER32.dllMessageBoxW
USER32.dllUpdateWindow
USER32.dllShowWindow
USER32.dllDestroyWindow
USER32.dllwsprintfW
USER32.dllDialogBoxParamW
USER32.dllCreateWindowExW
USER32.dllLoadCursorW
USER32.dllLoadAcceleratorsW
USER32.dllDrawTextW
USER32.dllFillRect
USER32.dllGetDC
USER32.dllSetRect
USER32.dllReleaseCapture
USER32.dllGetMessageW
USER32.dllLoadBitmapW
USER32.dllIsZoomed
USER32.dllEnableMenuItem
USER32.dllBeginPaint
USER32.dllIntersectRect
USER32.dllReleaseDC
USER32.dllRegisterClassW
USER32.dllIsIconic
USER32.dllOffsetRect
USER32.dllCheckRadioButton
USER32.dllGetDesktopWindow
USER32.dllUnionRect
USER32.dllLoadIconW
USER32.dllDispatchMessageW
USER32.dllEndDialog
USER32.dllPeekMessageW
USER32.dllWaitMessage
USER32.dllGetClientRect
USER32.dllSetCapture
USER32.dllFrameRect
USER32.dllGetSystemMetrics
USER32.dllMoveWindow
USER32.dllDrawMenuBar
USER32.dllPtInRect
USER32.dllDefWindowProcW
USER32.dllIsDlgButtonChecked
USER32.dllSetDlgItemTextW
USER32.dllCheckDlgButton
USER32.dllGetDlgItemTextW
USER32.dllEndPaint

StringTable 040904B0

InternalNameSyfezed
LegalCopyright2000
FileDescriptionUbywyfa Ewov Yrykeq
ProductNameBity
CompanyNameKDT Software Solutions
LegalTrademarksJaxumu Axuvyco Fadomu Nibycof Yzezix Zycocow Ohovome
OriginalFilenameDijio.exe

VS_FIXEDFILEINFO

FileVersion7.4.0.0
ProductVersion7.4.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0780800EXE03/30/2011 20:13:32#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK