filenameInformation zu #600694254190775929 Fiducia deutschland, Fiduciastraße 20, 76227 Karlsruhe, Germania.exe
size155648 (0x26000)
md586d3e008b8f5983c374a4859739f7de4
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
118569206
9632043
2727449
1065
25904311

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x52452994
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0xd82
Magic0x10b
LinkerVersion6.0
SizeOfCode0x12000
SizeOfInitializedData0x13000
SizeOfUninitializedData0
AddressOfEntryPoint0x1391
BaseOfCode0x1000
BaseOfData0x13000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x26000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x109000
SizeOfStackCommit0x3000
SizeOfHeapReserve0x28000
SizeOfHeapCommit0x3000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x11af40x12000R-X CODE
.rsrc0x130000xe3270xf000R-- IDATA
.rdata0x220000x12500x2000R-- IDATA
.data0x240000x4040x1000RW- IDATA
.reloc0x250000x2080x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x221f40xb4
RESOURCE0x130000x47b4
EXCEPTION00
SECURITY00
BASERELOC0x250000x208
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x220000x1f4
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#190640
ICON#290640
GROUP_ICON#101200
module_namehintordfunction_name
NEWDEV.dll12UpdateDriverForPlugAndPlayDevicesW
MSVCRT.dll16public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll113__p__fmode
MSVCRT.dll372_findnext
MSVCRT.dll133__argv
MSVCRT.dll336_ecvt
MSVCRT.dll294_control87
MSVCRT.dll211__set_app_type
MSVCRT.dll186__p__commode
MSVCRT.dll781_safe_fdiv
MSVCRT.dll1256memchr
MSVCRT.dll469_initterm
MSVCRT.dll1007_wcsicmp
COMUID.dll2DllGetClassObject
COMUID.dll4DllUnregisterServer
COMUID.dll1DllCanUnloadNow
COMUID.dll3DllRegisterServer
KBDBU.dllKbdLayerDescriptor
USER32.dll710ValidateRgn
USER32.dll520PrivateExtractIconsW
USER32.dll230FindWindowW
USER32.dll153DestroyWindow
USER32.dll227FindWindowA
USER32.dll89CreateIconFromResourceEx
USER32.dll360GetUserObjectSecurity
USER32.dll300GetMenu
USER32.dll583SetClassLongA
USER32.dll99CreateWindowStationW
USER32.dll290GetKeyboardLayout
USER32.dll40CharLowerBuffW
USER32.dll375GetWindowTextA
USER32.dll372GetWindowRect
USER32.dll347GetSysColorBrush
USER32.dll279GetForegroundWindow
USER32.dll591SetCursorPos
USER32.dll686UnhookWindowsHookEx
USER32.dll524QuerySendMessage
USER32.dll270GetDesktopWindow
USER32.dll608SetMenuInfo
USER32.dll82CreateDialogIndirectParamA
USER32.dll414IsChild
USER32.dll439LoadCursorA
USER32.dll119DdeGetQualityOfService
USER32.dll442LoadCursorW
USER32.dll327GetProcessDefaultLayout
USER32.dll485ModifyMenuW
USER32.dll255GetClientRect
USER32.dll213EnumDisplaySettingsExW
USER32.dll378GetWindowTextW
USER32.dll652SetWindowsHookW
USER32.dll611SetMenuItemInfoW
MSASN1.dll41ASN1BEREncBool
MSASN1.dll30ASN1BERDecU16Val
MSASN1.dll238ASN1char32string_cmp
MSASN1.dll90ASN1Free
MSASN1.dll36ASN1BERDecZeroChar32String
MSASN1.dll70ASN1CEREncBitString
MSASN1.dll34ASN1BERDecUTF8String
MSASN1.dll19ASN1BERDecOctetString2
MSASN1.dll226ASN1_Decode
MSASN1.dll6ASN1BERDecCheck
MSASN1.dll66ASN1BEREncZeroMultibyteString
MSASN1.dll26ASN1BERDecS8Val
MSASN1.dll233ASN1_SetEncoderOption
MSASN1.dll231ASN1_GetEncoderOption
MSASN1.dll54ASN1BEREncNull
MSASN1.dll10ASN1BERDecExplicitTag
MSASN1.dll222ASN1_CreateDecoder
MSASN1.dll223ASN1_CreateDecoderEx
MSASN1.dll42ASN1BEREncChar16String
MSASN1.dll253ASN1objectidentifier_free
MSASN1.dll62ASN1BEREncTag
MSASN1.dll261ASN1ztchar16string_cmp
MSASN1.dll244ASN1intx2uint32
MSASN1.dll44ASN1BEREncCharString
MSASN1.dll21ASN1BERDecOpenType2
MSVCP60.dll2251_LCosh
MSVCP60.dll1252public: static void __cdecl std::char_traits<unsigned short>::assign(unsigned short &, unsigned short const &)

?assign@?$char_traits@G@std@@SAXAAGABG@Z

MSVCP60.dll1740public: bool __thiscall std::basic_filebuf<char, struct std::char_traits<char> >::is_open(void)const

?is_open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QBE_NXZ

MSVCP60.dll1620public: class std::allocator<char> __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::get_allocator(void)const

?get_allocator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$allocator@D@2@XZ

MSVCP60.dll375public: __thiscall std::time_put<unsigned short, class std::ostreambuf_iterator<unsigned short, struct std::char_traits<unsigned short> > >::time_put<unsigned short, class std::ostreambuf_iterator<unsigned short, struct std::char_traits<unsigned short> > >(class std::_Locinfo const &, unsigned int)

??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

MSVCP60.dll1110protected: static char * __cdecl std::num_put<unsigned short, class std::ostreambuf_iterator<unsigned short, struct std::char_traits<unsigned short> > >::_Ifmt(char *, char, int)

?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@KAPADPADDH@Z

MSVCP60.dll307public: __thiscall std::basic_stringbuf<unsigned short, struct std::char_traits<unsigned short>, class std::allocator<unsigned short> >::basic_stringbuf<unsigned short, struct std::char_traits<unsigned short>, class std::allocator<unsigned short> >(class std::basic_stringbuf<unsigned short, struct std::char_traits<unsigned short>, class std::allocator<unsigned short> > const &)

??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z

MSVCP60.dll1937public: static unsigned short __cdecl std::numeric_limits<unsigned short>::quiet_NaN(void)

?quiet_NaN@?$numeric_limits@G@std@@SAGXZ

MSVCP60.dll1842public: void __thiscall std::basic_ostream<unsigned short, struct std::char_traits<unsigned short> >::osfx(void)

?osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ

MSVCP60.dll2185public: class std::basic_string<unsigned short, struct std::char_traits<unsigned short>, class std::allocator<unsigned short> > __thiscall std::collate<unsigned short>::transform(unsigned short const *, unsigned short const *)const

?transform@?$collate@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@PBG0@Z

MSVCP60.dll408public: __thiscall std::locale::locale(class std::locale const &, char const *, int)

??0locale@std@@QAE@ABV01@PBDH@Z

MSVCP60.dll1636class std::basic_istream<char, struct std::char_traits<char> > & __cdecl std::getline(class std::basic_istream<char, struct std::char_traits<char> > &, class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > &)

?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z

MSVCP60.dll657public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::ios_base & (__cdecl*)(class std::ios_base &))

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

MSVCP60.dll1278public: void __thiscall std::ios_base::clear(int, bool)

?clear@ios_base@std@@QAEXH_N@Z

MSVCP60.dll326public: __thiscall std::complex<float>::complex<float>(class std::complex<long double> const &)

??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z

MSVCP60.dll1435protected: virtual class std::ostreambuf_iterator<char, struct std::char_traits<char> > __thiscall std::num_put<char, class std::ostreambuf_iterator<char, struct std::char_traits<char> > >::do_put(class std::ostreambuf_iterator<char, struct std::char_traits<char> >, class std::ios_base &, char, long)const

?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DJ@Z

MSVCP60.dll2272_Stold
MSVCP60.dll2120public: int __thiscall std::basic_streambuf<unsigned short, struct std::char_traits<unsigned short> >::sputn(unsigned short const *, int)

?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHPBGH@Z

MSVCP60.dll254public: __thiscall std::basic_istream<char, struct std::char_traits<char> >::basic_istream<char, struct std::char_traits<char> >(class std::basic_istream<char, struct std::char_traits<char> > const &)

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z

MSVCP60.dll1377protected: virtual class std::istreambuf_iterator<char, struct std::char_traits<char> > __thiscall std::num_get<char, class std::istreambuf_iterator<char, struct std::char_traits<char> > >::do_get(class std::istreambuf_iterator<char, struct std::char_traits<char> >, class std::istreambuf_iterator<char, struct std::char_traits<char> >, class std::ios_base &, int &, long &)const

?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z

MSVCP60.dll1802public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > __thiscall std::locale::name(void)const

?name@locale@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

MSVCP60.dll1766class std::complex<float> __cdecl std::log(class std::complex<float> const &)

?log@std@@YA?AV?$complex@M@1@ABV21@@Z

KERNEL32.dll871TlsGetValue
KERNEL32.dll83CreateFileA
KERNEL32.dll313GetConsoleTitleA
KERNEL32.dll52CloseHandle
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll456GetSystemTime
KERNEL32.dll325GetCurrentThread
KERNEL32.dll899VirtualAlloc
KERNEL32.dll488GetVersion
KERNEL32.dll371GetLocalTime
KERNEL32.dll975lstrlenW
KERNEL32.dll962lstrcmpA
KERNEL32.dll974lstrlenA
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll963lstrcmpW
KERNEL32.dll901VirtualFree
KERNEL32.dll864TerminateProcess
KERNEL32.dll934WriteFile
offsetsizetypecomment
0155648EXE09/27/2013 06:45:40#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK