filenameuuencode.exe
size43008 (0xa800)
md58c519866f62d48f5d07b8c47035de49e
typePE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x405187b3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x20f
Magic0x10b
LinkerVersion2.56
SizeOfCode0x8600
SizeOfInitializedData0xa400
SizeOfUninitializedData0x400
AddressOfEntryPoint0x1220
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x400
CheckSum0x187a5
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

FreeBASIC 0.16b

Sections

namevavsizeraw sizeflags
.text0x10000x84240x8600R-X CODE IDATA
.data0xa0000xe00x200RW- IDATA
.bss0xb0000x3500RW- UDATA
.idata0xc0000xbcc0xc00RW- IDATA
.rsrc0xd0000xf480x1000RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xc0000xbcc
RESOURCE0xd0000xf48
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#122160
GROUP_ICON#500200
VERSION#114440
module_namehintordfunction_name
libintl3.dll23libintl_bindtextdomain
libintl3.dll29libintl_fprintf
libintl3.dll31libintl_gettext
libintl3.dll41libintl_printf
libintl3.dll47libintl_textdomain
libintl3.dll51libintl_vfprintf
KERNEL32.dllAddAtomA
KERNEL32.dll6AreFileApisANSI
KERNEL32.dll28CloseHandle
KERNEL32.dll47CreateDirectoryA
KERNEL32.dll54CreateFileA
KERNEL32.dll131ExitProcess
KERNEL32.dll148FindAtomA
KERNEL32.dll150FindClose
KERNEL32.dll154FindFirstFileA
KERNEL32.dll186FreeLibrary
KERNEL32.dll193GetAtomNameA
KERNEL32.dll196GetBinaryTypeA
KERNEL32.dll260GetDiskFreeSpaceA
KERNEL32.dll264GetDriveTypeA
KERNEL32.dll274GetFileAttributesA
KERNEL32.dll278GetFileInformationByHandle
KERNEL32.dll282GetFileType
KERNEL32.dll283GetFullPathNameA
KERNEL32.dll287GetLastError
KERNEL32.dll291GetLogicalDriveStringsA
KERNEL32.dll297GetModuleFileNameA
KERNEL32.dll299GetModuleHandleA
KERNEL32.dll323GetProcAddress
KERNEL32.dll325GetProcessHeap
KERNEL32.dll340GetShortPathNameA
KERNEL32.dll358GetSystemTimeAsFileTime
KERNEL32.dll376GetTimeZoneInformation
KERNEL32.dll384GetVolumeInformationA
KERNEL32.dll421HeapAlloc
KERNEL32.dll427HeapFree
KERNEL32.dll463LoadLibraryA
KERNEL32.dll499MultiByteToWideChar
KERNEL32.dll521PeekNamedPipe
KERNEL32.dll621SetErrorMode
KERNEL32.dll660SetUnhandledExceptionFilter
KERNEL32.dll694UnlockFile
KERNEL32.dll779lstrcpyA
msvcrt.dll5_chmod
msvcrt.dll39_getpid
msvcrt.dll83_strdup
msvcrt.dll84_stricmp
msvcrt.dll98_umask
msvcrt.dll39__getmainargs
msvcrt.dll59__p__environ
msvcrt.dll61__p__fmode
msvcrt.dll78__set_app_type
msvcrt.dll108_assert
msvcrt.dll118_cexit
msvcrt.dll126_close
msvcrt.dll147_errno
msvcrt.dll162_fdopen
msvcrt.dll168_filelengthi64
msvcrt.dll176_flsbuf
msvcrt.dll192_get_osfhandle
msvcrt.dll222_iob
msvcrt.dll336_onexit
msvcrt.dll337_open
msvcrt.dll373_setmode
msvcrt.dll395_stricmp
msvcrt.dll510abort
msvcrt.dll517atexit
msvcrt.dll522calloc
msvcrt.dll531exit
msvcrt.dll534fclose
msvcrt.dll537fflush
msvcrt.dll545fopen
msvcrt.dll546fprintf
msvcrt.dll551fread
msvcrt.dll552free
msvcrt.dll553freopen
msvcrt.dll564getenv
msvcrt.dll571isalpha
msvcrt.dll603malloc
msvcrt.dll625realloc
msvcrt.dll631setlocale
msvcrt.dll633signal
msvcrt.dll636sprintf
msvcrt.dll639sscanf
msvcrt.dll640strcat
msvcrt.dll641strchr
msvcrt.dll642strcmp
msvcrt.dll644strcpy
msvcrt.dll646strerror
msvcrt.dll648strlen
msvcrt.dll650strncmp
msvcrt.dll651strncpy
msvcrt.dll652strpbrk
msvcrt.dll653strrchr
msvcrt.dll654strspn
msvcrt.dll655strstr
msvcrt.dll670toupper
OLE32.dll12CoCreateInstance
OLE32.dll72CoUninitialize
OLE32.dll180OleInitialize

StringTable 040904E4

CompanyNameGNU <www.gnu.org>
LicenseThis program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License;see www.gnu.org/copyleft/gpl.html.
FileDescriptionSharUtils: create and unpack shell archives
FileVersion4.2.1.1532
InternalNameuuencode
LegalCopyright© 2004 Free Software Foundation <www.fsf.org>
LegalTrademarksGNU®, SharUtils®, uuencode®
OriginalFilenameuuencode.exe
ProductNameSharUtils
ProductVersion4.2.1.1532
PrivateBuildPatchlevel 3
SpecialBuildGNU for Win32 <gnuwin32.sourceforge.net>

VS_FIXEDFILEINFO

FileVersion4.2.1.1532
ProductVersion4.2.1.1532
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0x2e
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
043008EXE03/12/2004 09:49:39#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK