filenameTEE-Full.exe
size2369379 (0x242763)
md59b0a6026e8a204527e135aaeed35bfb2
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
1272914
1181683
14729923
10816845
2991781
1980224
008
19803419
10274
11844736
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x46e58ce6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0xd0f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x2a000
SizeOfInitializedData0x58400
SizeOfUninitializedData0
AddressOfEntryPoint0x28872
BaseOfCode0x1000
BaseOfData0x2b000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x85000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v4.x

Sections

namevavsizeraw sizeflags
.text0x10000x29f770x2a000R-X CODE
.rdata0x2b0000x24460x2600R-- IDATA
.data0x2e0000x54b380x3200RW- IDATA
.rsrc0x830000x10d00x1200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2bbe80xf0
RESOURCE0x830000x10d0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x2b0000x474
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#23080
BITMAP#1274680
ICON#17440
DIALOG#182400
DIALOG#1144800
DIALOG#1381660
DIALOG#1541820
GROUP_CURSOR#152200
GROUP_ICON#2000200
MANIFEST#19780
module_namehintordfunction_name
KERNEL32.dll267GetExitCodeProcess
KERNEL32.dll773lstrcpynA
KERNEL32.dll718WaitForSingleObject
KERNEL32.dll251GetDateFormatA
KERNEL32.dll345GetSystemDirectoryA
KERNEL32.dll202GetCommandLineA
KERNEL32.dll373GetVersionExA
KERNEL32.dll63CreateMutexA
KERNEL32.dll308GetPrivateProfileIntA
KERNEL32.dll314GetPrivateProfileStringA
KERNEL32.dll764lstrcmpA
KERNEL32.dll349GetSystemTime
KERNEL32.dll460LocalFree
KERNEL32.dll456LocalAlloc
KERNEL32.dll372GetVersion
KERNEL32.dll381GetWindowsDirectoryA
KERNEL32.dll347GetSystemInfo
KERNEL32.dll206GetComputerNameA
KERNEL32.dll609SetEndOfFile
KERNEL32.dll447LCMapStringA
KERNEL32.dll342GetStringTypeW
KERNEL32.dll339GetStringTypeA
KERNEL32.dll292GetModuleFileNameA
KERNEL32.dll185GetACP
KERNEL32.dll191GetCPInfo
KERNEL32.dll277GetFileType
KERNEL32.dll338GetStdHandle
KERNEL32.dll621SetHandleCount
KERNEL32.dll264GetEnvironmentStringsW
KERNEL32.dll262GetEnvironmentStrings
KERNEL32.dll179FreeEnvironmentStringsW
KERNEL32.dll178FreeEnvironmentStringsA
KERNEL32.dll685UnhandledExceptionFilter
KERNEL32.dll419HeapSize
KERNEL32.dll418HeapReAlloc
KERNEL32.dll699VirtualAlloc
KERNEL32.dll703VirtualFree
KERNEL32.dll411HeapCreate
KERNEL32.dll413HeapDestroy
KERNEL32.dll336GetStartupInfoA
KERNEL32.dll559RtlUnwind
KERNEL32.dll670TerminateProcess
KERNEL32.dll409HeapAlloc
KERNEL32.dll415HeapFree
KERNEL32.dll620SetFileTime
KERNEL32.dll397GlobalMemoryStatus
KERNEL32.dll334GetShortPathNameA
KERNEL32.dll451LoadLibraryExA
KERNEL32.dll741WritePrivateProfileStringA
KERNEL32.dll739WritePrivateProfileSectionA
KERNEL32.dll478MoveFileExA
KERNEL32.dll247GetCurrentProcess
KERNEL32.dll125ExitProcess
KERNEL32.dll722WideCharToMultiByte
KERNEL32.dll68CreateProcessA
KERNEL32.dll551RemoveDirectoryA
KERNEL32.dll276GetFileTime
KERNEL32.dll696VerLanguageNameA
KERNEL32.dll32CompareFileTime
KERNEL32.dll477MoveFileA
KERNEL32.dll40CopyFileA
KERNEL32.dll274GetFileSize
KERNEL32.dll92DeviceIoControl
KERNEL32.dll286GetLogicalDriveStringsA
KERNEL32.dll180FreeLibrary
KERNEL32.dll245GetCurrentDirectoryA
KERNEL32.dll605SetCurrentDirectoryA
KERNEL32.dll612SetErrorMode
KERNEL32.dll484MultiByteToWideChar
KERNEL32.dll616SetFileAttributesA
KERNEL32.dll357GetTempPathA
KERNEL32.dll269GetFileAttributesA
KERNEL32.dll45CreateDirectoryA
KERNEL32.dll284GetLocaleInfoA
KERNEL32.dll148FindFirstFileA
KERNEL32.dll767lstrcmpiA
KERNEL32.dll448LCMapStringW
KERNEL32.dll157FindNextFileA
KERNEL32.dll144FindClose
KERNEL32.dll260GetDriveTypeA
KERNEL32.dll761lstrcatA
KERNEL32.dll294GetModuleHandleA
KERNEL32.dll450LoadLibraryA
KERNEL32.dll318GetProcAddress
KERNEL32.dll365GetTickCount
KERNEL32.dll662Sleep
KERNEL32.dll249GetCurrentThread
KERNEL32.dll519QueryPerformanceFrequency
KERNEL32.dll518QueryPerformanceCounter
KERNEL32.dll361GetThreadPriority
KERNEL32.dll647SetThreadPriority
KERNEL32.dll399GlobalReAlloc
KERNEL32.dll403GlobalUnlock
KERNEL32.dll392GlobalFree
KERNEL32.dll385GlobalAlloc
KERNEL32.dll396GlobalLock
KERNEL32.dll370GetUserDefaultLangID
KERNEL32.dll483MulDiv
KERNEL32.dll776lstrlenA
KERNEL32.dll282GetLastError
KERNEL32.dll175FormatMessageA
KERNEL32.dll735WriteFile
KERNEL32.dll536ReadFile
KERNEL32.dll770lstrcpyA
KERNEL32.dll618SetFilePointer
KERNEL32.dll52CreateFileA
KERNEL32.dll27CloseHandle
KERNEL32.dll305GetOEMCP
KERNEL32.dll87DeleteFileA
USER32.dll213FindWindowA
USER32.dll396IsIconic
USER32.dll478PostMessageA
USER32.dll501RegisterClassW
USER32.dll498RegisterClassA
USER32.dll581SetRectEmpty
USER32.dll47CharUpperA
USER32.dll211ExitWindowsEx
USER32.dll476PeekMessageA
USER32.dll458MsgWaitForMultipleObjects
USER32.dll298GetMessageA
USER32.dll149DispatchMessageA
USER32.dll466OffsetRect
USER32.dll221GetActiveWindow
USER32.dll185EndDialog
USER32.dll183EnableWindow
USER32.dll212FillRect
USER32.dll603SetWindowPos
USER32.dll408LoadBitmapA
USER32.dll79CreateDialogParamA
USER32.dll528SendDlgItemMessageW
USER32.dll556SetDlgItemTextA
USER32.dll400IsWindowEnabled
USER32.dll326GetSystemMetrics
USER32.dll677WaitMessage
USER32.dll500RegisterClassExW
USER32.dll90CreateWindowExW
USER32.dll232GetClassInfoExA
USER32.dll499RegisterClassExA
USER32.dll240GetClientRect
USER32.dll594SetTimer
USER32.dll402IsWindowVisible
USER32.dll490PtInRect
USER32.dll550SetCursor
USER32.dll378InvalidateRect
USER32.dll260GetDlgItemTextA
USER32.dll480PostQuitMessage
USER32.dll414LoadIconA
USER32.dll416LoadImageA
USER32.dll323GetSysColor
USER32.dll405KillTimer
USER32.dll351GetWindowTextLengthA
USER32.dll392IsDialogMessageA
USER32.dll446MessageBoxA
USER32.dll451MessageBoxW
USER32.dll68CopyRect
USER32.dll607SetWindowTextW
USER32.dll165DrawEdge
USER32.dll527SendDlgItemMessageA
USER32.dll258GetDlgItem
USER32.dll515ReleaseDC
USER32.dll253GetDC
USER32.dll142DestroyWindow
USER32.dll132DefWindowProcA
USER32.dll197EnumDisplaySettingsA
USER32.dll537SendMessageW
USER32.dll233GetClassInfoExW
USER32.dll133DefWindowProcW
USER32.dll348GetWindowRect
USER32.dll255GetDesktopWindow
USER32.dll625SystemParametersInfoA
USER32.dll263GetFocus
USER32.dll342GetWindowLongA
USER32.dll350GetWindowTextA
USER32.dll175DrawTextA
USER32.dll560SetForegroundWindow
USER32.dll147DialogBoxParamA
USER32.dll532SendMessageA
USER32.dll522ScreenToClient
USER32.dll166DrawFocusRect
USER32.dll89CreateWindowExA
USER32.dll600SetWindowLongA
USER32.dll457MoveWindow
USER32.dll559SetFocus
USER32.dll325GetSystemMenu
USER32.dll135DeleteMenu
USER32.dll7AppendMenuA
USER32.dll618ShowWindow
USER32.dll606SetWindowTextA
USER32.dll410LoadCursorA
USER32.dll252GetCursorPos
USER32.dll642TranslateMessage
GDI32.dll482SetMapMode
GDI32.dll502SetViewportOrgEx
GDI32.dll441RestoreDC
GDI32.dll508StartDocA
GDI32.dll511StartPage
GDI32.dll92EndPage
GDI32.dll90EndDoc
GDI32.dll433RemoveFontResourceA
GDI32.dll75CreateScalableFontResourceA
GDI32.dll3AddFontResourceA
GDI32.dll66CreatePalette
GDI32.dll48CreateDIBitmap
GDI32.dll36CreateBitmap
GDI32.dll367GetTextExtentPoint32W
GDI32.dll518TextOutW
GDI32.dll513StretchDIBits
GDI32.dll41CreateCompatibleBitmap
GDI32.dll461SetBkColor
GDI32.dll42CreateCompatibleDC
GDI32.dll351GetStockObject
GDI32.dll77CreateSolidBrush
GDI32.dll499SetTextColor
GDI32.dll517TextOutA
GDI32.dll462SetBkMode
GDI32.dll455SelectObject
GDI32.dll54CreateFontA
GDI32.dll293GetDeviceCaps
GDI32.dll17BitBlt
GDI32.dll80DeleteDC
GDI32.dll83DeleteObject
GDI32.dll448SaveDC
GDI32.dll366GetTextExtentPoint32A
GDI32.dll497SetTextAlign
comdlg32.dll16PrintDlgA
comdlg32.dll9GetOpenFileNameA
ADVAPI32.dll421SetSecurityDescriptorDacl
ADVAPI32.dll379RegQueryValueExA
ADVAPI32.dll370RegOpenKeyExA
ADVAPI32.dll356RegDeleteValueA
ADVAPI32.dll374RegQueryInfoKeyA
ADVAPI32.dll359RegEnumKeyExA
ADVAPI32.dll329OpenThreadToken
ADVAPI32.dll123DuplicateToken
ADVAPI32.dll24AllocateAndInitializeSid
ADVAPI32.dll223InitializeSecurityDescriptor
ADVAPI32.dll173GetLengthSid
ADVAPI32.dll222InitializeAcl
ADVAPI32.dll11AddAccessAllowedAce
ADVAPI32.dll347RegCloseKey
ADVAPI32.dll422SetSecurityDescriptorGroup
ADVAPI32.dll423SetSecurityDescriptorOwner
ADVAPI32.dll232IsValidSecurityDescriptor
ADVAPI32.dll2AccessCheck
ADVAPI32.dll157FreeSid
ADVAPI32.dll215GetUserNameA
ADVAPI32.dll390RegSetValueExA
ADVAPI32.dll351RegCreateKeyExA
ADVAPI32.dll322OpenProcessToken
ADVAPI32.dll245LookupPrivilegeValueA
ADVAPI32.dll23AdjustTokenPrivileges
SHELL32.dll59SHChangeNotify
SHELL32.dll63SHFileOperationA
SHELL32.dll57SHBrowseForFolderA
SHELL32.dll80SHGetPathFromIDListA
SHELL32.dll75SHGetMalloc
SHELL32.dll114ShellExecuteA
SHELL32.dll83SHGetSpecialFolderLocation
ole32.dll13CoCreateInstance
ole32.dll83CoUninitialize
ole32.dll201OleInitialize
ole32.dll224OleUninitialize
ole32.dll45CoInitialize
OLEAUT32.dll161
OLEAUT32.dll163
WINMM.dll83midiOutGetNumDevs
WINMM.dll30joyGetPos
WINMM.dll178waveOutGetNumDevs
COMCTL32.dll33ImageList_Create
COMCTL32.dll28ImageList_Add
COMCTL32.dll17
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
offsetsizetypecomment
0200192EXE09/10/2007 18:28:54#
15c115HTM#
30e002169187BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 2369379 bytes (2314 KiB)


--
Type = gzip
ERRORS:
There are data after the end of archive
Offset = 230009
Physical Size = 18201
Tail Size = 2121169
Headers Size = 10
Streams = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....        58316        18201  data~
------------------- ----- ------------ ------------  ------------------------
                                 58316        18201  1 files

Warnings: 1

Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK