f65c3b58235d463310341cac0beb6c5a

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	f65c3b58235d463310341cac0beb6c5a_.exe
size	139264 (0x22000)
md5	9b8e7bfe7cf1b823b06a087644450196

type	MS-DOS executable PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0
blocks_in_file	0
num_relocs	0
header_paragraphs	0
min_extra_paragraphs	0
max_extra_paragraphs	0
ss	0
sp	0
checksum	0
ip	0
cs	0
reloc_table_offset	0
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

DOS stub

00000000: 4d 5a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |MZ..............|
00000010: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000030: 00 00 00 00 00 00 00 00  00 00 00 00 f0 00 00 00  |................|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 54 68 69 73  |............This|
00000050: 20 70 72 6f 67 72 61 6d  20 63 61 6e 6e 6f 74 20  | program cannot |
00000060: 62 65 20 72 75 6e 20 69  6e 20 44 4f 53 20 6d 6f  |be run in DOS mo|
00000070: 64 65 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |de..............|
00000080: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000f0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x510c8801
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x1e000
SizeOfInitializedData	0x1f000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x1f000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x22000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	3
DllCharacteristics	1
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x10000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1db38	0x1e000	R-X CODE
.rdata	0x1f000	0x1ae8	0x2000	RW- IDATA
.rsrc	0x21000	0x2ae	0x1000	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x20a5c	0x8c
RESOURCE	0x21000	0x2ae
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1f000	0x46c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	598	135168

module_name	hint	function_name
dbghelp.dll	2	StackWalk64
kernel32.dll	2	ExitProcess
kernel32.dll	2	GetModuleHandleA
kernel32.dll	2	CloseHandle
kernel32.dll	2	OpenProcess
kernel32.dll	2	VirtualProtect
kernel32.dll	2	VirtualQuery
kernel32.dll	2	SetErrorMode
kernel32.dll	2	LoadResource
kernel32.dll	2	InterlockedIncrement
kernel32.dll	2	SetEvent
kernel32.dll	2	GetModuleHandleW
kernel32.dll	2	UnlockFileEx
kernel32.dll	2	GetProcessTimes
kernel32.dll	2	VirtualFreeEx
kernel32.dll	2	GetProcessHandleCount
kernel32.dll	2	GetExitCodeProcess
kernel32.dll	2	GetFileAttributesW
kernel32.dll	2	CreateFileW
kernel32.dll	2	GetThreadPriorityBoost
kernel32.dll	2	GetBinaryTypeW
kernel32.dll	2	ReleaseSemaphore
kernel32.dll	2	GetShortPathNameA
kernel32.dll	2	GetLongPathNameW
kernel32.dll	2	VirtualAlloc
kernel32.dll	2	VirtualProtectEx
kernel32.dll	2	ResetEvent
kernel32.dll	2	GetProcessId
kernel32.dll	2	GetProcessWorkingSetSize
kernel32.dll	2	InterlockedExchangeAdd
kernel32.dll	2	LockResource
kernel32.dll	2	GetModuleFileNameA
kernel32.dll	2	GetThreadPriority
kernel32.dll	2	GetProcessAffinityMask
kernel32.dll	2	GetShortPathNameW
kernel32.dll	2	ReleaseMutex
kernel32.dll	2	GetThreadTimes
kernel32.dll	2	SetFileAttributesW
kernel32.dll	2	GetStringTypeW
kernel32.dll	2	GetStringTypeA
kernel32.dll	2	LCMapStringW
kernel32.dll	2	MultiByteToWideChar
kernel32.dll	2	LCMapStringA
kernel32.dll	2	GetLocaleInfoA
kernel32.dll	2	HeapSize
kernel32.dll	2	RtlUnwind
kernel32.dll	2	HeapReAlloc
kernel32.dll	2	HeapAlloc
kernel32.dll	2	IsValidCodePage
kernel32.dll	2	GetOEMCP
kernel32.dll	2	GetACP
kernel32.dll	2	GetCPInfo
kernel32.dll	2	InitializeCriticalSectionAndSpinCount
kernel32.dll	2	LoadLibraryA
kernel32.dll	2	IsDebuggerPresent
kernel32.dll	2	UnhandledExceptionFilter
kernel32.dll	2	GetCurrentProcess
kernel32.dll	2	TerminateProcess
kernel32.dll	2	EnterCriticalSection
kernel32.dll	2	LeaveCriticalSection
kernel32.dll	2	GetSystemTimeAsFileTime
kernel32.dll	2	GetCurrentProcessId
kernel32.dll	2	GetTickCount
kernel32.dll	2	QueryPerformanceCounter
kernel32.dll	2	HeapFree
kernel32.dll	2	VirtualFree
kernel32.dll	2	HeapCreate
kernel32.dll	2	InterlockedDecrement
kernel32.dll	2	GetCurrentThreadId
kernel32.dll	2	SetLastError
kernel32.dll	2	TlsFree
kernel32.dll	2	TlsSetValue
kernel32.dll	2	TlsAlloc
kernel32.dll	2	TlsGetValue
kernel32.dll	2	DeleteCriticalSection
kernel32.dll	2	GetFileType
kernel32.dll	2	SetHandleCount
kernel32.dll	2	GetEnvironmentStringsW
kernel32.dll	2	GetLastError
kernel32.dll	2	WideCharToMultiByte
kernel32.dll	2	FreeEnvironmentStringsW
kernel32.dll	2	GetEnvironmentStrings
kernel32.dll	2	FreeEnvironmentStringsA
kernel32.dll	2	GetStdHandle
kernel32.dll	2	WriteFile
kernel32.dll	2	GetProcAddress
kernel32.dll	2	Sleep
kernel32.dll	2	SetUnhandledExceptionFilter
kernel32.dll	2	GetCommandLineA
kernel32.dll	2	GetStartupInfoA
kernel32.dll	2	FlsAlloc
kernel32.dll	2	FlsGetValue
kernel32.dll	2	FlsSetValue
kernel32.dll	2	FlsFree
kernel32.dll	2	EncodePointer
kernel32.dll	2	DecodePointer
kernel32.dll	2	IsProcessorFeaturePresent
kernel32.dll	2	WaitForMultipleObjects
kernel32.dll	2	CreateEventA
kernel32.dll	2	GetSystemDirectoryA
kernel32.dll	2	FileTimeToSystemTime
kernel32.dll	2	FileTimeToLocalFileTime
kernel32.dll	2	GetTimeZoneInformation
kernel32.dll	2	GetLocalTime
kernel32.dll	2	lstrcatA
kernel32.dll	2	CreateProcessA
kernel32.dll	2	GetThreadContext
kernel32.dll	2	SetThreadContext
kernel32.dll	2	ResumeThread
kernel32.dll	2	GetTempPathA
kernel32.dll	2	FreeLibrary
kernel32.dll	2	GetProcessHeap
kernel32.dll	2	GetVolumeInformationA
kernel32.dll	2	GetComputerNameA
kernel32.dll	2	GetVersionExA
kernel32.dll	2	lstrcmpiA
kernel32.dll	2	lstrlenA
kernel32.dll	2	lstrcpynA
kernel32.dll	2	InterlockedExchange
kernel32.dll	2	GetOverlappedResult
kernel32.dll	2	WaitForSingleObject
kernel32.dll	2	ReadFile
kernel32.dll	2	DisconnectNamedPipe
kernel32.dll	2	ConnectNamedPipe
kernel32.dll	2	CreateNamedPipeA
kernel32.dll	2	CreateFileA
kernel32.dll	2	GetEnvironmentVariableA
kernel32.dll	2	DeleteFileA
kernel32.dll	2	IsBadWritePtr
kernel32.dll	2	IsBadCodePtr
kernel32.dll	2	lstrcpyA
kernel32.dll	2	lstrcmpA
kernel32.dll	2	IsBadReadPtr
kernel32.dll	2	WriteProcessMemory
kernel32.dll	2	VirtualAllocEx
kernel32.dll	2	GetFileSize
kernel32.dll	2	SetFileAttributesA
kernel32.dll	2	SystemTimeToFileTime
kernel32.dll	2	GetSystemTime
kernel32.dll	2	DeviceIoControl
kernel32.dll	2	ExitThread
kernel32.dll	2	CreateThread
ADVAPI32.dll	2	RegQueryValueExA
ADVAPI32.dll	2	RegCreateKeyExA
ADVAPI32.dll	2	RegSetValueExA
ADVAPI32.dll	2	RegOpenKeyExA
ADVAPI32.dll	2	RegCloseKey
SHELL32.dll	2	SHGetFolderPathA
SHELL32.dll	2	SHGetFolderPathW
SHELL32.dll	2	ShellExecuteA
WS2_32.dll	2
user32.dll	2	MessageBoxA
user32.dll	2	wsprintfA
user32.dll	2	GetWindowTextLengthW
user32.dll	2	GetMessageA
user32.dll	2	GetClassNameA
user32.dll	2	GetWindowRect
user32.dll	2	SetActiveWindow
user32.dll	2	InsertMenuItemA
user32.dll	2	GetMessageW
user32.dll	2	RegisterClassExA
user32.dll	2	SendDlgItemMessageA
user32.dll	2	FillRect
user32.dll	2	IsChild
user32.dll	2	DrawTextW
user32.dll	2	GetKeyState
user32.dll	2	SetForegroundWindow
user32.dll	2	GetFocus
user32.dll	2	DialogBoxParamW
user32.dll	2	IsWindowEnabled
user32.dll	2	CharNextA
user32.dll	2	SetFocus
user32.dll	2	SendMessageA
user32.dll	2	InsertMenuItemW
user32.dll	2	GetDC
user32.dll	2	IsDialogMessageA
user32.dll	2	LoadAcceleratorsW
user32.dll	2	GetForegroundWindow
user32.dll	2	RegisterClassExW
user32.dll	2	LoadIconW
user32.dll	2	OffsetRect
user32.dll	2	GetWindowTextA
user32.dll	2	SetPropA
user32.dll	2	CheckMenuRadioItem
user32.dll	2	SetWindowLongA
user32.dll	2	IntersectRect
user32.dll	2	InvalidateRect
user32.dll	2	AppendMenuW
user32.dll	2	GetAncestor
user32.dll	2	GetClipboardData
user32.dll	2	GetWindowTextW
user32.dll	2	GetClassNameW
user32.dll	2	ReleaseDC
user32.dll	2	EnableMenuItem
user32.dll	2	MonitorFromWindow
user32.dll	2	GetMenuState
user32.dll	2	IsWindowUnicode
user32.dll	2	SetWindowLongW
user32.dll	2	SendDlgItemMessageW
user32.dll	2	CreateDialogParamW
user32.dll	2	DrawMenuBar
user32.dll	2	RemoveMenu
user32.dll	2	CreateWindowExW
user32.dll	2	OpenClipboard
user32.dll	2	GetClassWord
user32.dll	2	GetSystemMetrics
user32.dll	2	SetWindowTextA
user32.dll	2	UpdateWindow
user32.dll	2	SetMenuItemInfoA
user32.dll	2	DialogBoxParamA
user32.dll	2	SetClassWord
user32.dll	2	GetMonitorInfoW
user32.dll	2	CopyRect
user32.dll	2	RegisterClassA
user32.dll	2	DispatchMessageW
user32.dll	2	UnregisterClassW
user32.dll	2	CharToOemA

show previews

offset	size	type	comment
0	139264	EXE	02/02/2013 03:29:05	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

f65c3b58235d463310341cac0beb6c5a_.exe

MZ Header

DOS stub

PE Header

Sections

Data Directory