filenameCamouflage.exe
size217088 (0x35000)
md59f08258a80d578a0f1cc38fe4c2aebb5
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xb8

Rich Header

lib idversiontimes used
1472991
987839
1388771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3ac3a567
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x30000
SizeOfInitializedData0x6000
SizeOfUninitializedData0
AddressOfEntryPoint0x23bc
BaseOfCode0x1000
BaseOfData0x31000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion1.2
SubsystemVersion4.0
Reserved10
SizeOfImage0x37000
SizeOfHeaders0x1000
CheckSum0x3bcd0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual Basic v5.0

Sections

namevavsizeraw sizeflags
.text0x10000x2f3280x30000R-X CODE
.data0x310000x20700x1000RW- IDATA
.rsrc0x340000x2ed00x3000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2f9b40x28
RESOURCE0x340000x2ed0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2280x20
IAT0x10000x260
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#3000122161200
STRING#634481200
STRING#649241200
STRING#6511321200
STRING#6612281200
STRING#6713881200
STRING#6814201200
STRING#698561200
STRING#702681200
STRING#713441200
GROUP_ICON#1201200
VERSION#110521200
idlangstring
10011033Select file to use as camouflage
10021033You must enter the password again for verification.
10031033The passwords do not match. Please enter them again.
10041033All Files
10051033Select an output file
10061033Extract files here
10071033Select an output folder
10081033Unable to Camouflage!
10091033Unable to Uncamouflage!
10101033Unable to Camouflage
10111033This file cannot be modified.
10121033The disk file
10131033already exists.
10141033Should Camouflage overwrite it?
10151033Should Camouflage overwrite it so that the file in the archive can be viewed?
10161033< &Back
10171033&Next >
10181033&Finish
10191033&Close
10201033&View Readme File
10211033Choose the folder where the file is to be extracted.
10221033Choose the folder where the files are to be extracted.
10231033Choose the folder where the selected file is to be extracted.
10241033Choose the folder where the selected files are to be extracted.
10251033You must first select a file to be used as camouflage.
10261033The selected file does not exist.
10271033You must first specify an Output File.
10281033You must first specify an Output Folder.
10291033You must choose a different filename for the Output File.
10301033The specified folder
10311033does not exist.
10321033Do you wish to create it?
10331033Cannot create folder
10341033_
10351033You cannot extract
10361033into this folder.
10371033It has the same name as the file from which it is being extracted.
10381033Please choose a different folder, or unselect this file.
10391033Extracting files from
10401033...
10411033Camouflaging files to
10421033Either the file requires a password or it is not camouflaged.
10431033Either the password is incorrect or the file is not camouflaged.
10441033Either the files require a password or at least one of them is not camouflaged.
10451033Either the password is incorrect or at least one of the files is not camouflaged.
10461033Note that passwords are case-sensitive.
10471033Note that each file must have the same password, and that passwords are case-sensitive.
10481033Settings
10491033Camouflage Version
10501033You're using
10511033Click here to freely download the latest version:
10521033Camouflage Usage:
10531033to Camouflage files
10541033to Uncamouflage files
10551033Cannot find file
10561033.
10571033Please select files only, no folders.
10581033Access denied to '
10591033'.
10601033This file may be in use by Windows.
10611033The size of
10621033is 0 bytes.
10631033You cannot camouflage empty files.
10641033This file will be hidden within your camouflaged file.
10651033Double-click to open it. Right-click for more options.
10661033These files will be hidden within your camouflaged file.
10671033Double-click a file to open it. Right-click for more options.
10681033Enter a security password for your camouflaged file if you wish.
10691033Your camouflaged file will be made to look and act like the following file.
10701033Your camouflaged files will be made to look and act like the following file.
10711033Choose the location and filename for the camouflage file that is about to be created.
10721033Create This File
10731033Enter the password (if any) to extract the files from the camouflaged file.
10741033Enter the password (if any) to extract the files from the camouflaged files.
10751033Extract To Folder
10761033The camouflaged file (created with Camouflage
10771033) contains this file.
10781033) contains these files.
10791033The camouflaged files contain these files.
10801033Select the files you wish to extract or leave them unselected to extract them all.
10811033Click here to exit
10821033Click here to continue
10831033Click here to return to the previous screen
10841033Click here to view the Readme.txt file
10851033Show or hide pop-up help messages
10861033Change the caption of the popup menu that appears when right-clicking files in Windows Explorer
10871033Show or hide columns in file selection screens
10881033Add or remove Camouflage from Windows Explorer
10891033Choose a file to be copied and used as camouflage
10901033Browse...
10911033Click here to view or change Camouflage settings
10921033Unknown
10931033Properties
10941033Created with Camouflage
10951033_
10961033Show File Details:
10971033Show Camouflage menu options when right-clicking on files in Windows Explorer.
10981033'Camouflage' Menu Text:
10991033'Uncamouflage' Menu Text:
11001033Click here to get the latest version
11011033Show Tool Tips
11021033Camouflage Using
11031033Password
11041033Verify Password
11051033Name
11061033Size
11071033Created
11081033Modified
11091033Accessed
11101033Attributes
11111033OK
11121033Location
11131033Read-only
11141033Hidden
11151033Archive
11161033System
11171033Yes
11181033No
11191033Apply to all files
11201033Today
11211033Language:
11221033Make camouflaged files Read-Only
11231033Recommended to prevent the accidental deletion of the camouflaged part of the file
11241033Open
11251033Open in temporary folder
module_namehintordfunction_name
MSVBVM60.DLL__vbaStrI2
MSVBVM60.DLL_CIcos
MSVBVM60.DLL_adj_fptan
MSVBVM60.DLL__vbaVarMove
MSVBVM60.DLL__vbaStrI4
MSVBVM60.DLL__vbaAryMove
MSVBVM60.DLL__vbaFreeVar
MSVBVM60.DLL__vbaLenBstr
MSVBVM60.DLL__vbaStrVarMove
MSVBVM60.DLL__vbaLateIdCall
MSVBVM60.DLL__vbaFreeVarList
MSVBVM60.DLL__vbaPut3
MSVBVM60.DLL__vbaEnd
MSVBVM60.DLL_adj_fdiv_m64
MSVBVM60.DLL__vbaFreeObjList
MSVBVM60.DLL__vbaGetFxStr4
MSVBVM60.DLL_adj_fprem1
MSVBVM60.DLL__vbaRecAnsiToUni
MSVBVM60.DLL519
MSVBVM60.DLL__vbaCopyBytes
MSVBVM60.DLL__vbaStrCat
MSVBVM60.DLL553
MSVBVM60.DLL__vbaLsetFixstr
MSVBVM60.DLL660
MSVBVM60.DLL__vbaRecDestruct
MSVBVM60.DLL__vbaSetSystemError
MSVBVM60.DLL__vbaHresultCheckObj
MSVBVM60.DLL__vbaLenVar
MSVBVM60.DLL_adj_fdiv_m32
MSVBVM60.DLL__vbaAryDestruct
MSVBVM60.DLL669
MSVBVM60.DLL592
MSVBVM60.DLL__vbaExitProc
MSVBVM60.DLL__vbaFileCloseAll
MSVBVM60.DLL__vbaObjSet
MSVBVM60.DLL__vbaOnError
MSVBVM60.DLL595
MSVBVM60.DLL_adj_fdiv_m16i
MSVBVM60.DLL__vbaObjSetAddref
MSVBVM60.DLL_adj_fdivr_m16i
MSVBVM60.DLL598
MSVBVM60.DLL__vbaFpR4
MSVBVM60.DLL520
MSVBVM60.DLL__vbaStrFixstr
MSVBVM60.DLL521
MSVBVM60.DLL__vbaFpR8
MSVBVM60.DLL__vbaBoolVarNull
MSVBVM60.DLL_CIsin
MSVBVM60.DLL631
MSVBVM60.DLL525
MSVBVM60.DLL__vbaChkstk
MSVBVM60.DLL__vbaFileClose
MSVBVM60.DLLEVENT_SINK_AddRef
MSVBVM60.DLL527
MSVBVM60.DLL__vbaGenerateBoundsError
MSVBVM60.DLL528
MSVBVM60.DLL529
MSVBVM60.DLL__vbaStrCmp
MSVBVM60.DLL__vbaGet3
MSVBVM60.DLL__vbaPutOwner3
MSVBVM60.DLL__vbaVarTstEq
MSVBVM60.DLL__vbaGet4
MSVBVM60.DLL__vbaI2I4
MSVBVM60.DLLDllFunctionCall
MSVBVM60.DLL563
MSVBVM60.DLL__vbaCastObjVar
MSVBVM60.DLL__vbaLbound
MSVBVM60.DLL__vbaRedimPreserve
MSVBVM60.DLL_adj_fpatan
MSVBVM60.DLL__vbaR4Var
MSVBVM60.DLL__vbaFixstrConstruct
MSVBVM60.DLL__vbaLateIdCallLd
MSVBVM60.DLL__vbaRedim
MSVBVM60.DLL__vbaRecUniToAnsi
MSVBVM60.DLLEVENT_SINK_Release
MSVBVM60.DLL_CIsqrt
MSVBVM60.DLL__vbaVarAnd
MSVBVM60.DLLEVENT_SINK_QueryInterface
MSVBVM60.DLL__vbaExceptHandler
MSVBVM60.DLL__vbaStrToUnicode
MSVBVM60.DLL606
MSVBVM60.DLL_adj_fprem
MSVBVM60.DLL_adj_fdivr_m64
MSVBVM60.DLL__vbaI2Str
MSVBVM60.DLL531
MSVBVM60.DLL__vbaFPException
MSVBVM60.DLL717
MSVBVM60.DLL__vbaUbound
MSVBVM60.DLL__vbaGetOwner3
MSVBVM60.DLL__vbaStrVarVal
MSVBVM60.DLL534
MSVBVM60.DLL__vbaVarCat
MSVBVM60.DLL536
MSVBVM60.DLL__vbaLsetFixstrFree
MSVBVM60.DLL__vbaI2Var
MSVBVM60.DLL537
MSVBVM60.DLL538
MSVBVM60.DLL645
MSVBVM60.DLL_CIlog
MSVBVM60.DLL539
MSVBVM60.DLL__vbaErrorOverflow
MSVBVM60.DLL__vbaFileOpen
MSVBVM60.DLL__vbaVar2Vec
MSVBVM60.DLL__vbaNew2
MSVBVM60.DLL__vbaInStr
MSVBVM60.DLL648
MSVBVM60.DLL570
MSVBVM60.DLL_adj_fdiv_m32i
MSVBVM60.DLL572
MSVBVM60.DLL_adj_fdivr_m32i
MSVBVM60.DLL__vbaStrCopy
MSVBVM60.DLL681
MSVBVM60.DLL__vbaFreeStrList
MSVBVM60.DLL_adj_fdivr_m32
MSVBVM60.DLL_adj_fdiv_r
MSVBVM60.DLL578
MSVBVM60.DLL685
MSVBVM60.DLL100
MSVBVM60.DLL579
MSVBVM60.DLL__vbaI4Var
MSVBVM60.DLL__vbaVarCmpEq
MSVBVM60.DLL__vbaAryLock
MSVBVM60.DLL__vbaStrToAnsi
MSVBVM60.DLL__vbaVarDup
MSVBVM60.DLL__vbaFpI2
MSVBVM60.DLL__vbaVarCopy
MSVBVM60.DLL616
MSVBVM60.DLL__vbaFpI4
MSVBVM60.DLL__vbaRecDestructAnsi
MSVBVM60.DLL_CIatan
MSVBVM60.DLL540
MSVBVM60.DLL__vbaStrMove
MSVBVM60.DLL618
MSVBVM60.DLL__vbaCastObj
MSVBVM60.DLL541
MSVBVM60.DLL542
MSVBVM60.DLL650
MSVBVM60.DLL_allmul
MSVBVM60.DLL__vbaLateIdSt
MSVBVM60.DLL651
MSVBVM60.DLL545
MSVBVM60.DLL652
MSVBVM60.DLL_CItan
MSVBVM60.DLL546
MSVBVM60.DLL__vbaAryUnlock
MSVBVM60.DLL_CIexp
MSVBVM60.DLL__vbaI4ErrVar
MSVBVM60.DLL__vbaFreeStr
MSVBVM60.DLL__vbaFreeObj
MSVBVM60.DLL580
MSVBVM60.DLL581

StringTable 040904B0

Commentswww.camouflagesoftware.com
CompanyNameTwisted Pear Productions
FileDescriptionKeeps files containing sensitive information safe from prying eyes.
LegalCopyrightCopyright © 2000-2001 by Twisted Pear Productions, All rights reserved worldwide.
ProductNameCamouflage
FileVersion1.02.0001
ProductVersion1.02.0001
InternalNameCamouflage
OriginalFilenameCamouflage.exe

VS_FIXEDFILEINFO

FileVersion1.2.0.1
ProductVersion1.2.0.1
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0217088EXE03/29/2001 21:13:11#
15c115HTM#
393a1334BMP(16 x 16)#
b81e1044GIF(32 x 32)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] can't find file_offset of VA 0x228