filenameJFK Reloaded.exe
size2453504 (0x257000)
md5a3180a90bdc252b61221443727ec1b6c
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x128

Rich Header

lib idversiontimes used
10520679
96307711
15307747
953077191
008
1884441
29917877
9521793
2592102
2891785
9320672
93217915
10343
993077242
9430521
9030771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x421b5d0c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x1d2000
SizeOfInitializedData0xe7000
SizeOfUninitializedData0
AddressOfEntryPoint0x25f00
BaseOfCode0x1000
BaseOfData0x1d3000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x2ba000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

InstallShield 2000

Sections

namevavsizeraw sizeflags
.text0x10000x1d1cbf0x1d2000R-X CODE
.rdata0x1d30000x165e20x17000RW- IDATA
.data0x1ea0000x8cf300x2a000RW- IDATA
.data10x2770000x8e00x1000RW- IDATA
.rsrc0x2780000x419a00x42000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1e7c100xc8
RESOURCE0x2780000x419a0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x1d30000x518
Delay_IAT00
CLR_Header00
typenamesizecp
WAD#12011580
BITMAP#104915660
BITMAP#11531120
ICON#113840
ICON#211280
ICON#317360
ICON#424400
ICON#522160
ICON#642640
ICON#737520
ICON#896400
ICON#9169360
ICON#10216400
ICON#11380560
ICON#12676240
DIALOG#91560
DIALOG#1034920
DIALOG#1051560
GROUP_ICON#1011740
module_namehintordfunction_name
KERNEL32.dll603LockResource
KERNEL32.dll589LoadResource
KERNEL32.dll218FindResourceA
KERNEL32.dll105CreateThread
KERNEL32.dll774SetEnvironmentVariableA
KERNEL32.dll53CompareStringW
KERNEL32.dll52CompareStringA
KERNEL32.dll365GetLocaleInfoW
KERNEL32.dll550IsBadCodePtr
KERNEL32.dll827SetUnhandledExceptionFilter
KERNEL32.dll771SetEndOfFile
KERNEL32.dll537InitializeCriticalSection
KERNEL32.dll543InterlockedExchange
KERNEL32.dll469GetTickCount
KERNEL32.dll891VirtualQuery
KERNEL32.dll443GetSystemInfo
KERNEL32.dll889VirtualProtect
KERNEL32.dll473GetUserDefaultLCID
KERNEL32.dll165EnumSystemLocalesA
KERNEL32.dll364GetLocaleInfoA
KERNEL32.dll565IsValidCodePage
KERNEL32.dll567IsValidLocale
KERNEL32.dll437GetStringTypeW
KERNEL32.dll434GetStringTypeA
KERNEL32.dll667RaiseException
KERNEL32.dll252GetCPInfo
KERNEL32.dll395GetOEMCP
KERNEL32.dll245GetACP
KERNEL32.dll883VirtualAlloc
KERNEL32.dll528HeapReAlloc
KERNEL32.dll518HeapAlloc
KERNEL32.dll472GetTimeZoneInformation
KERNEL32.dll681ReadFile
KERNEL32.dll315GetCurrentProcessId
KERNEL32.dll229FlushFileBuffers
KERNEL32.dll782SetFilePointer
KERNEL32.dll810SetStdHandle
KERNEL32.dll886VirtualFree
KERNEL32.dll520HeapCreate
KERNEL32.dll522HeapDestroy
KERNEL32.dll350GetFileType
KERNEL32.dll791SetHandleCount
KERNEL32.dll335GetEnvironmentStringsW
KERNEL32.dll238FreeEnvironmentStringsW
KERNEL32.dll333GetEnvironmentStrings
KERNEL32.dll237FreeEnvironmentStringsA
KERNEL32.dll864UnhandledExceptionFilter
KERNEL32.dll571LCMapStringW
KERNEL32.dll570LCMapStringA
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll795SetLastError
KERNEL32.dll854TlsGetValue
KERNEL32.dll855TlsSetValue
KERNEL32.dll853TlsFree
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll852TlsAlloc
KERNEL32.dll546InterlockedIncrement
KERNEL32.dll542InterlockedDecrement
KERNEL32.dll433GetStdHandle
KERNEL32.dll714RtlUnwind
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll780SetFileAttributesA
KERNEL32.dll534HeapValidate
KERNEL32.dll553IsBadReadPtr
KERNEL32.dll556IsBadWritePtr
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll612MoveFileA
KERNEL32.dll124DeleteFileA
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll264GetCommandLineA
KERNEL32.dll431GetStartupInfoA
KERNEL32.dll847TerminateProcess
KERNEL32.dll562IsProcessorFeaturePresent
KERNEL32.dll411GetProcessHeap
KERNEL32.dll524HeapFree
KERNEL32.dll916WriteFile
KERNEL32.dll903WideCharToMultiByte
KERNEL32.dll839Sleep
KERNEL32.dll51CompareFileTime
KERNEL32.dll349GetFileTime
KERNEL32.dll312GetCurrentDirectoryA
KERNEL32.dll765SetCurrentDirectoryA
KERNEL32.dll197FindClose
KERNEL32.dll211FindNextFileA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll175ExitProcess
KERNEL32.dll950lstrcpyA
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll663QueryPerformanceCounter
KERNEL32.dll664QueryPerformanceFrequency
KERNEL32.dll239FreeLibrary
KERNEL32.dll408GetProcAddress
KERNEL32.dll584LoadLibraryA
KERNEL32.dll494GlobalAlloc
KERNEL32.dll505GlobalLock
KERNEL32.dll512GlobalUnlock
KERNEL32.dll115DebugBreak
KERNEL32.dll234FormatMessageA
KERNEL32.dll361GetLastError
KERNEL32.dll594LocalFree
KERNEL32.dll956lstrlenA
KERNEL32.dll641OutputDebugStringA
KERNEL32.dll96CreateProcessA
KERNEL32.dll46CloseHandle
KERNEL32.dll709ResumeThread
KERNEL32.dll899WaitForSingleObject
KERNEL32.dll479GetVersionExA
KERNEL32.dll131DeviceIoControl
KERNEL32.dll804SetPriorityClass
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll77CreateFileA
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll489GetWindowsDirectoryA
KERNEL32.dll441GetSystemDirectoryA
KERNEL32.dll73CreateEventA
KERNEL32.dll897WaitForMultipleObjects
KERNEL32.dll777SetEvent
KERNEL32.dll706ResetEvent
KERNEL32.dll655PulseEvent
KERNEL32.dll69CreateDirectoryA
USER32.dll654ShowCursor
USER32.dll158DialogBoxParamA
USER32.dll640SetWindowLongA
USER32.dll439LoadBitmapA
USER32.dll198EndDialog
USER32.dll643SetWindowPos
USER32.dll273GetDlgItem
USER32.dll571SendMessageA
USER32.dll646SetWindowTextA
USER32.dll196EnableWindow
USER32.dll658ShowWindow
USER32.dll403InvalidateRect
USER32.dll436KillTimer
USER32.dll634SetTimer
USER32.dll346GetSysColor
USER32.dll13BeginPaint
USER32.dll255GetClientRect
USER32.dll430IsWindowEnabled
USER32.dll561ScreenToClient
USER32.dll200EndPaint
USER32.dll27CallWindowProcA
USER32.dll153DestroyWindow
USER32.dll372GetWindowRect
USER32.dll270GetDesktopWindow
USER32.dll501OpenClipboard
USER32.dll586SetClipboardData
USER32.dll66CloseClipboard
USER32.dll598SetFocus
USER32.dll26CallNextHookEx
USER32.dll650SetWindowsHookExA
USER32.dll665SystemParametersInfoA
USER32.dll349GetSystemMetrics
USER32.dll422IsIconic
USER32.dll371GetWindowPlacement
USER32.dll500OffsetRect
USER32.dll402IntersectRect
USER32.dll511PeekMessageA
USER32.dll314GetMessageA
USER32.dll682TranslateMessage
USER32.dll161DispatchMessageA
USER32.dll211EnumDisplaySettingsA
USER32.dll535RegisterClassExA
USER32.dll1AdjustWindowRect
USER32.dll96CreateWindowExA
USER32.dll699UpdateWindow
USER32.dll267GetCursorPos
USER32.dll142DefWindowProcA
USER32.dll515PostQuitMessage
USER32.dll728wvsprintfA
USER32.dll589SetCursor
USER32.dll441LoadCursorA
USER32.dll553ReleaseCapture
USER32.dll478MessageBoxA
USER32.dll64ClientToScreen
USER32.dll32ChangeDisplaySettingsA
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll591SetCursorPos
GDI32.dll562SetPixelFormat
GDI32.dll589SwapBuffers
GDI32.dll359GetDCOrgEx
GDI32.dll24ChoosePixelFormat
GDI32.dll352GetClipBox
GDI32.dll502Rectangle
GDI32.dll80CreateSolidBrush
GDI32.dll75CreateRectRgn
GDI32.dll232FillRgn
GDI32.dll143DeleteObject
GDI32.dll526SelectObject
GDI32.dll144DescribePixelFormat
SHELL32.dll194SHGetSpecialFolderLocation
SHELL32.dll187SHGetPathFromIDListA
SHELL32.dll262ShellExecuteA
SHELL32.dll182SHGetMalloc
OPENGL32.dll70glDisable
OPENGL32.dll212glPopMatrix
OPENGL32.dll217glPushMatrix
OPENGL32.dll261glStencilFunc
OPENGL32.dll181glMatrixMode
OPENGL32.dll166glLoadMatrixf
OPENGL32.dll43glColor4f
OPENGL32.dll342glViewport
OPENGL32.dll10glBegin
OPENGL32.dll328glVertex3fv
OPENGL32.dll81glEnd
OPENGL32.dll164glLoadIdentity
OPENGL32.dll79glEnable
OPENGL32.dll13glBlendFunc
OPENGL32.dll67glDepthFunc
OPENGL32.dll314glTexSubImage2D
OPENGL32.dll56glColorMaterial
OPENGL32.dll155glLightModeli
OPENGL32.dll124glGetString
OPENGL32.dll105glGenTextures
OPENGL32.dll109glGetError
OPENGL32.dll308glTexImage2D
OPENGL32.dll132glGetTexLevelParameteriv
OPENGL32.dll66glDeleteTextures
OPENGL32.dll49glColor4ub
OPENGL32.dll33glColor3ub
OPENGL32.dll274glTexCoord2f
OPENGL32.dll319glVertex2f
OPENGL32.dll347wglDeleteContext
OPENGL32.dll355wglGetProcAddress
OPENGL32.dll356wglMakeCurrent
OPENGL32.dll345wglCreateContext
OPENGL32.dll154glLightModelfv
OPENGL32.dll351wglGetCurrentDC
OPENGL32.dll72glDrawArrays
OPENGL32.dll177glMaterialf
OPENGL32.dll178glMaterialfv
OPENGL32.dll296glTexCoordPointer
OPENGL32.dll303glTexGenf
OPENGL32.dll316glTranslatef
OPENGL32.dll299glTexEnvi
OPENGL32.dll297glTexEnvf
OPENGL32.dll257glScalef
OPENGL32.dll195glNormalPointer
OPENGL32.dll57glColorPointer
OPENGL32.dll7glAlphaFunc
OPENGL32.dll80glEnableClientState
OPENGL32.dll14glCallList
OPENGL32.dll341glVertexPointer
OPENGL32.dll104glGenLists
OPENGL32.dll184glNewList
OPENGL32.dll82glEndList
OPENGL32.dll327glVertex3f
OPENGL32.dll71glDisableClientState
OPENGL32.dll60glCopyTexImage2D
OPENGL32.dll311glTexParameteri
OPENGL32.dll11glBindTexture
OPENGL32.dll74glDrawElements
OPENGL32.dll18glClearColor
OPENGL32.dll16glClear
OPENGL32.dll9glArrayElement
OPENGL32.dll27glColor3f
OPENGL32.dll68glDepthMask
OPENGL32.dll65glDeleteLists
OPENGL32.dll158glLightfv
OPENGL32.dll102glFrontFace
OPENGL32.dll263glStencilOp
OPENGL32.dll247glRectf
OPENGL32.dll55glColorMask
WS2_32.dll58WSASendTo
WS2_32.dll6
WS2_32.dll2
WS2_32.dll36WSAHtons
WS2_32.dll21
WS2_32.dll3
WS2_32.dll39WSAIoctl
WS2_32.dll64WSASocketA
WS2_32.dll25WSAEnumProtocolsA
WS2_32.dll12
WS2_32.dll15
WS2_32.dll115
WS2_32.dll116
WS2_32.dll9
WS2_32.dll11
WS2_32.dll52
WS2_32.dll23
WS2_32.dll10
WS2_32.dll4
WS2_32.dll18
WS2_32.dll19
WS2_32.dll16
WS2_32.dll53WSARecvFrom
WS2_32.dll7
WS2_32.dll111
WS2_32.dll49WSANtohs
WINMM.dll149mmioSetInfo
WINMM.dll141mmioOpenA
WINMM.dll134mmioClose
WINMM.dll136mmioDescend
WINMM.dll143mmioRead
WINMM.dll133mmioAscend
WINMM.dll146mmioSeek
WINMM.dll138mmioGetInfo
WINMM.dll132mmioAdvance
ADVAPI32.dll475RegFlushKey
ADVAPI32.dll464RegDeleteKeyA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll466RegDeleteValueA
ADVAPI32.dll457RegCloseKey
ADVAPI32.dll481RegOpenKeyA
ADVAPI32.dll291GetUserNameA
ADVAPI32.dll473RegEnumValueA
ADVAPI32.dll470RegEnumKeyExA
ADVAPI32.dll469RegEnumKeyA
ADVAPI32.dll487RegQueryInfoKeyA
ADVAPI32.dll492RegQueryValueExA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll461RegCreateKeyExA
ole32.dll104CoUninitialize
ole32.dll16CoCreateInstance
ole32.dll58CoInitialize
offsetsizetypecomment
02453504EXE02/22/2005 16:25:48#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK