filename | jsup38.exe | |
---|---|---|
size | 389857 (0x5f2e1) | |
md5 | a56ef7f1a11b682e1bd1d5a0b497b211 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe8 |
Rich Header
lib id | version | times used |
---|---|---|
93 | 4035 | 3 |
1 | 0 | 98 |
149 | 30729 | 23 |
132 | 30729 | 35 |
131 | 30729 | 112 |
132 | 21022 | 1 |
148 | 21022 | 1 |
145 | 21022 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x20c93 | 0x20e00 | R-X CODE | |
.rdata | 0x22000 | 0x2406 | 0x2600 | R-- IDATA | |
.data | 0x25000 | 0x4e08 | 0x2400 | RW- IDATA | |
.rsrc | 0x2a000 | 0x393c0 | 0x39400 | R-- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x23c1c | 0x28 | |
RESOURCE | 0x2a000 | 0x393c0 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0x23758 | 0x40 | |
Bound_IAT | 0 | 0 | |
IAT | 0x22000 | 0x15c | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
id | lang | string |
---|---|---|
65408 | 0 | '%s' is not a valid integer value |
65409 | 0 | '%s' is not a valid floating point value |
65410 | 0 | '%s' is not a valid date |
65411 | 0 | '%s' is not a valid time |
65412 | 0 | '%s' is not a valid date and time |
65413 | 0 | Invalid argument to time encode |
65414 | 0 | Invalid argument to date encode |
65415 | 0 | Out of memory |
65416 | 0 | I/O error %d |
65417 | 0 | File not found |
65418 | 0 | Invalid filename |
65419 | 0 | Too many open files |
65420 | 0 | File access denied |
65421 | 0 | Read beyond end of file |
65422 | 0 | Disk full |
65423 | 0 | Invalid numeric input |
65424 | 0 | Division by zero |
65425 | 0 | Range check error |
65426 | 0 | Integer overflow |
65427 | 0 | Invalid floating point operation |
65428 | 0 | Floating point division by zero |
65429 | 0 | Floating point overflow |
65430 | 0 | Floating point underflow |
65431 | 0 | Invalid pointer operation |
65432 | 0 | Invalid class typecast |
65433 | 0 | Access violation at address %p. %s of address %p |
65434 | 0 | Stack overflow |
65435 | 0 | Control-C hit |
65436 | 0 | Privileged instruction |
65437 | 0 | Operation aborted |
65438 | 0 | Exception %s in module %s at %p. %s%s |
65439 | 0 | Application Error |
65440 | 0 | Format '%s' invalid or incompatible with argument |
65441 | 0 | No argument for format '%s' |
65442 | 0 | Invalid variant type conversion |
65443 | 0 | Invalid variant operation |
65444 | 0 | Variant method calls not supported |
65445 | 0 | Read |
65446 | 0 | Write |
65447 | 0 | Format result longer than 4096 characters |
65448 | 0 | Format string too long |
65449 | 0 | Error creating variant array |
65450 | 0 | Variant is not an array |
65451 | 0 | Variant array index out of bounds |
65452 | 0 | External exception %x |
65472 | 0 | Jan |
65473 | 0 | Feb |
65474 | 0 | Mar |
65475 | 0 | Apr |
65476 | 0 | May |
65477 | 0 | Jun |
65478 | 0 | Jul |
65479 | 0 | Aug |
65480 | 0 | Sep |
65481 | 0 | Oct |
65482 | 0 | Nov |
65483 | 0 | Dec |
65488 | 0 | January |
65489 | 0 | February |
65490 | 0 | March |
65491 | 0 | April |
65492 | 0 | May |
65493 | 0 | June |
65494 | 0 | July |
65495 | 0 | August |
65496 | 0 | September |
65497 | 0 | October |
65498 | 0 | November |
65499 | 0 | December |
65504 | 0 | Sun |
65505 | 0 | Mon |
65506 | 0 | Tue |
65507 | 0 | Wed |
65508 | 0 | Thu |
65509 | 0 | Fri |
65510 | 0 | Sat |
65511 | 0 | Sunday |
65512 | 0 | Monday |
65513 | 0 | Tuesday |
65514 | 0 | Wednesday |
65515 | 0 | Thursday |
65516 | 0 | Friday |
65517 | 0 | Saturday |
StringTable 040904b0
Comments | Stared steep select worry pen |
CompanyName | Numeral naturally Florida |
FileDescription | Eventually atomic swam |
FileVersion | 5.67.58.0 |
InternalName | Failed.exe |
LegalCopyright | Copyright (C) Definition driven |
LegalTrademarks | Stretch spider spite gasoline distant |
OriginalFilename | Failed.exe |
ProductName | Naturally |
ProductVersion | 5.67.58.0 |
VS_FIXEDFILEINFO
FileVersion | 5.67.58.0 |
ProductVersion | 5.67.58.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Scanning the drive for archives: 1 file, 389857 bytes (381 KiB) Errors: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK