filenamewindow_demo.EXE
size48128 (0xbc00)
md5a8ece5a643a29ea6efb60cfa48455084
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0xa
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xc0
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: b4 09 66 ba 10 00 0e 1f  cd 21 66 b8 01 4c cd 21  |..f......!f..L.!|
00000010: 54 68 69 73 20 69 73 20  61 20 57 69 6e 33 32 20  |This is a Win32 |
00000020: 70 72 6f 67 72 61 6d 2e  0d 0a 24 00 00 00 00 00  |program...$.....|
00000030: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3039
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30e
Magic0x10b
LinkerVersion2.52
SizeOfCode0x9ef0
SizeOfInitializedData0x1800
SizeOfUninitializedData0x8e4
AddressOfEntryPoint0x1428
BaseOfCode0x1000
BaseOfData0xb000
ImageBase0x200000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x10000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x9ef00xa000R-X CODE
.data0xb0000xae40x200RW- IDATA
.link0xc0000xf3a0x1000RW- IDATA
.rloc0xd0000x5980x600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xc0000xf3a
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC0xd0000x598
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
COMCTL32.DLLImageList_Destroy
COMCTL32.DLLImageList_DrawEx
COMCTL32.DLLInitCommonControlsEx
GDI32.DLLArc
GDI32.DLLBitBlt
GDI32.DLLCreateCompatibleBitmap
GDI32.DLLCreateCompatibleDC
GDI32.DLLCreateDIBSection
GDI32.DLLCreateFontIndirectW
GDI32.DLLCreateHatchBrush
GDI32.DLLCreatePen
GDI32.DLLCreateRectRgn
GDI32.DLLCreateSolidBrush
GDI32.DLLDeleteDC
GDI32.DLLDeleteObject
GDI32.DLLExtFloodFill
GDI32.DLLExtTextOutW
GDI32.DLLGetCurrentObject
GDI32.DLLGetCurrentPositionEx
GDI32.DLLGetDeviceCaps
GDI32.DLLGetDIBits
GDI32.DLLGetObjectA
GDI32.DLLGetPixel
GDI32.DLLGetStockObject
GDI32.DLLGetTextExtentExPointW
GDI32.DLLGetTextExtentPoint32W
GDI32.DLLGetTextMetricsW
GDI32.DLLLineTo
GDI32.DLLMoveToEx
GDI32.DLLPie
GDI32.DLLPolygon
GDI32.DLLPolyline
GDI32.DLLRoundRect
GDI32.DLLSelectClipRgn
GDI32.DLLSelectObject
GDI32.DLLSetBkColor
GDI32.DLLSetBkMode
GDI32.DLLSetBrushOrgEx
GDI32.DLLSetDIBits
GDI32.DLLSetPixelV
GDI32.DLLSetPolyFillMode
GDI32.DLLSetROP2
GDI32.DLLSetStretchBltMode
GDI32.DLLSetTextAlign
GDI32.DLLSetTextColor
GDI32.DLLStretchBlt
GDI32.DLLTextOutW
KERNEL32.DLLCloseHandle
KERNEL32.DLLCreateFileW
KERNEL32.DLLCreateThread
KERNEL32.DLLEnumResourceNamesW
KERNEL32.DLLExitProcess
KERNEL32.DLLFindClose
KERNEL32.DLLGetCommandLineW
KERNEL32.DLLGetLastError
KERNEL32.DLLGetLocalTime
KERNEL32.DLLGetModuleHandleW
KERNEL32.DLLGetStartupInfoA
KERNEL32.DLLGetTickCount
KERNEL32.DLLGetVersionExA
KERNEL32.DLLGlobalAlloc
KERNEL32.DLLGlobalFree
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLSetEndOfFile
KERNEL32.DLLSetErrorMode
KERNEL32.DLLSetLastError
KERNEL32.DLLSleep
KERNEL32.DLLTlsAlloc
KERNEL32.DLLTlsFree
KERNEL32.DLLTlsGetValue
KERNEL32.DLLTlsSetValue
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLWriteFile
OLE32.DLLCoCreateInstance
OLE32.DLLCoInitialize
OLE32.DLLCoUninitialize
OLEAUT32.DLLSysAllocStringByteLen
OLEAUT32.DLLSysAllocStringLen
OLEAUT32.DLLSysFreeString
OLEAUT32.DLLVariantClear
USER32.DLLAdjustWindowRectEx
USER32.DLLCallWindowProcW
USER32.DLLCheckRadioButton
USER32.DLLClientToScreen
USER32.DLLCreateAcceleratorTableW
USER32.DLLCreateDialogIndirectParamW
USER32.DLLCreateMenu
USER32.DLLCreatePopupMenu
USER32.DLLCreateWindowExW
USER32.DLLDefWindowProcW
USER32.DLLDeleteMenu
USER32.DLLDestroyAcceleratorTable
USER32.DLLDestroyIcon
USER32.DLLDestroyWindow
USER32.DLLDispatchMessageW
USER32.DLLDrawIconEx
USER32.DLLDrawMenuBar
USER32.DLLEnableWindow
USER32.DLLFillRect
USER32.DLLGetClientRect
USER32.DLLGetCursorPos
USER32.DLLGetDC
USER32.DLLGetDlgItem
USER32.DLLGetKeyState
USER32.DLLGetMenu
USER32.DLLGetMenuItemInfoW
USER32.DLLGetScrollInfo
USER32.DLLGetSysColor
USER32.DLLGetSysColorBrush
USER32.DLLGetSystemMenu
USER32.DLLGetSystemMetrics
USER32.DLLGetWindowLongW
USER32.DLLGetWindowRect
USER32.DLLGetWindowTextW
USER32.DLLGetWindowTextLengthW
USER32.DLLInsertMenuItemW
USER32.DLLInvalidateRect
USER32.DLLIsDialogMessageA
USER32.DLLIsWindow
USER32.DLLLoadCursorW
USER32.DLLLoadIconW
USER32.DLLLoadImageW
USER32.DLLMapDialogRect
USER32.DLLMessageBeep
USER32.DLLMessageBoxA
USER32.DLLMessageBoxW
USER32.DLLPeekMessageW
USER32.DLLPostMessageA
USER32.DLLPostMessageW
USER32.DLLRedrawWindow
USER32.DLLRegisterClassExW
USER32.DLLReleaseDC
USER32.DLLScreenToClient
USER32.DLLSendMessageA
USER32.DLLSendMessageW
USER32.DLLSetFocus
USER32.DLLSetForegroundWindow
USER32.DLLSetMenu
USER32.DLLSetMenuItemInfoW
USER32.DLLSetScrollInfo
USER32.DLLSetWindowLongW
USER32.DLLSetWindowPos
USER32.DLLSetWindowTextW
USER32.DLLShowWindow
USER32.DLLSystemParametersInfoA
USER32.DLLTrackPopupMenu
USER32.DLLTranslateAccelerator
USER32.DLLTranslateMessage
USER32.DLLUpdateWindow
offsetsizetypecomment
048128EXE01/01/1970 03:25:45#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK