filenameccoc_chat_server.exe
size136982 (0x21716)
md5a9224ebeeb6615065511ef438985e942
typePE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x4d653402
PointerToSymbolTable0x1e400
NumberOfSymbols0x25e
SizeOfOptionalHeader0xe0
Characteristics0x307
Magic0x10b
LinkerVersion2.56
SizeOfCode0xc00
SizeOfInitializedData0x1e000
SizeOfUninitializedData0x200
AddressOfEntryPoint0x1220
BaseOfCode0x1000
BaseOfData0x2000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x23000
SizeOfHeaders0x400
CheckSum0x2bf13
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Dev-C++ v4.9.9 / MingWin32 - Dev C++ v4.9.9.1

Sections

namevavsizeraw sizeflags
.text0x10000xbf40xc00R-X CODE IDATA
.data0x20000x400x200RW- IDATA
.rdata0x30000x1900x200R-- IDATA
.bss0x40000xb00RW- UDATA
.idata0x50000x3ec0x400RW- IDATA
.rsrc0x60000x1cb600x1cc00RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x50000x3ec
RESOURCE0x60000x1cb60
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#137520
ICON#222160
ICON#317360
ICON#413840
ICON#5895750
ICON#696400
ICON#742640
ICON#824400
ICON#911280
GROUP_ICONA1320
VERSION#17120
module_namehintordfunction_name
WS2_32.DLL63WSAStartup
WS2_32.DLL76accept
WS2_32.DLL77bind
WS2_32.DLL94htons
WS2_32.DLL96inet_ntoa
WS2_32.DLL98listen
WS2_32.DLL101recv
WS2_32.DLL104send
WS2_32.DLL108socket
KERNEL32.dll1AddAtomA
KERNEL32.dll155ExitProcess
KERNEL32.dll175FindAtomA
KERNEL32.dll220GetAtomNameA
KERNEL32.dll735SetUnhandledExceptionFilter
msvcrt.dll39__getmainargs
msvcrt.dll60__p__environ
msvcrt.dll62__p__fmode
msvcrt.dll80__set_app_type
msvcrt.dll121_cexit
msvcrt.dll233_iob
msvcrt.dll350_onexit
msvcrt.dll388_setmode
msvcrt.dll533abort
msvcrt.dll540atexit
msvcrt.dll554exit
msvcrt.dll560fflush
msvcrt.dll569fprintf
msvcrt.dll575free
msvcrt.dll626malloc
msvcrt.dll634memset
msvcrt.dll637perror
msvcrt.dll639printf
msvcrt.dll656signal
msvcrt.dll667strcpy

StringTable 040904E4

CompanyNameCCOC
FileVersion1.0
FileDescriptionCCOC
InternalName
LegalCopyrightciberolimpiadas@ccoc.mil.co
LegalTrademarksciberolimpiadas@ccoc.mil.co
OriginalFilename
ProductNameCCOC
ProductVersion1.0

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0
FileType1
FileSubtype0
offsetsizetypecomment
0123904EXE02/23/2011 16:21:22#
15c115HTM#
3dec89575PNG(256 x 256)#
1e40013078BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER