| filename | LicenciaCivilcad_2020-2004.exe | |
|---|---|---|
| size | 3175936 (0x307600) | |
| md5 | ae4774bfb4a1e8414b487d041fb2675f | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xe0 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
00000040: 68 10 84 2d 2c 71 ea 7e 2c 71 ea 7e 2c 71 ea 7e |h..-,q.~,q.~,q.~|
00000050: 32 23 7f 7e 3f 71 ea 7e 0b b7 91 7e 2b 71 ea 7e |2#.~?q.~...~+q.~|
00000060: 2c 71 eb 7e 5c 71 ea 7e 32 23 6e 7e 1c 71 ea 7e |,q.~\q.~2#n~.q.~|
00000070: 32 23 69 7e a2 71 ea 7e 32 23 7b 7e 2d 71 ea 7e |2#i~.q.~2#{~-q.~|
00000080: 52 69 63 68 2c 71 ea 7e 00 00 00 00 00 00 00 00 |Rich,q.~........|
00000090: 00 00 00 00 00 00 00 00 44 66 f5 5c 00 00 00 00 |........Df.\....|
PE Header
Packer / Compiler
Enigma Protector 1.1X-1.3X (Sukhov Vladimir & Serge N. Markin) |
Sections
Data Directory
| type | va | size | |
|---|---|---|---|
| EXPORT | 0 | 0 | |
| IMPORT | 0x423000 | 0x210 | |
| RESOURCE | 0x182000 | 0x21834 | |
| EXCEPTION | 0 | 0 | |
| SECURITY | 0 | 0 | |
| BASERELOC | 0 | 0 | |
| DEBUG | 0 | 0 | |
| ARCHITECTURE | 0 | 0 | |
| GLOBALPTR | 0 | 0 | |
| TLS | 0 | 0 | |
| LOAD_CONFIG | 0 | 0 | |
| Bound_IAT | 0 | 0 | |
| IAT | 0 | 0 | |
| Delay_IAT | 0 | 0 | |
| CLR_Header | 0 | 0 |
| type | name | size | cp | |
|---|---|---|---|---|
| ICON | #1 | 135428 | 1252 | |
| RCDATA | __ | 1284785 | 1252 | |
| RCDATA | ~ | 32 | 1252 | |
| GROUP_ICON | #32512 | 20 | 1252 | |
| VERSION | #1 | 892 | 1252 | |
| MANIFEST | #1 | 490 | 1252 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| kernel32.dll | GetModuleHandleA | ||
| kernel32.dll | GetProcAddress | ||
| kernel32.dll | ExitProcess | ||
| kernel32.dll | LoadLibraryA | ||
| user32.dll | MessageBoxA | ||
| advapi32.dll | RegCloseKey | ||
| oleaut32.dll | SysFreeString | ||
| gdi32.dll | CreateFontA | ||
| shell32.dll | ShellExecuteA | ||
| version.dll | GetFileVersionInfoA | ||
| ole32.dll | OleInitialize |
StringTable 000004b0
| Comments | |
| CompanyName | |
| FileDescription | LicenciaCivilcad2019 |
| FileVersion | 1.0.0.0 |
| InternalName | LicenciaCivilcad2019.exe |
| LegalCopyright | Copyright © 2018 |
| LegalTrademarks | |
| OriginalFilename | LicenciaCivilcad2019.exe |
| ProductName | LicenciaCivilcad2019 |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
VS_FIXEDFILEINFO
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[!] non-zero dos stub after rich_hdr: "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Df\xF5\\\x00\x00\x00\x00"
[?] can't find file_offset of VA 0x180d6c