filenameNtuucode.exe
size59392 (0xe800)
md5b1b0008f30c5e2e88be8d56840b06017
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3227e3f1
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion3.10
SizeOfCode0x6400
SizeOfInitializedData0x7400
SizeOfUninitializedData0
AddressOfEntryPoint0x6270
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion4.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0x15432
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v4.2

Sections

namevavsizeraw sizeflags
.text0x10000x633c0x6400R-X CODE
.data0x80000x3680x400RW- IDATA
.rsrc0x90000x63780x6400R-- IDATA
.reloc0x100000xafc0xc00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x6c380x78
RESOURCE0x90000x6378
EXCEPTION00
SECURITY00
BASERELOC0x100000x998
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x408
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#23080
CURSOR#31800
CURSOR#43080
CURSOR#51800
CURSOR#63080
CURSOR#71800
CURSOR#83080
CURSOR#91800
CURSOR#103080
CURSOR#111800
CURSOR#125120
CURSOR#131800
CURSOR#145120
CURSOR#151800
CURSOR#165120
CURSOR#171800
CURSOR#185120
CURSOR#191800
CURSOR#203080
CURSOR#211800
CURSOR#223080
CURSOR#231800
BITMAP#211840
BITMAP#2656715080
BITMAP#309941840
BITMAP#309953640
BITMAP#309963240
ICON#17440
MENU#25420
DIALOG#1003900
DIALOG#1018820
DIALOG#307212320
STRING#1480
STRING#20493100
STRING#3585580
STRING#36012960
STRING#36021760
STRING#36036640
STRING#36052400
STRING#36061700
STRING#3697700
STRING#37131340
STRING#38255040
STRING#38261340
STRING#38411300
STRING#3842420
STRING#38433300
STRING#3850740
STRING#38578780
STRING#38586740
STRING#38597320
STRING#38653020
STRING#38662220
STRING#386712200
STRING#38686120
STRING#3869440
ACCELERATORS#21040
GROUP_CURSOR#30977340
GROUP_CURSOR#30979340
GROUP_CURSOR#30980340
GROUP_CURSOR#30981340
GROUP_CURSOR#30982340
GROUP_CURSOR#30983340
GROUP_CURSOR#30984340
GROUP_CURSOR#30985340
GROUP_CURSOR#30986340
GROUP_CURSOR#30987340
GROUP_CURSOR#30988340
GROUP_ICON#2200
VERSION#16920
idlangstring
21033NTUUCODE
327681033Decode.
327691033If checked, the screen will clear after each decode.
327701033Checked if drive is NTFS
327711033(default) Checked if drive is FAT.
327731033Load the decoded file.
573441033NTUUCODE
573451033Ready
576001033Create a new document
576011033Open an existing encoded file.
576021033Close the active document
576031033Save the active document
576041033Save the encoded data as a file.
576161033Open this document
576171033Open this document
576181033Open this document
576191033Open this document
576321033Erase the selection
576331033Erase everything
576341033Copy the selection and put it on the Clipboard
576351033Cut the selection and put it on the Clipboard
576361033Find the specified text
576371033Insert Clipboard contents
576401033Repeat the last action
576411033Replace specific text with different text
576421033Select the entire document
576431033Undo the last action
576441033Redo the previously undone action
576641033Display program information, version number and copyright
576651033Quit the application; prompts to save documents
576801033Switch to the next window pane
576811033Switch back to the previous window pane
591361033EXT
591371033CAP
591381033NUM
591391033SCRL
591401033OVR
591411033REC
593921033Show or hide the toolbar
593931033Show or hide the status bar
611841033Change the window size
611851033Change the window position
611861033Reduce the window to an icon
611871033Enlarge the window to full size
611881033Switch to the next document window
611891033Switch to the previous document window
611901033Close the active window and prompts to save the documents
612021033Restore the window to normal size
612031033Activate Task List
614401033Open
614411033Save As
614421033All Files (*.*)
614431033Untitled
614461033an unnamed file
614571033&Hide
614721033No error message is available.
614731033An unsupported operation was attempted.
614741033A required resource was unavailable.
614751033Out of memory.
614761033An unknown error has occurred.
615881033Linked %s
615891033Unknown Type
616961033Invalid filename.
616971033Failed to open document.
616981033Failed to save document.
616991033Save changes to %1?
617001033Failed to create empty document.
617011033The file is too large to open.
617021033Could not start print job.
617031033Failed to launch help.
617041033Internal application error.
617051033Command failed.
617061033Insufficient memory to perform operation.
617071033System registry entries have been removed and the INI file (if any) was deleted.
617081033Not all of the system registry entries (or INI file) were removed.
617121033Please enter an integer.
617131033Please enter a number.
617141033Please enter an integer between %1 and %2.
617151033Please enter a number between %1 and %2.
617161033Please enter no more than %1 characters.
617171033Please select a button.
617181033Please enter an integer between 0 and 255.
617191033Please enter a positive integer.
617201033Please enter a date and/or time.
617211033Please enter a currency.
617281033Unexpected file format.
617291033%1 Cannot find this file. Please verify that the correct path and file name are given.
617301033Destination disk drive is full.
617311033Unable to read from %1, it is opened by someone else.
617321033Unable to write to %1, it is read-only or opened by someone else.
617331033An unexpected error occurred while reading %1.
617341033An unexpected error occurred while writing %1.
618291033%1 Unable to register document. The document may already be open.
618361033Unable to read write-only property.
618371033Unable to write read-only property.
618401033Unable to load mail system support.
618411033Mail system DLL is invalid.
618421033Send Mail failed to send message.
618561033No error occurred.
618571033An unknown error occurred while accessing %1.
618581033%1 was not found.
618591033%1 contains an invalid path.
618601033%1 could not be opened because there are too many open files.
618611033Access to %1 was denied.
618621033An invalid file handle was associated with %1.
618631033%1 could not be removed because it is the current directory.
618641033%1 could not be created because the directory is full.
618651033Seek failed on %1
618661033A hardware I/O error was reported while accessing %1.
618671033A sharing violation occurred while accessing %1.
618681033A locking violation occurred while accessing %1.
618691033Disk full while accessing %1.
618701033An attempt was made to access %1 past its end.
618721033No error occurred.
618731033An unknown error occurred while accessing %1.
618741033An attempt was made to write to the reading %1.
618751033An attempt was made to access %1 past its end.
618761033An attempt was made to read from the writing %1.
618771033%1 has a bad format.
618781033%1 contained an unexpected object.
618791033%1 contains an incorrect schema.
618881033pixels
module_namehintordfunction_name
SHELL32.dll33FindExecutableA
MFC42.DLL3922
MFC42.DLL1089
MFC42.DLL5199
MFC42.DLL5731
MFC42.DLL2512
MFC42.DLL2396
MFC42.DLL5300
MFC42.DLL5302
MFC42.DLL2725
MFC42.DLL4079
MFC42.DLL3346
MFC42.DLL5307
MFC42.DLL5289
MFC42.DLL4698
MFC42.DLL2982
MFC42.DLL3147
MFC42.DLL3259
MFC42.DLL4465
MFC42.DLL3136
MFC42.DLL3262
MFC42.DLL2985
MFC42.DLL3081
MFC42.DLL2976
MFC42.DLL5714
MFC42.DLL3831
MFC42.DLL3825
MFC42.DLL3079
MFC42.DLL4080
MFC42.DLL3830
MFC42.DLL4424
MFC42.DLL3738
MFC42.DLL815
MFC42.DLL561
MFC42.DLL825
MFC42.DLL986
MFC42.DLL520
MFC42.DLL4159
MFC42.DLL5943
MFC42.DLL823
MFC42.DLL5265
MFC42.DLL4376
MFC42.DLL4853
MFC42.DLL4998
MFC42.DLL4710
MFC42.DLL2514
MFC42.DLL6052
MFC42.DLL4078
MFC42.DLL1775
MFC42.DLL4622
MFC42.DLL5241
MFC42.DLL2385
MFC42.DLL5163
MFC42.DLL6374
MFC42.DLL4353
MFC42.DLL5280
MFC42.DLL3798
MFC42.DLL4837
MFC42.DLL4441
MFC42.DLL2648
MFC42.DLL4407
MFC42.DLL6376
MFC42.DLL3749
MFC42.DLL5065
MFC42.DLL1727
MFC42.DLL5261
MFC42.DLL2446
MFC42.DLL2124
MFC42.DLL5277
MFC42.DLL4627
MFC42.DLL4425
MFC42.DLL3597
MFC42.DLL641
MFC42.DLL324
MFC42.DLL4234
MFC42.DLL1842
MFC42.DLL4242
MFC42.DLL2723
MFC42.DLL2390
MFC42.DLL3059
MFC42.DLL5100
MFC42.DLL5103
MFC42.DLL4467
MFC42.DLL4303
MFC42.DLL3350
MFC42.DLL5012
MFC42.DLL975
MFC42.DLL5472
MFC42.DLL3403
MFC42.DLL2879
MFC42.DLL2878
MFC42.DLL4151
MFC42.DLL6055
MFC42.DLL4077
MFC42.DLL1776
MFC42.DLL5237
MFC42.DLL5282
MFC42.DLL2649
MFC42.DLL1665
MFC42.DLL4436
MFC42.DLL2055
MFC42.DLL2554
MFC42.DLL674
MFC42.DLL796
MFC42.DLL807
MFC42.DLL554
MFC42.DLL529
MFC42.DLL366
MFC42.DLL6000
MFC42.DLL2117
MFC42.DLL5883
MFC42.DLL2120
MFC42.DLL4457
MFC42.DLL4147
MFC42.DLL1825
MFC42.DLL4238
MFC42.DLL4696
MFC42.DLL3058
MFC42.DLL3065
MFC42.DLL6336
MFC42.DLL2510
MFC42.DLL4486
MFC42.DLL5243
MFC42.DLL5740
MFC42.DLL1746
MFC42.DLL5577
MFC42.DLL3172
MFC42.DLL5653
MFC42.DLL4420
MFC42.DLL4953
MFC42.DLL4858
MFC42.DLL2399
MFC42.DLL4387
MFC42.DLL3454
MFC42.DLL3198
MFC42.DLL6080
MFC42.DLL6175
MFC42.DLL4623
MFC42.DLL4426
MFC42.DLL652
MFC42.DLL800
MFC42.DLL540
MFC42.DLL338
MFC42.DLL4823
MFC42.DLL1830
MFC42.DLL4239
MFC42.DLL2400
MFC42.DLL5061
MFC42.DLL4938
MFC42.DLL4940
MFC42.DLL4629
MFC42.DLL4589
MFC42.DLL4586
MFC42.DLL4897
MFC42.DLL4368
MFC42.DLL4891
MFC42.DLL5076
MFC42.DLL4341
MFC42.DLL4349
MFC42.DLL4723
MFC42.DLL4886
MFC42.DLL4531
MFC42.DLL4545
MFC42.DLL4543
MFC42.DLL4526
MFC42.DLL4529
MFC42.DLL4524
MFC42.DLL4964
MFC42.DLL4961
MFC42.DLL4108
MFC42.DLL5240
MFC42.DLL5290
MFC42.DLL3748
MFC42.DLL1723
MFC42.DLL5251
MFC42.DLL4432
MFC42.DLL5817
MFC42.DLL657
MFC42.DLL344
MFC42.DLL665
MFC42.DLL603
MFC42.DLL4224
MFC42.DLL3499
MFC42.DLL924
MFC42.DLL926
MFC42.DLL922
MFC42.DLL537
MFC42.DLL6199
MFC42.DLL2515
MFC42.DLL355
MFC42.DLL1979
MFC42.DLL1969
MFC42.DLL5836
MFC42.DLL273
MFC42.DLL5186
MFC42.DLL354
MFC42.DLL860
MFC42.DLL3184
MFC42.DLL858
MFC42.DLL3177
MFC42.DLL2379
MFC42.DLL2370
MFC42.DLL6334
MFC42.DLL6375
MFC42.DLL4274
MFC42.DLL4610
MFC42.DLL4612
MFC42.DLL5252
MFC42.DLL4427
MFC42.DLL2542
MFC42.DLL1576
MFC42.DLL1168
MSVCRT.dll110__p__fmode
MSVCRT.dll597fputs
MSVCRT.dll704strstr
MSVCRT.dll665printf
MSVCRT.dll666putc
MSVCRT.dll600fread
MSVCRT.dll207_exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll103__p__acmdln
MSVCRT.dll267_initterm
MSVCRT.dll88__getmainargs
MSVCRT.dll129__setusermatherr
MSVCRT.dll154_adjust_fdiv
MSVCRT.dll688sscanf
MSVCRT.dll699strncmp
MSVCRT.dll127__set_app_type
MSVCRT.dll198_except_handler3
MSVCRT.dll594fopen
MSVCRT.dll85__dllonexit
MSVCRT.dll385_onexit
MSVCRT.dll179_controlfp
MSVCRT.dll663perror
MSVCRT.dll589fgets
MSVCRT.dll111__p__iob
MSVCRT.dll595fprintf
MSVCRT.dll580exit
MSVCRT.dll583fclose
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll105__p__commode
MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll421_setmbcp
KERNEL32.dll623WinExec
KERNEL32.dll78DeleteFileA
KERNEL32.dll639WritePrivateProfileStringA
KERNEL32.dll274GetPrivateProfileStringA
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll575Sleep
KERNEL32.dll332GetVersion
USER32.dll479SendMessageA
USER32.dll178EnableWindow

StringTable 040904E4

CompanyName
FileDescriptionNTUUCODE MFC Application
FileVersion1.0.001
InternalNameNTUUCODE
LegalCopyright
LegalTrademarks
OriginalFilenameNTUUCODE.EXE
ProductNameNTUUCODE
ProductVersion1.0.001

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10001
FileType1
FileSubtype0
offsetsizetypecomment
059392EXE08/31/1996 07:04:17#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK