filenamemal.bin
size2156784 (0x20e8f0)
md5b53fcbdef8c00df90e2f0ec14d887bb6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
2234062913
22440629304
225406293
2232100535
2252100583
22421005247
225208067
1313072914
1473072933
10384
2294062959
219210051
15101
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x58b69da3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x152400
SizeOfInitializedData0xbd400
SizeOfUninitializedData0
AddressOfEntryPoint0xd3bab
BaseOfCode0x1000
BaseOfData0x154000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x213000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x1522af0x152400R-X CODE
.rdata0x1540000x41cbc0x41e00R-- IDATA
.data0x1960000x66b980x60c00RW- IDATA
.rsrc0x1fd0000x60800x6200R-- IDATA
.reloc0x2040000xe66c0xe800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x193d040x154
RESOURCE0x1fd0000x6080
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x18b1f80x40
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#137520
ICON#222160
ICON#313840
ICON#496400
ICON#542640
ICON#611280
MENU#129420
DIALOG#1311360
GROUP_ICON#132900
VERSION#15120
MANIFEST#18330
module_namehintordfunction_name
KERNEL32.DLLFreeLibrary
KERNEL32.DLLGetCurrentThread
KERNEL32.DLLReadProcessMemory
KERNEL32.DLLGetModuleFileNameW
KERNEL32.DLLGetEnvironmentVariableA
KERNEL32.DLLSetLastError
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetCurrentDirectoryA
KERNEL32.DLLGetVersionExA
KERNEL32.DLLSuspendThread
KERNEL32.DLLResumeThread
KERNEL32.DLLExitProcess
KERNEL32.DLLMapViewOfFile
KERNEL32.DLLUnmapViewOfFile
KERNEL32.DLLFindResourceExW
KERNEL32.DLLFindResourceW
KERNEL32.DLLLoadResource
KERNEL32.DLLSetEvent
KERNEL32.DLLGetSystemDirectoryW
KERNEL32.DLLSizeofResource
KERNEL32.DLLWritePrivateProfileStringW
KERNEL32.DLLGetTempFileNameA
KERNEL32.DLLFindClose
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLWritePrivateProfileStringA
KERNEL32.DLLCreateFileMappingW
KERNEL32.DLLLockResource
KERNEL32.DLLCreateEventW
KERNEL32.DLLCreateMutexW
KERNEL32.DLLSetUnhandledExceptionFilter
KERNEL32.DLLGetCurrentProcess
KERNEL32.DLLSetCurrentDirectoryW
KERNEL32.DLLGetCurrentProcessId
KERNEL32.DLLGetModuleHandleW
KERNEL32.DLLGetTempPathW
KERNEL32.DLLMoveFileW
KERNEL32.DLLDeleteFileW
KERNEL32.DLLTerminateProcess
KERNEL32.DLLProcess32FirstW
KERNEL32.DLLProcess32NextW
KERNEL32.DLLCreateToolhelp32Snapshot
KERNEL32.DLLInterlockedIncrement
KERNEL32.DLLDosDateTimeToFileTime
KERNEL32.DLLSystemTimeToFileTime
KERNEL32.DLLGetCurrentDirectoryW
KERNEL32.DLLGetFileType
KERNEL32.DLLSetConsoleMode
KERNEL32.DLLReadConsoleInputA
KERNEL32.DLLGetThreadContext
KERNEL32.DLLSetFileAttributesW
KERNEL32.DLLLocalFree
KERNEL32.DLLFindNextFileW
KERNEL32.DLLSetFileAttributesA
KERNEL32.DLLlstrlenW
KERNEL32.DLLCreateFileW
KERNEL32.DLLGetSystemDirectoryA
KERNEL32.DLLGetFileAttributesW
KERNEL32.DLLGetSystemTime
KERNEL32.DLLGetFileAttributesA
KERNEL32.DLLGetFileAttributesExW
KERNEL32.DLLGetDiskFreeSpaceA
KERNEL32.DLLCreateFileMappingA
KERNEL32.DLLGetDiskFreeSpaceW
KERNEL32.DLLLockFileEx
KERNEL32.DLLHeapValidate
KERNEL32.DLLHeapCreate
KERNEL32.DLLFormatMessageW
KERNEL32.DLLFormatMessageA
KERNEL32.DLLUnlockFileEx
KERNEL32.DLLWaitForSingleObjectEx
KERNEL32.DLLLockFile
KERNEL32.DLLFlushViewOfFile
KERNEL32.DLLUnlockFile
KERNEL32.DLLInterlockedCompareExchange
KERNEL32.DLLTryEnterCriticalSection
KERNEL32.DLLHeapCompact
KERNEL32.DLLGetFullPathNameA
KERNEL32.DLLGetFullPathNameW
KERNEL32.DLLFlushConsoleInputBuffer
KERNEL32.DLLGlobalMemoryStatus
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLlstrlenA
KERNEL32.DLLSetEnvironmentVariableA
KERNEL32.DLLWriteConsoleW
KERNEL32.DLLSetStdHandle
KERNEL32.DLLGetTimeZoneInformation
KERNEL32.DLLSetConsoleCtrlHandler
KERNEL32.DLLFreeEnvironmentStringsW
KERNEL32.DLLGetEnvironmentStringsW
KERNEL32.DLLQueryPerformanceCounter
KERNEL32.DLLLoadLibraryW
KERNEL32.DLLGetVolumeInformationA
KERNEL32.DLLIsBadReadPtr
KERNEL32.DLLGetComputerNameW
KERNEL32.DLLFindFirstFileW
KERNEL32.DLLlstrcmpA
KERNEL32.DLLGetEnvironmentVariableW
KERNEL32.DLLReadFile
KERNEL32.DLLGetFileSize
KERNEL32.DLLDeviceIoControl
KERNEL32.DLLGetVersionExW
KERNEL32.DLLLoadLibraryExA
KERNEL32.DLLGetLocalTime
KERNEL32.DLLGetProcAddress
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLCreateThread
KERNEL32.DLLDeleteFileA
KERNEL32.DLLGetTempPathA
KERNEL32.DLLCloseHandle
KERNEL32.DLLWaitForMultipleObjects
KERNEL32.DLLCreateDirectoryA
KERNEL32.DLLCreateProcessA
KERNEL32.DLLSleep
KERNEL32.DLLInitializeCriticalSection
KERNEL32.DLLWriteFile
KERNEL32.DLLGetTickCount
KERNEL32.DLLWaitForSingleObject
KERNEL32.DLLInterlockedDecrement
KERNEL32.DLLSetEndOfFile
KERNEL32.DLLSetFilePointer
KERNEL32.DLLCreateFileA
KERNEL32.DLLDeleteCriticalSection
KERNEL32.DLLDecodePointer
KERNEL32.DLLEnterCriticalSection
KERNEL32.DLLHeapSize
KERNEL32.DLLGetLastError
KERNEL32.DLLInterlockedExchange
KERNEL32.DLLRaiseException
KERNEL32.DLLLeaveCriticalSection
KERNEL32.DLLHeapDestroy
KERNEL32.DLLInitializeCriticalSectionAndSpinCount
KERNEL32.DLLGetProcessHeap
KERNEL32.DLLHeapReAlloc
KERNEL32.DLLHeapFree
KERNEL32.DLLMoveFileExW
KERNEL32.DLLFlushFileBuffers
KERNEL32.DLLFindFirstFileExW
KERNEL32.DLLReadConsoleW
KERNEL32.DLLSetFilePointerEx
KERNEL32.DLLGetConsoleMode
KERNEL32.DLLGetConsoleCP
KERNEL32.DLLGetStdHandle
KERNEL32.DLLGetModuleHandleExW
KERNEL32.DLLGetOEMCP
KERNEL32.DLLGetACP
KERNEL32.DLLIsValidCodePage
KERNEL32.DLLEnumSystemLocalesW
KERNEL32.DLLGetUserDefaultLCID
KERNEL32.DLLIsValidLocale
KERNEL32.DLLGetLocaleInfoW
KERNEL32.DLLLCMapStringW
KERNEL32.DLLCompareStringW
KERNEL32.DLLGetStartupInfoW
KERNEL32.DLLTlsFree
KERNEL32.DLLTlsSetValue
KERNEL32.DLLTlsGetValue
KERNEL32.DLLTlsAlloc
KERNEL32.DLLUnhandledExceptionFilter
KERNEL32.DLLGetCPInfo
KERNEL32.DLLRtlUnwind
KERNEL32.DLLGetCommandLineW
KERNEL32.DLLLoadLibraryExW
KERNEL32.DLLGetCurrentThreadId
KERNEL32.DLLAreFileApisANSI
KERNEL32.DLLFileTimeToSystemTime
KERNEL32.DLLSystemTimeToTzSpecificLocalTime
KERNEL32.DLLGetSystemTimeAsFileTime
KERNEL32.DLLIsProcessorFeaturePresent
KERNEL32.DLLExitThread
KERNEL32.DLLVirtualQuery
KERNEL32.DLLVirtualProtect
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLGetSystemInfo
KERNEL32.DLLGetStringTypeW
KERNEL32.DLLEncodePointer
KERNEL32.DLLOutputDebugStringW
KERNEL32.DLLIsDebuggerPresent
KERNEL32.DLLHeapAlloc
KERNEL32.DLLOutputDebugStringA
ADVAPI32.dllRegCreateKeyExA
ADVAPI32.dllRegSetValueExA
ADVAPI32.dllGetUserNameA
ADVAPI32.dllRegSetValueExW
ADVAPI32.dllConvertSidToStringSidW
ADVAPI32.dllRegEnumKeyExW
ADVAPI32.dllRegOpenKeyExW
ADVAPI32.dllLookupAccountNameW
ADVAPI32.dllRegQueryValueExW
ADVAPI32.dllCryptHashData
ADVAPI32.dllCryptDestroyHash
ADVAPI32.dllCryptDecrypt
ADVAPI32.dllCryptDestroyKey
ADVAPI32.dllCryptCreateHash
ADVAPI32.dllCryptEncrypt
ADVAPI32.dllCryptAcquireContextA
ADVAPI32.dllCryptDeriveKey
ADVAPI32.dllRegCloseKey
ADVAPI32.dllRegOpenKeyExA
ADVAPI32.dllRegQueryValueExA
ADVAPI32.dllReportEventA
ADVAPI32.dllRegisterEventSourceA
ADVAPI32.dllDeregisterEventSource
d3d9.dllDirect3DCreate9
GDI32.dllSetTextColor
GDI32.dllStretchBlt
GDI32.dllSetBkMode
GDI32.dllCreateFontW
GDI32.dllGetDIBColorTable
GDI32.dllCreateRoundRectRgn
GDI32.dllCreateSolidBrush
GDI32.dllTextOutA
GDI32.dllBitBlt
GDI32.dllDeleteDC
GDI32.dllCreateDIBSection
GDI32.dllSetDIBColorTable
GDI32.dllDeleteObject
GDI32.dllSelectObject
GDI32.dllCreateCompatibleDC
GDI32.dllCreateCompatibleBitmap
GDI32.dllGetObjectW
GDI32.dllGetTextExtentPoint32A
GDI32.dllFrameRgn
GDI32.dllEnumFontsW
gdiplus.dllGdipCloneImage
gdiplus.dllGdipGetImageWidth
gdiplus.dllGdiplusStartup
gdiplus.dllGdipGetImageHeight
gdiplus.dllGdipGetImagePalette
gdiplus.dllGdipFree
gdiplus.dllGdiplusShutdown
gdiplus.dllGdipGetImagePaletteSize
gdiplus.dllGdipDisposeImage
gdiplus.dllGdipAlloc
gdiplus.dllGdipDrawImageI
gdiplus.dllGdipBitmapUnlockBits
gdiplus.dllGdipGetImageGraphicsContext
gdiplus.dllGdipDeleteGraphics
gdiplus.dllGdipCreateBitmapFromScan0
gdiplus.dllGdipGetImagePixelFormat
gdiplus.dllGdipCreateBitmapFromStream
gdiplus.dllGdipBitmapLockBits
IPHLPAPI.DLLGetAdaptersInfo
MSIMG32.dllTransparentBlt
MSIMG32.dllAlphaBlend
ole32.dllCLSIDFromProgID
ole32.dllCoUninitialize
ole32.dllCoInitialize
ole32.dllCoCreateInstance
ole32.dllCreateStreamOnHGlobal
ole32.dllCLSIDFromString
OLEAUT32.dll8
OLEAUT32.dll200
OLEAUT32.dll6
OLEAUT32.dll9
OLEAUT32.dll2
SETUPAPI.dllSetupDiGetClassDevsW
SETUPAPI.dllSetupDiGetDeviceRegistryPropertyA
SETUPAPI.dllSetupIterateCabinetW
SETUPAPI.dllSetupDiDestroyDeviceInfoList
SETUPAPI.dllSetupDiEnumDeviceInfo
SHELL32.dllSHGetSpecialFolderPathA
SHELL32.dllShell_NotifyIconW
SHELL32.dllShellExecuteA
SHELL32.dllSHGetSpecialFolderPathW
SHELL32.dllSHGetPathFromIDListW
SHELL32.dllSHGetMalloc
SHELL32.dll165
SHELL32.dllSHGetPathFromIDListA
SHELL32.dllSHGetSpecialFolderLocation
SHLWAPI.dllStrStrIW
SHLWAPI.dllPathAppendW
SHLWAPI.dllPathIsDirectoryW
SHLWAPI.dllStrStrIA
SHLWAPI.dllPathFileExistsA
SHLWAPI.dllPathRemoveFileSpecW
SHLWAPI.dllPathFindFileNameW
SHLWAPI.dllPathFileExistsW
urlmon.dllURLDownloadToFileA
urlmon.dllURLDownloadToFileW
USER32.dllEnableWindow
USER32.dllSetForegroundWindow
USER32.dllEndPaint
USER32.dllSetCursor
USER32.dllSetRect
USER32.dllPtInRect
USER32.dllGetSystemMenu
USER32.dllMessageBoxW
USER32.dllDispatchMessageW
USER32.dllCopyRect
USER32.dllDefWindowProcW
USER32.dllUpdateWindow
USER32.dllSendMessageW
USER32.dllSetWindowTextA
USER32.dllIsWindowVisible
USER32.dllGetSystemMetrics
USER32.dllCreateWindowExW
USER32.dllMessageBoxA
USER32.dllGetUserObjectInformationW
USER32.dllGetProcessWindowStation
USER32.dllIsWindow
USER32.dllShowWindow
USER32.dllLoadStringW
USER32.dllGetCursorPos
USER32.dllSetWindowPos
USER32.dllGetDesktopWindow
USER32.dllSetWindowLongW
USER32.dllEnableMenuItem
USER32.dllReleaseDC
USER32.dllGetWindowTextW
USER32.dllGetWindowLongW
USER32.dllLoadMenuW
USER32.dllLoadIconW
USER32.dllRegisterClassExW
USER32.dllTranslateMessage
USER32.dllGetDC
USER32.dllBeginPaint
USER32.dllSetRectEmpty
USER32.dllCharNextA
USER32.dllLoadCursorW
USER32.dllGetSubMenu
USER32.dllDrawTextA
USER32.dllKillTimer
USER32.dllFillRect
USER32.dllTrackPopupMenu
USER32.dllPostQuitMessage
USER32.dllGetMessageW
USER32.dllSetTimer
USER32.dllDestroyWindow
VERSION.dllGetFileVersionInfoA
VERSION.dllGetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoSizeW
VERSION.dllVerQueryValueW
VERSION.dllGetFileVersionInfoW
WS2_32.dll3
WS2_32.dll10
WS2_32.dll115
WS2_32.dll11
WS2_32.dll18
WS2_32.dll111
WS2_32.dll22
WS2_32.dll151
WS2_32.dll4
WS2_32.dll9
WS2_32.dll21
WS2_32.dll16
WS2_32.dll23
WS2_32.dll52
WS2_32.dll19
WS2_32.dll5
WS2_32.dll17
WS2_32.dll20

StringTable 080404b0

FileDescriptiondownloader
FileVersion1.0.2.301
OriginalFilenamedownloader
ProductNamedownloader
ProductVersion1.0.2.301

VS_FIXEDFILEINFO

FileVersion1.0.2.301
ProductVersion1.0.2.301
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
02137088EXE03/01/2017 10:08:35#
15c115HTM#
196ac4151ZIP#
1972c4166630ZIP#
1972ee4927PNG(48 x 49)#
1986594099PNG(48 x 48)#
1996893788PNG(48 x 48)#
19a5814870PNG(48 x 48)#
19b8b14146PNG(48 x 48)#
19c90e4549PNG(48 x 48)#
19db023515PNG(48 x 48)#
19e8e95445PNG(48 x 48)#
19fe575294PNG(48 x 48)#
1a13336440PNG(48 x 48)#
1a2c842379PNG(48 x 48)#
1a35fa4333PNG(48 x 48)#
1a47161471PNG(48 x 48)#
1a4d023097PNG(48 x 48)#
1a59452035PNG(48 x 48)#
1a61633935PNG(48 x 48)#
1a70ee4451PNG(48 x 48)#
1a827e3531PNG(48 x 48)#
1a90743630PNG(48 x 48)#
1a9ed05616PNG(48 x 48)#
1ab4ed3269PNG(48 x 48)#
1ac1dc4644PNG(48 x 48)#
1ad42a2923PNG(48 x 48)#
1adfbe5981PNG(48 x 48)#
1af7454708PNG(48 x 48)#
1b09d64917PNG(48 x 48)#
1b1d373877PNG(48 x 48)#
1b2c873185PNG(48 x 48)#
1b39213569PNG(48 x 48)#
1b4cb84025PNG(48 x 48)#
1b5c9d5258PNG(48 x 48)#
1b71502372PNG(48 x 48)#
1b7abe3944PNG(48 x 48)#
1b8a4f4238PNG(48 x 48)#
1b9b095026PNG(48 x 48)#
1baed63514PNG(48 x 48)#
1bbcc02858PNG(48 x 48)#
1bc8163214PNG(48 x 48)#
1bd4d34231PNG(48 x 48)#
1be5842449PNG(48 x 48)#
1c0ad4162101ZIP#
1c422a48166PNG(260 x 180)#
1cfe79267PNG(42 x 14)#
1d03431643PNG(78 x 22)#
1d499b65538PNG(929 x 71)#
1e718f94PNG(10 x 20)#
1e721a91PNG(10 x 20)#
1e72993224PNG(116 x 22)#
209c0019696BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 2156784 bytes (2107 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK