filenameeFax-9389951244.bin
size117248 (0x1ca00)
md5b59e65e018a2e39004a1befb2a06f608
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
147307292
149307294
1313072922
132307292
109507271
1235072725
10142
138307291
146307291
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x569f5597
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x767
Magic0x10b
LinkerVersion9.0
SizeOfCode0x8600
SizeOfInitializedData0x14000
SizeOfUninitializedData0
AddressOfEntryPoint0x63a1
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x21000
SizeOfHeaders0x400
CheckSum0x21386
Subsystem2
DllCharacteristics0x8034
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x841a0x8600R-X CODE
.rdata0xa0000xa0110xa200R-- IDATA
.data0x150000x3a700x3800RW- IDATA
.rsrc0x190000x52b80x5400R-- IDATA
.reloc0x1f0000x10760x1200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x13fd00x41
IMPORT0x133240x118
RESOURCE0x190000x52b8
EXCEPTION00
SECURITY00
BASERELOC0x1f0000x920
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xa7c80x40
Bound_IAT00
IAT0xa0000x250
Delay_IAT00
CLR_Header00
typenamesizecp
CSS#19811252
CSS#211611252
PNGBUTTON-CLOSE-PRESSED9721252
PNGERROR18551252
PNGSHADOW-BACKGROUND59501252
BITMAP#11016381252
BITMAP#26720901252
BITMAP#17516581252
DIALOG#5001841252
STRING#40897541252
STRING#40907801252
STRING#40917181252
STRING#40931041252
STRING#40941801252
STRING#40951741252
RCDATA#11111441252
VERSION#111321252
MANIFEST#15981252
idlangstring
654081033'%s' is not a valid integer value
654091033'%s' is not a valid floating point value
654101033'%s' is not a valid date
654111033'%s' is not a valid time
654121033'%s' is not a valid date and time
654131033Invalid argument to time encode
654141033Invalid argument to date encode
654151033Out of memory
654161033I/O error %d
654171033File not found
654181033Invalid filename
654191033Too many open files
654201033File access denied
654211033Read beyond end of file
654221033Disk full
654231033Invalid numeric input
654241033Division by zero
654251033Range check error
654261033Integer overflow
654271033Invalid floating point operation
654281033Floating point division by zero
654291033Floating point overflow
654301033Floating point underflow
654311033Invalid pointer operation
654321033Invalid class typecast
654331033Access violation at address %p. %s of address %p
654341033Stack overflow
654351033Control-C hit
654361033Privileged instruction
654371033Operation aborted
654381033Exception %s in module %s at %p. %s%s
654391033Application Error
654401033Format '%s' invalid or incompatible with argument
654411033No argument for format '%s'
654421033Invalid variant type conversion
654431033Invalid variant operation
654441033Variant method calls not supported
654451033Read
654461033Write
654471033Format result longer than 4096 characters
654481033Format string too long
654491033Error creating variant array
654501033Variant is not an array
654511033Variant array index out of bounds
654521033External exception %x
654721033Jan
654731033Feb
654741033Mar
654751033Apr
654761033May
654771033Jun
654781033Jul
654791033Aug
654801033Sep
654811033Oct
654821033Nov
654831033Dec
654881033January
654891033February
654901033March
654911033April
654921033May
654931033June
654941033July
654951033August
654961033September
654971033October
654981033November
654991033December
655041033Sun
655051033Mon
655061033Tue
655071033Wed
655081033Thu
655091033Fri
655101033Sat
655111033Sunday
655121033Monday
655131033Tuesday
655141033Wednesday
655151033Thursday
655161033Friday
655171033Saturday
module_namehintordfunction_name
KERNEL32.dll614GetTickCount
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll701InterlockedExchange
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll1069TerminateProcess
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll765LocalFree
KERNEL32.dll67CloseHandle
KERNEL32.dll761LocalAlloc
KERNEL32.dll753LoadLibraryA
KERNEL32.dll652GlobalFree
KERNEL32.dll544GetProcAddress
KERNEL32.dll486GetLastError
KERNEL32.dll663GlobalUnlock
KERNEL32.dll671HeapCreate
KERNEL32.dll1057Sleep
KERNEL32.dll645GlobalAlloc
KERNEL32.dll1165WriteFile
KERNEL32.dll656GlobalLock
KERNEL32.dll643GlobalAddAtomA
KERNEL32.dll647GlobalDeleteAtom
KERNEL32.dll569GetStartupInfoA
KERNEL32.dll120CreateFileA
USER32.dll448IsRectEmpty
USER32.dll400GetWindowThreadProcessId
USER32.dll190DrawFrameControl
USER32.dll157DestroyIcon
USER32.dll240FindWindowA
USER32.dll158DestroyMenu
USER32.dll745UpdateWindow
USER32.dll322GetMenuItemCount
USER32.dll281GetCursorPos
USER32.dll287GetDlgItem
USER32.dll385GetWindowLongA
USER32.dll426InvalidateRect
USER32.dll720TrackPopupMenuEx
USER32.dll396GetWindowTextA
USER32.dll367GetSystemMetrics
USER32.dll708SystemParametersInfoA
USER32.dll542PostMessageA
USER32.dll453IsWindow
USER32.dll296GetIconInfo
USER32.dll97CreateIconIndirect
USER32.dll553PtInRect
USER32.dll235EnumWindows
USER32.dll606SendMessageA
USER32.dll269GetClientRect
USER32.dll771WindowFromPoint
USER32.dll241FindWindowExA
USER32.dll470LoadIconA
USER32.dll464LoadBitmapA
USER32.dll461KillTimer
USER32.dll239FillRect
USER32.dll420InsertMenuItemA
USER32.dll535PackDDElParam
USER32.dll614SetActiveWindow
USER32.dll596ScreenToClient
USER32.dll670SetTimer
GDI32.dll40CreateBitmap
GDI32.dll59CreateFontIndirectA
GDI32.dll205DeleteDC
GDI32.dll208DeleteObject
GDI32.dll18BitBlt
GDI32.dll660SetWindowOrgEx
GDI32.dll606SelectObject
GDI32.dll46CreateCompatibleDC
GDI32.dll45CreateCompatibleBitmap
GDI32.dll73CreatePen
GDI32.dll11Arc
GDI32.dll671TextOutA
GDI32.dll82CreateSolidBrush
ADVAPI32.dll342GetTraceEnableLevel
ole32.dll133CreateStreamOnHGlobal
ole32.dll148GetHGlobalFromStream
ole32.dll49CoGetMalloc
OLEAUT32.dll419
ODBC32.dll11
COMCTL32.dll17
COMCTL32.dll6
COMCTL32.dll110ImageList_ReplaceIcon
COMCTL32.dll83ImageList_Create
COMCTL32.dll14CreateToolbarEx
pdh.dll14PdhCloseQuery
pdh.dll15PdhCollectQueryData
pdh.dll3PdhAddCounterW
pdh.dll84PdhOpenQueryW
Secur32.dll56QuerySecurityPackageInfoA
Secur32.dll36InitializeSecurityContextA
SETUPAPI.dll360SetupDiGetDeviceInstanceIdA
SETUPAPI.dll337SetupDiGetClassDevsA
SETUPAPI.dll317SetupDiDestroyDeviceInfoList
SETUPAPI.dll320SetupDiEnumDeviceInfo
wsnmp32.dll120
MSVCR90.dll1318memcpy
MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll319_controlfp_s
MSVCR90.dll523_invoke_watson
MSVCR90.dll371_except_handler4_common
MSVCR90.dll352_decode_pointer
MSVCR90.dll796_onexit
MSVCR90.dll630_lock
MSVCR90.dll150__dllonexit
MSVCR90.dll998_unlock
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll224__set_app_type
MSVCR90.dll362_encode_pointer
MSVCR90.dll207__p__fmode
MSVCR90.dll203__p__commode
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll227__setusermatherr
MSVCR90.dll316_configthreadlocale
MSVCR90.dll517_initterm_e
MSVCR90.dll516_initterm
MSVCR90.dll253_acmdln
MSVCR90.dll1228exit
MSVCR90.dll1367strlen
MSVCR90.dll1361strcpy
MSVCR90.dll1446wprintf
MSVCR90.dll549_ismbblead
MSVCR90.dll102_XcptFilter
MSVCR90.dll380_exit
MSVCR90.dll300_cexit
MSVCR90.dll159__getmainargs
MSVCR90.dll277_amsg_exit
MSVCR90.dll1374strpbrk
MSVCR90.dll918_strdup
MSVCR90.dll1359strcmp
MSVCR90.dll1322memset
MSVCR90.dll1220calloc
ordentry_vafunction_name
10x1000Baby
module_namealter.exe
flags0
timestamp2016-01-20 09:38:30
version0.0
ordinal_base1
nFunctions1
nNames1
Names(1)0x13ffc
Functions(1)0x13ff8
NameOrdinals(1)0x14000

StringTable 040904b0

LegalTrademarksDzSoft Ltd (www.dzsoft.com) (C)
CommentsTop Gross Incoherent Refers Otherkey Action
FileVersion4.9.2.5
CompanyNameDzSoft Ltd (www.dzsoft.com)
FileDescriptionTop Gross Incoherent Refers Otherkey Action
LegalCopyrightDzSoft Ltd (www.dzsoft.com) (C)
PrivateBuild4.9.2.5
OriginalFilenameCompact.exe
InternalNameCompact
ProductNameCompact
LanguagesEnglish
ProductVersion4.9.2.5

VS_FIXEDFILEINFO

FileVersion4.9.2.5
ProductVersion4.9.2.5
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0117248EXE01/20/2016 09:38:31#
15c115HTM#
17100972PNG(14 x 14)#
174cc1855PNG(39 x 39)#
17c0c5950PNG(410 x 190)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER