120.exe - PROJECT1.exe

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	120.exe
size	685056 (0xa7400)
md5	b6d99de5af440f3512352c97b427e23a

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	2
TimeDateStamp	0x3a7b0000
PointerToSymbolTable	0x90909090
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	4.20
SizeOfCode	0x9400
SizeOfInitializedData	0xa2800
SizeOfUninitializedData	0
AddressOfEntryPoint	0xad608
BaseOfCode	0x1000
BaseOfData	0xb000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xb3000
SizeOfHeaders	0x200
CheckSum	0xb2595
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PC Shrinker v0.71

Sections

name	va	vsize	raw size	flags
smy1	0x1000	0xc000	0x6800	RWX CODE
smy2	0xd000	0xa5c25	0xa0a00	RWX CODE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xad71c	0x85
RESOURCE	0xd000	0xa0608
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
EXE	#114	340992	1200
GIF	#101	3524	1200
GIF	#102	26888	1200
GMF	#103	178052	1200
MIDI	#113	16524	1200
WAV	#104	7596	1200
WAV	#105	2252	1200
WAV	#106	15344	1200
WAV	#107	41104	1200
WAV	#108	4012	1200
WAV	#109	3584	1200
WAV	#110	4488	1200
WAV	#111	6344	1200
WAV	#112	2368	1200
ICON	#30001	2216	1200
GROUP_ICON	#1	20	1200
VERSION	#1	524	1200

module_name	hint	ord	function_name
KERNEL32.DLL			LoadLibraryA
KERNEL32.DLL			GetProcAddress
KERNEL32.DLL			GlobalAlloc
KERNEL32.DLL			ExitProcess

StringTable 040404B0

CompanyName	WWW
ProductName	PROJECT1
FileVersion	1.00
ProductVersion	1.00
InternalName	PROJECT1
OriginalFilename	PROJECT1.exe

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	685056	EXE	02/02/2001 18:44:16	#
15c1	15	HTM		#
5a230	3522	GIF	(80 x 80)	#
5aff4	20187	GIF	(480 x 480)	#
61b62	2310	BMP	(33 x 33)	#
624ef	2310	BMP	(33 x 33)	#
62e7a	2310	BMP	(33 x 33)	#
63947	2102	BMP	(32 x 32)	#
6491d	2114	BMP	(32 x 32)	#
6515f	2114	BMP	(32 x 32)	#
659a1	2114	BMP	(32 x 32)	#
661e3	2114	BMP	(32 x 32)	#
66b39	2102	BMP	(32 x 32)	#
67480	2310	BMP	(33 x 33)	#
681b4	2114	BMP	(32 x 32)	#
689f6	2114	BMP	(32 x 32)	#
69238	2114	BMP	(32 x 32)	#
69a7a	2114	BMP	(32 x 32)	#
6a6ed	2114	BMP	(32 x 32)	#
6af2f	2114	BMP	(32 x 32)	#
6b771	2114	BMP	(32 x 32)	#
6bfb3	2114	BMP	(32 x 32)	#
6ce68	2114	BMP	(32 x 32)	#
6d6aa	2114	BMP	(32 x 32)	#
6deec	2114	BMP	(32 x 32)	#
6e72e	2114	BMP	(32 x 32)	#
6f0ec	2114	BMP	(32 x 32)	#
6fa36	2114	BMP	(32 x 32)	#
70463	2114	BMP	(32 x 32)	#
70daa	2178	BMP	(32 x 33)	#
71734	2114	BMP	(32 x 32)	#
71f76	2114	BMP	(32 x 32)	#
727b8	2114	BMP	(32 x 32)	#
72ffa	2114	BMP	(32 x 32)	#
7383c	2114	BMP	(32 x 32)	#
7407e	2114	BMP	(32 x 32)	#
748c0	2114	BMP	(32 x 32)	#
75102	2114	BMP	(32 x 32)	#
75944	2114	BMP	(32 x 32)	#
76186	2114	BMP	(32 x 32)	#
769c8	2114	BMP	(32 x 32)	#
7720a	2114	BMP	(32 x 32)	#
77a4c	2114	BMP	(32 x 32)	#
7828e	2114	BMP	(32 x 32)	#
78ad0	2114	BMP	(32 x 32)	#
79312	2114	BMP	(32 x 32)	#
79b54	2114	BMP	(32 x 32)	#
7a4b2	2114	BMP	(32 x 32)	#
7acf4	2114	BMP	(32 x 32)	#
7b536	2114	BMP	(32 x 32)	#
7bd78	2114	BMP	(32 x 32)	#
7c5ba	2114	BMP	(32 x 32)	#
7cee0	2114	BMP	(32 x 32)	#
7d808	2114	BMP	(32 x 32)	#
7e130	2114	BMP	(32 x 32)	#
7ea59	2114	BMP	(32 x 32)	#
7f6ec	2114	BMP	(32 x 32)	#
800d1	2114	BMP	(32 x 32)	#
80bf1	2114	BMP	(32 x 32)	#
81637	578	BMP	(16 x 16)	#
819e4	2114	BMP	(32 x 32)	#
9110c	7584	WAV		#
92eb8	2244	WAV		#
93784	15334	WAV		#
97374	41094	WAV		#
a1404	4004	WAV		#
a23b0	3576	WAV		#
a31b0	4478	WAV		#
a4338	6336	WAV		#
a5c00	2358	WAV		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

120.exe-

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040404B0

VS_FIXEDFILEINFO

120.exe
-