filenamecstudio.exe
size6684160 (0x65fe00)
md5c168c7fcf22b23a0668f144823fd81d7
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
221204265
223204262
2242042619
225204264
1473072914
10207
2292061746
219206171
15101
222206171

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5283357b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x1fa00
SizeOfInitializedData0xfa5000
SizeOfUninitializedData0
AddressOfEntryPoint0x16872
BaseOfCode0x1000
BaseOfData0x21000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0xfc8000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x1f9870x1fa00R-X CODE
.rdata0x210000x45e60x4600R-- IDATA
.data0x260000xf675040x602600RW- IDATA
.rsrc0xf8e0000x2c3700x2c400R-- IDATA
.reloc0xfbb0000xce820xd000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x245b40xc8
RESOURCE0xf8e0000x2c370
EXCEPTION00
SECURITY00
BASERELOC0xfbb0000x2bd0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x239080x40
Bound_IAT00
IAT0x210000x318
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAPDEVELOPER51600
BITMAPTOOLBAR599440
ICON#1297620
ICON#2676240
ICON#396400
ICON#442640
ICON#524400
ICON#611280
GROUP_ICONAPPLICATION900
MANIFEST#13810
module_namehintordfunction_name
MSVCR120.dll578_controlfp_s
MSVCR120.dll786_invoke_watson
MSVCR120.dll424__crtSetUnhandledExceptionFilter
MSVCR120.dll632_except_handler4_common
MSVCR120.dll309void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120.dll426__crtTerminateProcess
MSVCR120.dll427__crtUnhandledException
MSVCR120.dll591_crt_debugger_hook
MSVCR120.dll574_commode
MSVCR120.dll672_fmode
MSVCR120.dll525_acmdln
MSVCR120.dll778_initterm
MSVCR120.dll779_initterm_e
MSVCR120.dll499__setusermatherr
MSVCR120.dll575_configthreadlocale
MSVCR120.dll815_ismbblead
MSVCR120.dll1753memcpy
MSVCR120.dll372__CxxFrameHandler3
MSVCR120.dll344_CxxThrowException
MSVCR120.dll558_cexit
MSVCR120.dll641_exit
MSVCR120.dll1612exit
MSVCR120.dll497__set_app_type
MSVCR120.dll437__getmainargs
MSVCR120.dll534_amsg_exit
MSVCR120.dll412__crtGetShowWindowMode
MSVCR120.dll363_XcptFilter
MSVCR120.dll1080_onexit
MSVCR120.dll429__dllonexit
MSVCR120.dll557_calloc_crt
MSVCR120.dll1282_unlock
MSVCR120.dll914_lock
MSVCR120.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120.dll1757memset
MSVCR120.dll1668getc
MSVCR120.dll1940wctob
MSVCR120.dll1628fgetc
MSVCR120.dll1838strncmp
MSVCR120.dll1826strchr
MSVCR120.dll1683isalpha
MSVCR120.dll1210_strnicmp
MSVCR120.dll1517atoi
MSVCR120.dll1783qsort
MSVCR120.dll1872toupper
MSVCR120.dll1822sscanf
MSVCR120.dll1813setlocale
MSVCR120.dll1755memmove
MSVCR120.dll1095_purecall
MSVCR120.dll1792remove
MSVCR120.dll112void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR120.dll1662ftell
MSVCR120.dll1686isdigit
MSVCR120.dll1254_time64
MSVCR120.dll1621fclose
MSVCR120.dll1660fseek
MSVCR120.dll1665fwrite
MSVCR120.dll114void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR120.dll1652fread
MSVCR120.dll1644fopen
MSVCR120.dll1839strncpy
MSVCR120.dll1818sprintf
MSVCR120.dll1200_stricmp
MSVCP120.dll716void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP120.dll717void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP120.dll713void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP120.dll688char const * __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPBDH@Z

MSVCP120.dll709char const * __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAPBDH@Z

MSIMG32.dll2GradientFill
MSIMG32.dllAlphaBlend
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll202DecodePointer
KERNEL32.dll234EncodePointer
KERNEL32.dll709GlobalUnlock
KERNEL32.dll691GlobalAlloc
KERNEL32.dll702GlobalLock
KERNEL32.dll706GlobalSize
KERNEL32.dll323FindNextFileA
KERNEL32.dll302FindClose
KERNEL32.dll306FindFirstFileA
KERNEL32.dll870MulDiv
KERNEL32.dll533GetModuleHandleA
USER32.dll648SetCursor
USER32.dll166DestroyWindow
USER32.dll71ClientToScreen
USER32.dll220EndPaint
USER32.dll198DrawFrameControl
USER32.dll494LoadImageA
USER32.dll196DrawFocusRect
USER32.dll205DrawTextA
USER32.dll646SetClipboardData
USER32.dll550OpenClipboard
USER32.dll213EmptyClipboard
USER32.dll278GetClipboardData
USER32.dll458IsClipboardFormatAvailable
USER32.dll73CloseClipboard
USER32.dll440InsertMenuItemA
USER32.dll588RegisterClassExA
USER32.dll758TrackPopupMenu
USER32.dll315GetKeyNameTextA
USER32.dll268GetClassInfoExA
USER32.dll640SetCapture
USER32.dll317GetKeyState
USER32.dll757TrackMouseEvent
USER32.dll492LoadIconA
USER32.dll276GetClientRect
USER32.dll106CreateMenu
USER32.dll658SetFocus
USER32.dll345GetMessageA
USER32.dll14BeginPaint
USER32.dll242EnumWindows
USER32.dll264GetCapture
USER32.dll764TranslateMessage
USER32.dll331GetMenu
USER32.dll416GetWindowTextA
USER32.dll517MapVirtualKeyA
USER32.dll707SetWindowLongA
USER32.dll446InvalidateRect
USER32.dll16BringWindowToTop
USER32.dll405GetWindowLongA
USER32.dll109CreateWindowExA
USER32.dll155DefWindowProcA
USER32.dll291GetDesktopWindow
USER32.dll379GetSysColor
USER32.dll710SetWindowPos
USER32.dll339GetMenuItemInfoA
USER32.dll735ShowWindow
USER32.dll107CreatePopupMenu
USER32.dll256GetActiveWindow
USER32.dll9AppendMenuA
USER32.dll337GetMenuItemCount
USER32.dll565PostMessageA
USER32.dll174DispatchMessageA
USER32.dll3AdjustWindowRectEx
USER32.dll612ReleaseCapture
USER32.dll382GetSystemMetrics
USER32.dll714SetWindowTextA
USER32.dll785UpdateWindow
USER32.dll216EnableWindow
USER32.dll621ScreenToClient
USER32.dll631SendMessageA
USER32.dll412GetWindowRect
USER32.dll488LoadCursorA
USER32.dll673SetMenuItemInfoA
USER32.dll164DestroyMenu
USER32.dll288GetCursorPos
GDI32.dll525GetStockObject
GDI32.dll618RoundRect
GDI32.dll549GetTextMetricsA
GDI32.dll448GetClipBox
GDI32.dll599Polyline
GDI32.dll438GetCharWidth32A
GDI32.dll79CreateRectRgn
GDI32.dll646SetDCPenColor
GDI32.dll607Rectangle
GDI32.dll47CreateCompatibleBitmap
GDI32.dll433GetCharABCWidthsA
GDI32.dll48CreateCompatibleDC
GDI32.dll629SelectClipRgn
GDI32.dll230DeleteObject
GDI32.dll639SetBkMode
GDI32.dll645SetDCBrushColor
GDI32.dll459GetDeviceCaps
GDI32.dll60CreateFontA
GDI32.dll53CreateDIBSection
GDI32.dll227DeleteDC
GDI32.dll678SetTextColor
GDI32.dll566LineTo
GDI32.dll582PatBlt
GDI32.dll19BitBlt
GDI32.dll570MoveToEx
GDI32.dll449GetClipRgn
GDI32.dll696TextOutA
GDI32.dll61CreateFontIndirectA
GDI32.dll631SelectObject
GDI32.dll507GetObjectA
COMDLG32.dllChooseColorA
COMDLG32.dll2ChooseFontA
COMDLG32.dll11GetOpenFileNameA
SHELL32.dll286ShellExecuteA
SHELL32.dll122SHBrowseForFolderA
SHELL32.dll213SHGetPathFromIDListA
ole32.dll62CoInitialize
ole32.dll108CoUninitialize
ole32.dll104CoTaskMemFree
offsetsizetypecomment
15c115HTM#
626c9029762PNG(256 x 256)#
62e0d2204078BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER