filenameSpencer (2).exe
size1007888 (0xf6110)
md5c952e13ef034373626f013370a0e1775
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
1081681
12729114
14729931
1187983
109782190
3787552
2891787
25921021
10463
11978285
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x5d44acf6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion6.0
SizeOfCode0xb1000
SizeOfInitializedData0x49000
SizeOfUninitializedData0
AddressOfEntryPoint0xa12ed
BaseOfCode0x1000
BaseOfData0xb2000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xfb000
SizeOfHeaders0x1000
CheckSum0xf7681
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000xb0c420xb1000R-X CODE
.rdata0xb20000xea3c0xf000R-- IDATA
.data0xc10000x117280xd000RW- IDATA
.rsrc0xd30000x277680x28000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xbeca80xdc
RESOURCE0xd30000x27768
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0xb25700x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xb20000x570
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#5322200
ICON#137520
ICON#222160
ICON#313840
ICON#4169360
ICON#596400
ICON#642640
ICON#711280
ICON#822160
ICON#917360
ICON#1013840
ICON#1142640
ICON#1224400
ICON#1311280
ICON#1422160
ICON#1513840
ICON#1642640
ICON#1711280
ICON#1822160
ICON#1913840
ICON#2042640
ICON#2111280
ICON#2222160
ICON#2317360
ICON#2413840
ICON#2542640
ICON#2624400
ICON#2711280
ICON#2822160
ICON#2917360
ICON#3013840
ICON#3142640
ICON#3224400
ICON#3311280
ICON#3422160
ICON#3513840
ICON#3642640
ICON#3711280
ICON#3822160
ICON#3917360
ICON#4013840
ICON#4142640
ICON#4224400
ICON#4311280
ICON#4437520
ICON#4522160
ICON#4613840
ICON#4796400
ICON#4842640
ICON#4911280
ICON#5042640
ICON#5124400
ICON#5211280
MENU#107160
DIALOG#1173060
STRING#13920
STRING#13600
STRING#13120
STRING#13920
STRING#14200
STRING#13940
STRING#13660
GROUP_CURSOR#119200
GROUP_ICON#1011040
GROUP_ICON#110900
GROUP_ICON#111620
GROUP_ICON#112620
GROUP_ICON#113900
GROUP_ICON#114900
GROUP_ICON#115620
GROUP_ICON#116900
GROUP_ICON#120900
GROUP_ICON#121480
VERSION#19120
MANIFEST#117930
idlangstring
11031Über...
21031Organisieren
31031Windows herunterfahren...
41031Ausführen...
51031Administrator Kommandozeile
61031Systemsteuerung
71031Leer
81031Automatisch nach Updates suchen
91031Letzte Überprüfung
101031OK
111031Version
121031Beenden
131031Einstellungen
11032Περί...
21032Οργάνωση
31032Τερματισμός...
41032Εκτέλεση...
51032Γραμμή Εντολών Διαχειριστή
61032Πίνακας Ελέγχου
71032Κενό
81032Αυτόματος έλεγχος για ενημερώσεις
91032Τελευταίος έλεγχος
101032Εντάξει
111032Έκδοση
121032Έξοδος
131032Ρυθμίσεις
11033About...
21033Organize
31033Shut Down Windows...
41033Run...
51033Admin Command Line
61033Control Panel
71033Empty
81033Automatically check for updates
91033Last Check
101033OK
111033Version
121033Exit
131033Settings
11034Acerca de...
21034Ordenar
31034Apagar Windows...
41034Ejecutar...
51034Línea de comandos (Admin)
61034Panel de control
71034Vacio
81034Comprobar actualizaciones automáticamente
91034Última comprobación
101034OK
111034Versión
121034Salir
131034Configuración
11036A propose de...
21036Organiser
31036Fermer Windows...
41036Exécuter...
51036Ligne de commande administrateur
61036Panneau de commande
71036Vide
81036Vérifier automatiquement les mises à jour
91036Dernière vérification
101036OK
111036Version
121036Sortie
131036Paramètres
11046Sobre...
21046Organizar
31046Desligar o Windows...
41046Executar...
51046Linha de Comando de Administrator
61046Painel de Controle
71046Vazio
81046Verificar atualizações automaticamente
91046Última Verificação
101046OK
111046Versão
121046Sair
131046Settings
11053Om...
21053Organisera
31053Stäng av Windows...
41053Kör...
51053Kommandotolken som administratör
61053Kontrollpanelen
71053Empty
81053Sök automatiskt efter uppdateringar
91053Senaste kontroll
101053OK
111053Version
121053Avsluta
131053Settings
module_namehintordfunction_name
KERNEL32.dll225FormatMessageW
KERNEL32.dll489GlobalUnlock
KERNEL32.dll482GlobalLock
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll817TerminateProcess
KERNEL32.dll306GetCurrentThreadId
KERNEL32.dll88CreateMutexW
KERNEL32.dll350GetLocaleInfoW
KERNEL32.dll358GetModuleFileNameW
KERNEL32.dll568LocalFree
KERNEL32.dll564LocalAlloc
KERNEL32.dll577LockResource
KERNEL32.dll808SizeofResource
KERNEL32.dll563LoadResource
KERNEL32.dll214FindResourceExW
KERNEL32.dll592MulDiv
KERNEL32.dll616OutputDebugStringA
KERNEL32.dll617OutputDebugStringW
KERNEL32.dll224FormatMessageA
KERNEL32.dll809Sleep
KERNEL32.dll766SetLastError
KERNEL32.dll457GetVersionExW
KERNEL32.dll420GetSystemDefaultLangID
KERNEL32.dll451GetUserDefaultLangID
KERNEL32.dll797SetUnhandledExceptionFilter
KERNEL32.dll444GetThreadSelectorEntry
KERNEL32.dll184FileTimeToSystemTime
KERNEL32.dll183FileTimeToLocalFileTime
KERNEL32.dll304GetCurrentProcessId
KERNEL32.dll456GetVersionExA
KERNEL32.dll561LoadLibraryW
KERNEL32.dll229FreeLibrary
KERNEL32.dll393GetProcAddress
KERNEL32.dll424GetSystemInfo
KERNEL32.dll71CreateEventW
KERNEL32.dll748SetEvent
KERNEL32.dll868WaitForMultipleObjectsEx
KERNEL32.dll514InitializeCriticalSection
KERNEL32.dll118DeleteCriticalSection
KERNEL32.dll139EnterCriticalSection
KERNEL32.dll557LeaveCriticalSection
KERNEL32.dll348GetLocalTime
KERNEL32.dll395GetProcessHeap
KERNEL32.dll836UnlockFileEx
KERNEL32.dll835UnlockFile
KERNEL32.dll814SystemTimeToFileTime
KERNEL32.dll638QueryPerformanceCounter
KERNEL32.dll576LockFileEx
KERNEL32.dll575LockFile
KERNEL32.dll558LoadLibraryA
KERNEL32.dll511HeapValidate
KERNEL32.dll507HeapSize
KERNEL32.dll505HeapReAlloc
KERNEL32.dll254GetCommandLineW
KERNEL32.dll499HeapDestroy
KERNEL32.dll497HeapCreate
KERNEL32.dll495HeapAlloc
KERNEL32.dll446GetTickCount
KERNEL32.dll438GetTempPathA
KERNEL32.dll428GetSystemTimeAsFileTime
KERNEL32.dll426GetSystemTime
KERNEL32.dll340GetFullPathNameW
KERNEL32.dll339GetFullPathNameA
KERNEL32.dll330GetFileAttributesExW
KERNEL32.dll328GetFileAttributesA
KERNEL32.dll316GetDiskFreeSpaceW
KERNEL32.dll313GetDiskFreeSpaceA
KERNEL32.dll120DeleteFileA
KERNEL32.dll74CreateFileA
KERNEL32.dll11AreFileApisANSI
KERNEL32.dll517InterlockedCompareExchange
KERNEL32.dll390GetPrivateProfileStringW
KERNEL32.dll101CreateThread
KERNEL32.dll818TerminateThread
KERNEL32.dll308GetDateFormatW
KERNEL32.dll448GetTimeFormatW
KERNEL32.dll459GetVolumeInformationW
KERNEL32.dll357GetModuleFileNameA
KERNEL32.dll471GlobalAlloc
KERNEL32.dll639QueryPerformanceFrequency
KERNEL32.dll920lstrcpyA
KERNEL32.dll478GlobalFree
KERNEL32.dll449GetTimeZoneInformation
KERNEL32.dll455GetVersion
KERNEL32.dll751SetFileAttributesA
KERNEL32.dll458GetVolumeInformationA
KERNEL32.dll197FindFirstFileA
KERNEL32.dll206FindNextFileA
KERNEL32.dll800SetVolumeLabelA
KERNEL32.dll926lstrlenA
KERNEL32.dll317GetDriveTypeA
KERNEL32.dll349GetLocaleInfoA
KERNEL32.dll335GetFileTime
KERNEL32.dll182FileTimeToDosDateTime
KERNEL32.dll689RtlUnwind
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll253GetCommandLineA
KERNEL32.dll171ExitProcess
KERNEL32.dll643RaiseException
KERNEL32.dll825TlsSetValue
KERNEL32.dll822TlsAlloc
KERNEL32.dll824TlsGetValue
KERNEL32.dll322GetEnvironmentVariableA
KERNEL32.dll856VirtualFree
KERNEL32.dll853VirtualAlloc
KERNEL32.dll532IsBadWritePtr
KERNEL32.dll834UnhandledExceptionFilter
KERNEL32.dll227FreeEnvironmentStringsA
KERNEL32.dll228FreeEnvironmentStringsW
KERNEL32.dll319GetEnvironmentStrings
KERNEL32.dll321GetEnvironmentStringsW
KERNEL32.dll762SetHandleCount
KERNEL32.dll414GetStdHandle
KERNEL32.dll336GetFileType
KERNEL32.dll50CompareStringA
KERNEL32.dll544LCMapStringA
KERNEL32.dll545LCMapStringW
KERNEL32.dll415GetStringTypeA
KERNEL32.dll418GetStringTypeW
KERNEL32.dll241GetCPInfo
KERNEL32.dll235GetACP
KERNEL32.dll380GetOEMCP
KERNEL32.dll529IsBadReadPtr
KERNEL32.dll526IsBadCodePtr
KERNEL32.dll780SetStdHandle
KERNEL32.dll745SetEnvironmentVariableA
KERNEL32.dll757SetFileTime
KERNEL32.dll604OpenFileMappingW
KERNEL32.dll76CreateFileMappingW
KERNEL32.dll580MapViewOfFile
KERNEL32.dll744SetEndOfFile
KERNEL32.dll753SetFilePointer
KERNEL32.dll837UnmapViewOfFile
KERNEL32.dll219FlushFileBuffers
KERNEL32.dll886WriteFile
KERNEL32.dll656ReadFile
KERNEL32.dll121DeleteFileW
KERNEL32.dll892WritePrivateProfileStringW
KERNEL32.dll207FindNextFileW
KERNEL32.dll589MoveFileW
KERNEL32.dll752SetFileAttributesW
KERNEL32.dll467GetWindowsDirectoryW
KERNEL32.dll423GetSystemDirectoryW
KERNEL32.dll303GetCurrentProcess
KERNEL32.dll175ExpandEnvironmentStringsW
KERNEL32.dll439GetTempPathW
KERNEL32.dll302GetCurrentDirectoryW
KERNEL32.dll77CreateFileW
KERNEL32.dll200FindFirstFileW
KERNEL32.dll193FindClose
KERNEL32.dll333GetFileSize
KERNEL32.dll44CloseHandle
KERNEL32.dll747SetErrorMode
KERNEL32.dll331GetFileAttributesW
KERNEL32.dll522InterlockedIncrement
KERNEL32.dll518InterlockedDecrement
KERNEL32.dll873WideCharToMultiByte
KERNEL32.dll441GetThreadLocale
KERNEL32.dll417GetStringTypeExW
KERNEL32.dll51CompareStringW
KERNEL32.dll593MultiByteToWideChar
KERNEL32.dll346GetLastError
KERNEL32.dll927lstrlenW
KERNEL32.dll66CreateDirectoryA
KERNEL32.dll301GetCurrentDirectoryA
KERNEL32.dll323GetEnvironmentVariableW
KERNEL32.dll746SetEnvironmentVariableW
KERNEL32.dll501HeapFree
KERNEL32.dll362GetModuleHandleW
USER32.dll557RemovePropW
USER32.dll552RegisterWindowMessageW
USER32.dll619SetPropW
USER32.dll331GetPropW
USER32.dll28CallWindowProcW
USER32.dll272GetDlgCtrlID
USER32.dll200EndPaint
USER32.dll179DrawFocusRect
USER32.dll13BeginPaint
USER32.dll523PtInRect
USER32.dll289GetKeyState
USER32.dll178DrawEdge
USER32.dll394InflateRect
USER32.dll378GetWindowTextW
USER32.dll377GetWindowTextLengthW
USER32.dll438LoadBitmapW
USER32.dll94CreatePopupMenu
USER32.dll151DestroyMenu
USER32.dll608SetMenuInfo
USER32.dll305GetMenuInfo
USER32.dll676TrackPopupMenu
USER32.dll490MsgWaitForMultipleObjects
USER32.dll686UnhookWindowsHookEx
USER32.dll725WindowFromPoint
USER32.dll494OemToCharA
USER32.dll48CharToOemA
USER32.dll567SendDlgItemMessageW
USER32.dll589SetCursor
USER32.dll647SetWindowTextW
USER32.dll446LoadImageW
USER32.dll643SetWindowPos
USER32.dll510PeekMessageW
USER32.dll198EndDialog
USER32.dll599SetForegroundWindow
USER32.dll159DialogBoxParamW
USER32.dll367GetWindowLongW
USER32.dll641SetWindowLongW
USER32.dll513PostQuitMessage
USER32.dll512PostMessageW
USER32.dll143DefWindowProcW
USER32.dll318GetMessageW
USER32.dll682TranslateMessage
USER32.dll153DestroyWindow
USER32.dll680TranslateAcceleratorW
USER32.dll162DispatchMessageW
USER32.dll418IsDialogMessageW
USER32.dll97CreateWindowExW
USER32.dll436LoadAcceleratorsW
USER32.dll442LoadCursorW
USER32.dll444LoadIconW
USER32.dll536RegisterClassExW
USER32.dll699UpdateWindow
USER32.dll282GetIconInfo
USER32.dll89CreateIconFromResourceEx
USER32.dll150DestroyIcon
USER32.dll576SendMessageW
USER32.dll309GetMenuItemInfoW
USER32.dll267GetCursorPos
USER32.dll372GetWindowRect
USER32.dll325GetParent
USER32.dll561ScreenToClient
USER32.dll658ShowWindow
USER32.dll399InsertMenuItemW
USER32.dll268GetDC
USER32.dll554ReleaseDC
USER32.dll226FillRect
USER32.dll347GetSysColorBrush
USER32.dll233FrameRect
USER32.dll191DrawTextW
USER32.dll306GetMenuItemCount
USER32.dll611SetMenuItemInfoW
USER32.dll349GetSystemMetrics
USER32.dll346GetSysColor
USER32.dll44CharNextW
USER32.dll419IsDlgButtonChecked
USER32.dll56CheckDlgButton
USER32.dll273GetDlgItem
USER32.dll634SetTimer
USER32.dll434KillTimer
USER32.dll279GetForegroundWindow
USER32.dll157DialogBoxIndirectParamW
USER32.dll483MessageBoxW
USER32.dll403InvalidateRect
USER32.dll255GetClientRect
USER32.dll471MapWindowPoints
USER32.dll276GetDlgItemTextW
USER32.dll466MapDialogRect
USER32.dll596SetDlgItemTextW
USER32.dll666SystemParametersInfoW
SHELL32.dll160Shell_NotifyIconW
SHELL32.dll101SHGetMalloc
SHELL32.dll109SHGetSpecialFolderLocation
SHELL32.dll107SHGetPathFromIDListW
SHELL32.dll92SHGetFileInfoW
SHELL32.dll155ShellExecuteExW
COMCTL32.dll52ImageList_GetIcon
COMCTL32.dll38ImageList_Create
COMCTL32.dll39ImageList_Destroy
COMCTL32.dll65ImageList_ReplaceIcon
COMCTL32.dll45ImageList_DrawEx
COMCTL32.dll17
VERSION.dll3GetFileVersionInfoW
VERSION.dll2GetFileVersionInfoSizeW
VERSION.dll13VerQueryValueW
WINMM.dll163timeGetTime
GDI32.dll18BitBlt
GDI32.dll583StretchBlt
GDI32.dll566SetStretchBltMode
GDI32.dll45CreateCompatibleDC
GDI32.dll44CreateCompatibleBitmap
GDI32.dll50CreateDIBSection
GDI32.dll148Ellipse
GDI32.dll140DeleteDC
GDI32.dll412GetPixel
GDI32.dll203EnumFontFamiliesExW
GDI32.dll363GetDeviceCaps
GDI32.dll61CreateFontIndirectW
GDI32.dll517SaveDC
GDI32.dll510RestoreDC
GDI32.dll407GetObjectW
GDI32.dll362GetDIBits
GDI32.dll437GetTextExtentPoint32W
GDI32.dll532SetBkMode
GDI32.dll570SetTextColor
GDI32.dll531SetBkColor
GDI32.dll524SelectObject
GDI32.dll421GetStockObject
GDI32.dll511RoundRect
GDI32.dll445GetTextMetricsW
GDI32.dll143DeleteObject
GDI32.dll62CreateFontW
GDI32.dll71CreatePen
GDI32.dll80CreateSolidBrush
ADVAPI32.dll159CryptReleaseContext
ADVAPI32.dll137CryptDeriveKey
ADVAPI32.dll142CryptEncrypt
ADVAPI32.dll139CryptDestroyKey
ADVAPI32.dll456RegCloseKey
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll462RegCreateKeyW
ADVAPI32.dll461RegCreateKeyExW
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll482RegOpenKeyExW
ADVAPI32.dll135CryptCreateHash
ADVAPI32.dll156CryptHashData
ADVAPI32.dll138CryptDestroyHash
ADVAPI32.dll133CryptAcquireContextW
ole32.dll16CoCreateInstance
ole32.dll157GetHGlobalFromStream
ole32.dll142CreateStreamOnHGlobal
ole32.dll320StringFromGUID2
ole32.dll15CoCreateGuid
ole32.dll57CoInitialize
ole32.dll46CoGetMalloc
ole32.dll264OleRun
ole32.dll6CLSIDFromProgID
ole32.dll101CoUninitialize
OLEAUT32.dll6
OLEAUT32.dll419
OLEAUT32.dll12
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll148
OLEAUT32.dll16
OLEAUT32.dll24
OLEAUT32.dll23
OLEAUT32.dll15
OLEAUT32.dll2

StringTable 040704b0

Commentshttp://www.the-sz.com/
CompanyNamethe sz development
FileDescriptionSpencer
FileVersion1.17
InternalNameSpencer
LegalCopyrightCopyright © 2013-2019
LegalTrademarks
OriginalFilenameSpencer.exe
PrivateBuild
ProductNamethe sz development Spencer
ProductVersion1.17
SpecialBuildThe SZ

VS_FIXEDFILEINFO

FileVersion1.1.7.1
ProductVersion1.1.7.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0x20
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
01007616EXE08/02/2019 21:36:54#
15c115HTM#
f6000272BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK