filenameHyperDetector_sleep.exe
size4620288 (0x468000)
md5d090ffe16972106f3aae85e319977023
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
199411181
2232080628
22420806148
2252080652
2036550113
10148
229210053
219210051
15101
222210051

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x56b9f833
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x13200
SizeOfInitializedData0x456e00
SizeOfUninitializedData0
AddressOfEntryPoint0x5ec6
BaseOfCode0x1000
BaseOfData0x15000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x46e000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x131420x13200R-X CODE
.rdata0x150000x786e0x7a00R-- IDATA
.data0x1d0000x39000x1600RW- IDATA
.rsrc0x210000x44a0380x44a200R-- IDATA
.reloc0x46c0000x16080x1800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x1bcec0x8c
RESOURCE0x210000x44a038
EXCEPTION00
SECURITY00
BASERELOC0x46c0000x1608
DEBUG0x152600x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1b2180x40
Bound_IAT00
IAT0x150000x204
Delay_IAT00
CLR_Header00
typenamesizecp
BINARY#102342440
BINARY#103457600
BITMAP#1047149120
BITMAP#1051769440
BITMAP#10641680
BITMAP#1071801120
BITMAP#1081711600
BITMAP#1121801120
BITMAP#1131801120
BITMAP#1141801140
BITMAP#1151711620
BITMAP#11623351810
ICON#111280
ICON#242640
ICON#396400
ICON#4169360
ICON#5676240
ICON#6214470
STRING#15640
STRING#21440
GROUP_ICON#1010900
MANIFEST#13810
idlangstring
11049Анализ сетевой активности
21049Тестирование оборудования
31049Анализ производительности
41049Тестирование ядер процессора
51049Поведенческое тестирование
61049Сигнатурный анализ памяти
71049Анализ кэш-памяти
81049Анализ работы процессора
91049Сканирование памяти
101049Анализ запущенных процессов
151049Выполнено
201049НеоБИТ
211049ГИПЕРДЕТЕКТОР
221049Гипервизор найден
231049Гипервизор не найден
module_namehintordfunction_name
IPHLPAPI.DLL62GetAdaptersInfo
SETUPAPI.dll416SetupDiGetClassDevsW
SETUPAPI.dll397SetupDiEnumDeviceInterfaces
SETUPAPI.dll440SetupDiGetDeviceInterfaceDetailW
SETUPAPI.dll393SetupDiDestroyDeviceInfoList
KERNEL32.dll1328SetThreadIdealProcessor
KERNEL32.dll274DeviceIoControl
KERNEL32.dll127CloseHandle
KERNEL32.dll724GetSystemTime
KERNEL32.dll232CreateThread
KERNEL32.dll393FindResourceW
KERNEL32.dll939LoadResource
KERNEL32.dll1361SizeofResource
KERNEL32.dll957LockResource
KERNEL32.dll709GetStringTypeW
KERNEL32.dll918LCMapStringW
KERNEL32.dll822HeapReAlloc
KERNEL32.dll1504WriteConsoleW
KERNEL32.dll1314SetStdHandle
KERNEL32.dll1018OutputDebugStringW
KERNEL32.dll824HeapSize
KERNEL32.dll413FreeEnvironmentStringsW
KERNEL32.dll551GetEnvironmentStringsW
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll610GetModuleFileNameA
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll435GetCPInfo
KERNEL32.dll646GetOEMCP
KERNEL32.dll420GetACP
KERNEL32.dll882IsValidCodePage
KERNEL32.dll935LoadLibraryExW
KERNEL32.dll1435VirtualAlloc
KERNEL32.dll669GetProcAddress
KERNEL32.dll592GetLastError
KERNEL32.dll1333SetThreadPriority
KERNEL32.dll194CreateFileW
KERNEL32.dll1362Sleep
KERNEL32.dll774GetVolumeInformationA
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll1451WaitForSingleObject
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll1301SetPriorityClass
KERNEL32.dll186CreateFileA
KERNEL32.dll462GetComputerNameA
KERNEL32.dll1396TlsFree
KERNEL32.dll819HeapFree
KERNEL32.dll815HeapAlloc
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll289EncodePointer
KERNEL32.dll254DecodePointer
KERNEL32.dll337ExitProcess
KERNEL32.dll614GetModuleHandleExW
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll1485WideCharToMultiByte
KERNEL32.dll456GetCommandLineA
KERNEL32.dll1088RaiseException
KERNEL32.dll1197RtlUnwind
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll674GetProcessHeap
KERNEL32.dll704GetStdHandle
KERNEL32.dll1505WriteFile
KERNEL32.dll611GetModuleFileNameW
KERNEL32.dll293EnterCriticalSection
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll402FlushFileBuffers
KERNEL32.dll476GetConsoleCP
KERNEL32.dll494GetConsoleMode
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll574GetFileType
KERNEL32.dll702GetStartupInfoW
KERNEL32.dll1277SetFilePointerEx
KERNEL32.dll1410UnhandledExceptionFilter
KERNEL32.dll1347SetUnhandledExceptionFilter
KERNEL32.dll1291SetLastError
KERNEL32.dll840InitializeCriticalSectionAndSpinCount
KERNEL32.dll1377TerminateProcess
KERNEL32.dll1395TlsAlloc
KERNEL32.dll1397TlsGetValue
KERNEL32.dll1398TlsSetValue
USER32.dll713SetCursor
USER32.dll769SetTimer
USER32.dll371GetMessageW
USER32.dll625PostQuitMessage
USER32.dll214DrawTextW
USER32.dll537KillTimer
USER32.dll545LoadCursorW
USER32.dll293GetClientRect
USER32.dll14BeginPaint
USER32.dll891wsprintfW
USER32.dll649RegisterClassExW
USER32.dll547LoadIconW
USER32.dll495InvalidateRect
USER32.dll316GetDlgItem
USER32.dll783SetWindowPos
USER32.dll560LoadStringW
USER32.dll541LoadBitmapW
USER32.dll113CreateWindowExW
USER32.dll700SendMessageW
USER32.dll161DefWindowProcW
USER32.dll181DispatchMessageW
USER32.dll582MessageBoxA
USER32.dll589MessageBoxW
USER32.dll426GetSystemMetrics
USER32.dll831TranslateMessage
GDI32.dll2AddFontMemResourceEx
GDI32.dll66CreateFontW
GDI32.dll19BitBlt
GDI32.dll772SetTextColor
GDI32.dll268DeleteDC
GDI32.dll733SetBkMode
GDI32.dll271DeleteObject
GDI32.dll725SelectObject
GDI32.dll49CreateCompatibleDC
GDI32.dll569GetStockObject
ADVAPI32.dll532OpenSCManagerW
ADVAPI32.dll101CloseServiceHandle
ADVAPI32.dll106ControlService
ADVAPI32.dll754StartServiceW
ADVAPI32.dll143CreateServiceA
ADVAPI32.dll234DeleteService
ADVAPI32.dll533OpenServiceA
offsetsizetypecomment
15c115HTM#
4886021447PNG(256 x 256)#
3292581104663PDF#
436d6f201361BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER