ICEECC.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	ICEECC.exe
size	627712 (0x99400)
md5	d41e4647a5d9396be884d80383cab85f

type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, PECompact2 compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	2
TimeDateStamp	0x4a2a5bcc
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30e
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0x175000
SizeOfInitializedData	0x93000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x15ac
BaseOfCode	0x1000
BaseOfData	0x176000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2a2000
SizeOfHeaders	0x400
CheckSum	0x9ad7b
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PeCompact 2.xx (BitSum Technologies / v2.0)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x29d000	0x95e00	RWX CODE
.rsrc	0x29e000	0x4000	0x3200	RWX CODE

Data Directory

type	va	size
EXPORT	0x20f000	0x2a65f
IMPORT	0x2a017c	0x329
RESOURCE	0x29e000	0x1efa
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x2a1170	0xec
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks
0x6a1190	0x6a125c	0x6a1188	0x6a118c
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	CDROM	192
BITMAP	CLOSEDFOLDER	224
BITMAP	CURRENTFOLDER	224
BITMAP	EXECUTABLE	224
BITMAP	FLOPPY	192
BITMAP	HARD	192
BITMAP	KNOWNFILE	224
BITMAP	NETWORK	192
BITMAP	OPENFOLDER	224
BITMAP	PREVIEWGLYPH	232
BITMAP	RAM	192
BITMAP	TJAMSELECTIONSTATE_CHECKED	232
BITMAP	TJAMSELECTIONSTATE_GRAYED	232
BITMAP	TJAMSELECTIONSTATE_NONE	232
BITMAP	TJAMSELECTIONSTATE_UNCHECKED	232
BITMAP	TJAMSHELLLIST_LV_ARROWDOWN	1128
BITMAP	TJAMSHELLLIST_LV_ARROWUP	1128
BITMAP	UNKNOWNFILE	224
BITMAP	#1000	107752
BITMAP	#1001	3064
BITMAP	#1002	3064
ICON	#1	744
ICON	#2	2216
DIALOG	DLGTEMPLATE	82
STRING	#4078	64
STRING	#4079	1072
STRING	#4080	408
STRING	#4081	236
STRING	#4082	324
STRING	#4083	752
STRING	#4084	1068
STRING	#4085	1044
STRING	#4086	1168
STRING	#4087	704
STRING	#4088	228
STRING	#4089	444
STRING	#4090	956
STRING	#4091	912
STRING	#4092	768
STRING	#4093	952
STRING	#4094	920
STRING	#4095	944
STRING	#4096	1084
RCDATA	DVCLAL	16
RCDATA	TAA_ABOUT	578
RCDATA	TAA_CREATE	10636
RCDATA	TAA_DIR	1592
RCDATA	TAA_INFO	817
RCDATA	TAA_MAIN	134892
RCDATA	TAA_MEMSIZE	1080
RCDATA	TAA_SLEEP	1604
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	34

module_name	ord	function_name
kernel32.dll		LoadLibraryA
kernel32.dll		GetProcAddress
kernel32.dll		VirtualAlloc
kernel32.dll		VirtualFree
ADVAPI32.DLL		AdjustTokenPrivileges
MPR.DLL		WNetConnectionDialog1A
VERSION.DLL		GetFileVersionInfoA
WINSPOOL.DRV		ClosePrinter
COMCTL32.DLL		ImageList_Add
COMDLG32.DLL		ChooseColorA
GDI32.DLL		BitBlt
SHELL32.DLL		DragQueryFileA
USER32.DLL		ActivateKeyboardLayout
OLE32.DLL		CoCreateInstance
OLEAUT32.DLL	35

show previews

offset	size	type	comment
0	627712	EXE	06/06/2009 12:06:36	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x23a000

[?] can't find file_offset of VA 0x23a138

[?] can't find file_offset of VA 0x23a270

[?] can't find file_offset of VA 0x23a3a8

[?] can't find file_offset of VA 0x23a4e0

[?] can't find file_offset of VA 0x23a618

[?] can't find file_offset of VA 0x23a750

[?] can't find file_offset of VA 0x23a888

[?] can't find file_offset of VA 0x23aa58

[?] can't find file_offset of VA 0x23ac40

[?] can't find file_offset of VA 0x23ae10

[?] can't find file_offset of VA 0x23afe0

[?] can't find file_offset of VA 0x23b1b0

[?] can't find file_offset of VA 0x23b380

[?] can't find file_offset of VA 0x23b550

[?] can't find file_offset of VA 0x23b720

[?] can't find file_offset of VA 0x23b8f0

[?] can't find file_offset of VA 0x23bac0

[?] can't find file_offset of VA 0x23bb80

[?] can't find file_offset of VA 0x23bc60

[?] can't find file_offset of VA 0x23bd40

[?] can't find file_offset of VA 0x23be20

[?] can't find file_offset of VA 0x23bee0

[?] can't find file_offset of VA 0x23bfa0

[?] can't find file_offset of VA 0x23c080

[?] can't find file_offset of VA 0x23c140

[?] can't find file_offset of VA 0x23c220

[?] can't find file_offset of VA 0x23c308

[?] can't find file_offset of VA 0x23c3c8

[?] can't find file_offset of VA 0x23c4b0

[?] can't find file_offset of VA 0x23c598

[?] can't find file_offset of VA 0x23c680

[?] can't find file_offset of VA 0x23c768

[?] can't find file_offset of VA 0x23cbd0

[?] can't find file_offset of VA 0x23d038

[?] can't find file_offset of VA 0x23d118

[?] can't find file_offset of VA 0x257600

[?] can't find file_offset of VA 0x2581f8

[?] can't find file_offset of VA 0x258df0

[?] can't find file_offset of VA 0x258e48

[?] can't find file_offset of VA 0x258e88

[?] can't find file_offset of VA 0x2592b8

[?] can't find file_offset of VA 0x259450

[?] can't find file_offset of VA 0x259540

[?] can't find file_offset of VA 0x259688

[?] can't find file_offset of VA 0x259978

[?] can't find file_offset of VA 0x259da8

[?] can't find file_offset of VA 0x25a1c0

[?] can't find file_offset of VA 0x25a650

[?] can't find file_offset of VA 0x25a910

[?] can't find file_offset of VA 0x25a9f8

[?] can't find file_offset of VA 0x25abb8

[?] can't find file_offset of VA 0x25af78

[?] can't find file_offset of VA 0x25b308

[?] can't find file_offset of VA 0x25b608

[?] can't find file_offset of VA 0x25b9c0

[?] can't find file_offset of VA 0x25bd58

[?] can't find file_offset of VA 0x25c108

[?] can't find file_offset of VA 0x25c548

[?] can't find file_offset of VA 0x25c558

[?] can't find file_offset of VA 0x25c7a0

[?] can't find file_offset of VA 0x25f130

[?] can't find file_offset of VA 0x25f768

[?] can't find file_offset of VA 0x25faa0

[?] can't find file_offset of VA 0x280990

[?] can't find file_offset of VA 0x280dc8

[?] can't find file_offset of VA 0x281410

[?] can't find file_offset of VA 0x281428

[?] can't find file_offset of VA 0x281440

[?] can't find file_offset of VA 0x281458

[?] can't find file_offset of VA 0x281470

[?] can't find file_offset of VA 0x281488

[?] can't find file_offset of VA 0x2814a0

[?] can't find file_offset of VA 0x20f000