nginx.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	nginx.exe
size	3873792 (0x3b1c00)
md5	d7a27da504a31774ad23654d5973d14b

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
132	30729	47
149	30729	30
147	30729	9
1	0	194
131	30729	1046
148	21022	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x66a5a32d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x2e4c00
SizeOfInitializedData	0xdc800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2449d8
BaseOfCode	0x1000
BaseOfData	0x2e6000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x3c4000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8000
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2e4a79	0x2e4c00	R-X CODE
.rdata	0x2e6000	0xbcaf4	0xbcc00	R-- IDATA
.data	0x3a3000	0x1d9a8	0xde00	RW- IDATA
.idata	0x3c1000	0x1771	0x1800	RW- IDATA
.rsrc	0x3c3000	0x99c	0xa00	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3c1000	0x64
RESOURCE	0x3c3000	0x99c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x2e6c40	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x384b28	0x40
Bound_IAT	0	0
IAT	0x3c14b0	0x44c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	816
ICON	#2	304
ICON	#3	176
GROUP_ICON	NGINX	48

module_name	hint	ord	function_name
KERNEL32.dll	745		InterlockedCompareExchange
KERNEL32.dll	1212		SwitchToThread
KERNEL32.dll	1202		Sleep
KERNEL32.dll	349		FormatMessageA
KERNEL32.dll	960		ReadFile
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	1130		SetFileTime
KERNEL32.dll	1238		UnmapViewOfFile
KERNEL32.dll	302		FindClose
KERNEL32.dll	527		GetLongPathNameW
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	214		DeleteFileW
KERNEL32.dll	867		MoveFileW
KERNEL32.dll	487		GetFileAttributesExW
KERNEL32.dll	855		MapViewOfFile
KERNEL32.dll	137		CreateFileMappingA
KERNEL32.dll	1107		SetEndOfFile
KERNEL32.dll	1127		SetFilePointerEx
KERNEL32.dll	313		FindFirstFileW
KERNEL32.dll	129		CreateDirectoryW
KERNEL32.dll	1027		RemoveDirectoryW
KERNEL32.dll	463		GetDiskFreeSpaceW
KERNEL32.dll	462		GetDiskFreeSpaceExW
KERNEL32.dll	447		GetCurrentDirectoryW
KERNEL32.dll	325		FindNextFileW
KERNEL32.dll	856		MapViewOfFileEx
KERNEL32.dll	1139		SetLastError
KERNEL32.dll	664		GetTimeZoneInformation
KERNEL32.dll	164		CreateProcessA
KERNEL32.dll	1216		TerminateProcess
KERNEL32.dll	1039		ResetEvent
KERNEL32.dll	884		OpenEventA
KERNEL32.dll	479		GetExitCodeProcess
KERNEL32.dll	1271		WaitForMultipleObjects
KERNEL32.dll	390		GetCommandLineA
KERNEL32.dll	531		GetModuleFileNameA
KERNEL32.dll	181		CreateThread
KERNEL32.dll	475		GetEnvironmentVariableA
KERNEL32.dll	533		GetModuleHandleA
KERNEL32.dll	627		GetSystemInfo
KERNEL32.dll	675		GetVersionExA
KERNEL32.dll	1113		SetEvent
KERNEL32.dll	130		CreateEventA
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	1069		SetConsoleCtrlHandler
KERNEL32.dll	351		FreeConsole
KERNEL32.dll	1018		ReleaseMutex
KERNEL32.dll	892		OpenMutexA
KERNEL32.dll	155		CreateMutexA
KERNEL32.dll	1110		SetEnvironmentVariableA
KERNEL32.dll	148		CreateIoCompletionPort
KERNEL32.dll	606		GetQueuedCompletionStatus
KERNEL32.dll	492		GetFileInformationByHandle
KERNEL32.dll	1159		SetStdHandle
KERNEL32.dll	453		GetCurrentThreadId
KERNEL32.dll	749		InterlockedExchangeAdd
KERNEL32.dll	828		LoadLibraryA
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	449		GetCurrentProcessId
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	514		GetLastError
KERNEL32.dll	633		GetSystemTimeAsFileTime
KERNEL32.dll	1316		WriteConsoleW
KERNEL32.dll	432		GetConsoleOutputCP
KERNEL32.dll	1306		WriteConsoleA
KERNEL32.dll	586		GetProcessHeap
KERNEL32.dll	518		GetLocaleInfoW
KERNEL32.dll	100		CompareStringW
KERNEL32.dll	97		CompareStringA
KERNEL32.dll	1048		RtlUnwind
KERNEL32.dll	724		HeapSize
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	343		FlushFileBuffers
KERNEL32.dll	428		GetConsoleMode
KERNEL32.dll	410		GetConsoleCP
KERNEL32.dll	1100		SetCurrentDirectoryA
KERNEL32.dll	446		GetCurrentDirectoryA
KERNEL32.dll	136		CreateFileA
KERNEL32.dll	909		PeekNamedPipe
KERNEL32.dll	504		GetFullPathNameA
KERNEL32.dll	659		GetTickCount
KERNEL32.dll	612		GetStdHandle
KERNEL32.dll	610		GetStartupInfoA
KERNEL32.dll	1135		SetHandleCount
KERNEL32.dll	474		GetEnvironmentStringsW
KERNEL32.dll	353		FreeEnvironmentStringsW
KERNEL32.dll	472		GetEnvironmentStrings
KERNEL32.dll	352		FreeEnvironmentStringsA
KERNEL32.dll	1213		SystemTimeToFileTime
KERNEL32.dll	631		GetSystemTime
KERNEL32.dll	1260		VirtualFree
KERNEL32.dll	1262		VirtualLock
KERNEL32.dll	1263		VirtualProtect
KERNEL32.dll	1257		VirtualAlloc
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	871		MultiByteToWideChar
KERNEL32.dll	623		GetSystemDirectoryA
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	674		GetVersion
KERNEL32.dll	499		GetFileType
KERNEL32.dll	935		QueryPerformanceCounter
KERNEL32.dll	360		GetACP
KERNEL32.dll	476		GetEnvironmentVariableW
KERNEL32.dll	719		HeapFree
KERNEL32.dll	281		ExitProcess
KERNEL32.dll	715		HeapAlloc
KERNEL32.dll	751		InterlockedIncrement
KERNEL32.dll	747		InterlockedDecrement
KERNEL32.dll	293		FileTimeToSystemTime
KERNEL32.dll	292		FileTimeToLocalFileTime
KERNEL32.dll	466		GetDriveTypeA
KERNEL32.dll	306		FindFirstFileA
KERNEL32.dll	748		InterlockedExchange
KERNEL32.dll	722		HeapReAlloc
KERNEL32.dll	238		EnterCriticalSection
KERNEL32.dll	825		LeaveCriticalSection
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	1235		UnhandledExceptionFilter
KERNEL32.dll	1189		SetUnhandledExceptionFilter
KERNEL32.dll	768		IsDebuggerPresent
KERNEL32.dll	209		DeleteCriticalSection
KERNEL32.dll	288		FatalAppExitA
KERNEL32.dll	717		HeapCreate
KERNEL32.dll	718		HeapDestroy
KERNEL32.dll	1223		TlsGetValue
KERNEL32.dll	1221		TlsAlloc
KERNEL32.dll	1224		TlsSetValue
KERNEL32.dll	1222		TlsFree
KERNEL32.dll	452		GetCurrentThread
KERNEL32.dll	739		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	370		GetCPInfo
KERNEL32.dll	567		GetOEMCP
KERNEL32.dll	778		IsValidCodePage
KERNEL32.dll	811		LCMapStringA
KERNEL32.dll	813		LCMapStringW
KERNEL32.dll	661		GetTimeFormatA
KERNEL32.dll	454		GetDateFormatA
KERNEL32.dll	667		GetUserDefaultLCID
KERNEL32.dll	516		GetLocaleInfoA
KERNEL32.dll	269		EnumSystemLocalesA
KERNEL32.dll	780		IsValidLocale
KERNEL32.dll	614		GetStringTypeA
KERNEL32.dll	617		GetStringTypeW
USER32.dll	54		CharToOemBuffA
USER32.dll	533		MessageBoxW
USER32.dll	360		GetProcessWindowStation
USER32.dll	395		GetUserObjectInformationW
ADVAPI32.dll	177		CryptAcquireContextW
ADVAPI32.dll	643		RegisterEventSourceW
ADVAPI32.dll	568		RegCreateKeyExA
ADVAPI32.dll	637		RegSetValueExA
ADVAPI32.dll	560		RegCloseKey
ADVAPI32.dll	642		RegisterEventSourceA
ADVAPI32.dll	654		ReportEventA
ADVAPI32.dll	219		DeregisterEventSource
ADVAPI32.dll	203		CryptReleaseContext
ADVAPI32.dll	193		CryptGenRandom
ADVAPI32.dll	655		ReportEventW
WS2_32.dll		151
WS2_32.dll	54		WSAIoctl
WS2_32.dll	73		WSASend
WS2_32.dll	44		WSAGetOverlappedResult
WS2_32.dll	68		WSARecv
WS2_32.dll		10
WS2_32.dll		1
WS2_32.dll		14
WS2_32.dll		4
WS2_32.dll		57
WS2_32.dll		18
WS2_32.dll		21
WS2_32.dll		2
WS2_32.dll		3
WS2_32.dll		13
WS2_32.dll		6
WS2_32.dll		111
WS2_32.dll		7
WS2_32.dll		52
WS2_32.dll		9
WS2_32.dll		16
WS2_32.dll		22
WS2_32.dll		112
WS2_32.dll		15
WS2_32.dll		8
WS2_32.dll	83		WSASocketW
WS2_32.dll		115
WS2_32.dll		19
WS2_32.dll		11
WS2_32.dll		12
WS2_32.dll		55
WS2_32.dll		51
WS2_32.dll		56
WS2_32.dll		116
WS2_32.dll		23

show previews

offset	size	type	comment
0	3873792	EXE	07/28/2024 01:47:25	#
15c1	15	HTM		#
3a4724	85	HTM		#
3a90a0	43	GIF	(1 x 1)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK