filenameStandard Desktop Clock-7.exe
size135168 (0x21000)
md5da3c8d1ea708f1ff301d963004f9539e
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1105072730
1255072726
1095072794
93403515
10172
114507274
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x56122769
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0xd000
SizeOfInitializedData0x13000
SizeOfUninitializedData0
AddressOfEntryPoint0x2e33
BaseOfCode0x1000
BaseOfData0xe000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x22000
SizeOfHeaders0x1000
CheckSum0x272c9
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000xc2080xd000R-X CODE
.rdata0xe0000x44660x5000R-- IDATA
.data0x130000x23980x2000RW- IDATA
.rsrc0x160000xb5400xc000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1163c0xa0
RESOURCE0x160000xb540
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0xe2c00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x111580x40
Bound_IAT00
IAT0xe0000x288
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#137373721252
ICON#142641252
ICON#211281252
ICON#311281252
MENU#109741252
MENU#1321901252
DIALOG#1354561252
DIALOG#1363201252
STRING#71981252
ACCELERATORS#109161252
GROUP_ICON#107341252
GROUP_ICON#134201252
MANIFEST#13601252
idlangstring
1031049Standard Desktop Clock-7
1041049© 2015 Style-7. All rights reserved
10510491.0
1091049STANDARDDESKTOPCLOCK7
module_namehintordfunction_name
KERNEL32.dll371GetLocalTime
KERNEL32.dll273GetCommandLineW
KERNEL32.dll973lstrlenW
KERNEL32.dll970lstrcpynW
KERNEL32.dll581LCMapStringW
KERNEL32.dll580LCMapStringA
KERNEL32.dll445GetStringTypeW
KERNEL32.dll442GetStringTypeA
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll540HeapSize
KERNEL32.dll597LoadLibraryW
KERNEL32.dll538HeapReAlloc
KERNEL32.dll897VirtualAlloc
KERNEL32.dll403GetOEMCP
KERNEL32.dll253GetACP
KERNEL32.dll260GetCPInfo
KERNEL32.dll854Sleep
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll594LoadLibraryA
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll479GetTickCount
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll899VirtualFree
KERNEL32.dll530HeapCreate
KERNEL32.dll532HeapDestroy
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll488GetVersion
KERNEL32.dll958lstrcatW
KERNEL32.dll967lstrcpyW
KERNEL32.dll386GetModuleHandleW
KERNEL32.dll522GlobalUnlock
KERNEL32.dll511GlobalFree
KERNEL32.dll515GlobalLock
KERNEL32.dll504GlobalAlloc
KERNEL32.dll613LockResource
KERNEL32.dll599LoadResource
KERNEL32.dll853SizeofResource
KERNEL32.dll727RtlUnwind
KERNEL32.dll230FindResourceW
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll808SetLastError
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll868TlsFree
KERNEL32.dll870TlsSetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll869TlsGetValue
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll358GetFileType
KERNEL32.dll804SetHandleCount
KERNEL32.dll272GetCommandLineA
KERNEL32.dll343GetEnvironmentStringsW
KERNEL32.dll369GetLastError
KERNEL32.dll247FreeEnvironmentStringsW
KERNEL32.dll341GetEnvironmentStrings
KERNEL32.dll679RaiseException
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll246FreeEnvironmentStringsA
KERNEL32.dll382GetModuleFileNameW
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll441GetStdHandle
KERNEL32.dll932WriteFile
KERNEL32.dll185ExitProcess
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll416GetProcAddress
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll534HeapFree
KERNEL32.dll489GetVersionExA
KERNEL32.dll528HeapAlloc
KERNEL32.dll419GetProcessHeap
KERNEL32.dll440GetStartupInfoW
KERNEL32.dll862TerminateProcess
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll878UnhandledExceptionFilter
USER32.dll486MessageBoxW
USER32.dll153DestroyWindow
USER32.dll634SetTimer
USER32.dll372GetWindowRect
USER32.dll270GetDesktopWindow
USER32.dll230FindWindowW
USER32.dll661SubtractRect
USER32.dll371GetWindowPlacement
USER32.dll642SetWindowPlacement
USER32.dll643SetWindowPos
USER32.dll662SwapMouseButton
USER32.dll56CheckDlgButton
USER32.dll567SendDlgItemMessageW
USER32.dll419IsDlgButtonChecked
USER32.dll198EndDialog
USER32.dll460LoadStringW
USER32.dll439LoadAcceleratorsW
USER32.dll447LoadIconW
USER32.dll318GetMessageW
USER32.dll268GetDC
USER32.dll554ReleaseDC
USER32.dll345GetSubMenu
USER32.dll697UpdateLayeredWindow
USER32.dll143DefWindowProcW
USER32.dll596SetDlgItemTextW
USER32.dll516PostQuitMessage
USER32.dll501OffsetRect
USER32.dll676TrackPopupMenu
USER32.dll267GetCursorPos
USER32.dll430IsWindowEnabled
USER32.dll599SetForegroundWindow
USER32.dll680TranslateAcceleratorW
USER32.dll159DialogBoxParamW
USER32.dll700UpdateWindow
USER32.dll658ShowWindow
USER32.dll97CreateWindowExW
USER32.dll536RegisterClassExW
USER32.dll445LoadCursorW
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll457LoadMenuW
GDI32.dll143DeleteObject
GDI32.dll526SelectObject
GDI32.dll50CreateDIBSection
GDI32.dll45CreateCompatibleDC
GDI32.dll140DeleteDC
ADVAPI32.dll517RegSetValueExW
ADVAPI32.dll466RegCreateKeyExW
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll493RegOpenKeyExW
ADVAPI32.dll504RegQueryValueExW
ADVAPI32.dll473RegDeleteValueW
SHELL32.dll267ShellExecuteW
SHELL32.dll276Shell_NotifyIconW
ole32.dll131CreateStreamOnHGlobal
gdiplus.dll224GdipFree
gdiplus.dll33GdipAlloc
gdiplus.dll142GdipDisposeImage
gdiplus.dll113GdipCreatePen1
gdiplus.dll138GdipDeletePen
gdiplus.dll560GdipSetPenWidth
gdiplus.dll557GdipSetPenStartCap
gdiplus.dll552GdipSetPenEndCap
gdiplus.dll544GdipSetPenColor
gdiplus.dll82GdipCreateFromHDC
gdiplus.dll134GdipDeleteGraphics
gdiplus.dll176GdipDrawLine
gdiplus.dll389GdipGraphicsClear
gdiplus.dll165GdipDrawImageI
gdiplus.dll49GdipCloneImage
gdiplus.dll284GdipGetImageWidth
gdiplus.dll73GdipCreateBitmapFromStream
gdiplus.dll37GdipBitmapGetPixel
gdiplus.dll608GdiplusStartup
gdiplus.dll607GdiplusShutdown
gdiplus.dll564GdipSetSmoothingMode
offsetsizetypecomment
0135168EXE10/05/2015 07:31:53#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK