filenameTc_Ds_Analysis.exe
size279040 (0x44200)
md5dbda95299313ca2a4b43b4a6a3c60aeb
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x3cfb1777
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.0
SizeOfCode0x2fe00
SizeOfInitializedData0x18800
SizeOfUninitializedData0
AddressOfEntryPoint0xe010
BaseOfCode0x1000
BaseOfData0x31000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x4b000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v5.0

Sections

namevavsizeraw sizeflags
.text0x10000x2fcc30x2fe00R-X CODE
.rdata0x310000x8a980x8c00R-- IDATA
.data0x3a0000x9f480x5800RW- IDATA
.idata0x440000x232e0x2400RW- IDATA
.rsrc0x470000x37780x3800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x440000xf0
RESOURCE0x470000x3778
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x4468c0x59c
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#33080
CURSOR#41800
BITMAP#2656715080
BITMAP#309941840
BITMAP#309953640
BITMAP#309963240
ICON#17440
ICON#22960
DIALOG#1007140
DIALOG#10210320
DIALOG#1303280
DIALOG#307212320
STRING#7720
STRING#38411300
STRING#3842420
STRING#38433300
STRING#385712500
STRING#38586740
STRING#38597320
STRING#38651720
STRING#38662220
STRING#386712200
STRING#38686120
STRING#3869440
GROUP_CURSOR#30977340
GROUP_ICON#128340
VERSION#17880
#240#102280
idlangstring
1011033&About Tc_Ds_Anal...
614401033Open
614411033Save As
614421033All Files (*.*)
614431033Untitled
614461033an unnamed file
614571033&Hide
614721033No error message is available.
614731033An unsupported operation was attempted.
614741033A required resource was unavailable.
614751033Out of memory.
614761033An unknown error has occurred.
616961033Invalid filename.
616971033Failed to open document.
616981033Failed to save document.
616991033Save changes to %1?
617001033Failed to create empty document.
617011033The file is too large to open.
617021033Could not start print job.
617031033Failed to launch help.
617041033Internal application error.
617051033Command failed.
617061033Insufficient memory to perform operation.
617071033System registry entries have been removed and the INI file (if any) was deleted.
617081033Not all of the system registry entries (or INI file) were removed.
617091033This program requires the file %s, which was not found on this system.
617101033This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617121033Please enter an integer.
617131033Please enter a number.
617141033Please enter an integer between %1 and %2.
617151033Please enter a number between %1 and %2.
617161033Please enter no more than %1 characters.
617171033Please select a button.
617181033Please enter an integer between 0 and 255.
617191033Please enter a positive integer.
617201033Please enter a date and/or time.
617211033Please enter a currency.
617281033Unexpected file format.
617291033%1 Cannot find this file. Please verify that the correct path and file name are given.
617301033Destination disk drive is full.
617311033Unable to read from %1, it is opened by someone else.
617321033Unable to write to %1, it is read-only or opened by someone else.
617331033An unexpected error occurred while reading %1.
617341033An unexpected error occurred while writing %1.
618361033Unable to read write-only property.
618371033Unable to write read-only property.
618401033Unable to load mail system support.
618411033Mail system DLL is invalid.
618421033Send Mail failed to send message.
618561033No error occurred.
618571033An unknown error occurred while accessing %1.
618581033%1 was not found.
618591033%1 contains an invalid path.
618601033%1 could not be opened because there are too many open files.
618611033Access to %1 was denied.
618621033An invalid file handle was associated with %1.
618631033%1 could not be removed because it is the current directory.
618641033%1 could not be created because the directory is full.
618651033Seek failed on %1
618661033A hardware I/O error was reported while accessing %1.
618671033A sharing violation occurred while accessing %1.
618681033A locking violation occurred while accessing %1.
618691033Disk full while accessing %1.
618701033An attempt was made to access %1 past its end.
618721033No error occurred.
618731033An unknown error occurred while accessing %1.
618741033An attempt was made to write to the reading %1.
618751033An attempt was made to access %1 past its end.
618761033An attempt was made to read from the writing %1.
618771033%1 has a bad format.
618781033%1 contained an unexpected object.
618791033%1 contains an incorrect schema.
618881033pixels
module_namehintordfunction_name
KERNEL32.dll370HeapSize
KERNEL32.dll163GetCPInfo
KERNEL32.dll108ExitThread
KERNEL32.dll265GetOEMCP
KERNEL32.dll592UnhandledExceptionFilter
KERNEL32.dll150FreeEnvironmentStringsA
KERNEL32.dll369HeapReAlloc
KERNEL32.dll157GetACP
KERNEL32.dll151FreeEnvironmentStringsW
KERNEL32.dll227GetEnvironmentStringsW
KERNEL32.dll539SetHandleCount
KERNEL32.dll298GetStdHandle
KERNEL32.dll239GetFileType
KERNEL32.dll364HeapDestroy
KERNEL32.dll362HeapCreate
KERNEL32.dll606VirtualFree
KERNEL32.dll566SetUnhandledExceptionFilter
KERNEL32.dll603VirtualAlloc
KERNEL32.dll225GetEnvironmentStrings
KERNEL32.dll398LCMapStringW
KERNEL32.dll360HeapAlloc
KERNEL32.dll302GetStringTypeW
KERNEL32.dll387IsBadReadPtr
KERNEL32.dll390IsBadWritePtr
KERNEL32.dll384IsBadCodePtr
KERNEL32.dll553SetStdHandle
KERNEL32.dll230GetExitCodeProcess
KERNEL32.dll61CreateProcessA
KERNEL32.dll366HeapFree
KERNEL32.dll67CreateThread
KERNEL32.dll30CompareStringA
KERNEL32.dll31CompareStringW
KERNEL32.dll529SetEnvironmentVariableA
KERNEL32.dll246GetLocaleInfoA
KERNEL32.dll247GetLocaleInfoW
KERNEL32.dll427MultiByteToWideChar
KERNEL32.dll622WideCharToMultiByte
KERNEL32.dll673lstrlenA
KERNEL32.dll379InterlockedDecrement
KERNEL32.dll382InterlockedIncrement
KERNEL32.dll46CreateEventA
KERNEL32.dll577SuspendThread
KERNEL32.dll563SetThreadPriority
KERNEL32.dll482ResumeThread
KERNEL32.dll532SetEvent
KERNEL32.dll618WaitForSingleObject
KERNEL32.dll24CloseHandle
KERNEL32.dll341GlobalAlloc
KERNEL32.dll343GlobalDeleteAtom
KERNEL32.dll661lstrcmpA
KERNEL32.dll664lstrcmpiA
KERNEL32.dll213GetCurrentThread
KERNEL32.dll332GetVersion
KERNEL32.dll658lstrcatA
KERNEL32.dll214GetCurrentThreadId
KERNEL32.dll352GlobalLock
KERNEL32.dll358GlobalUnlock
KERNEL32.dll348GlobalFree
KERNEL32.dll419LockResource
KERNEL32.dll137FindResourceA
KERNEL32.dll291GetProfileStringA
KERNEL32.dll457RaiseException
KERNEL32.dll170GetCommandLineA
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll245GetLocalTime
KERNEL32.dll309GetSystemTime
KERNEL32.dll328GetTimeZoneInformation
KERNEL32.dll582TerminateProcess
KERNEL32.dll107ExitProcess
KERNEL32.dll485RtlUnwind
KERNEL32.dll325GetTickCount
KERNEL32.dll119FileTimeToLocalFileTime
KERNEL32.dll120FileTimeToSystemTime
KERNEL32.dll238GetFileTime
KERNEL32.dll237GetFileSize
KERNEL32.dll232GetFileAttributesA
KERNEL32.dll531SetErrorMode
KERNEL32.dll349GlobalGetAtomNameA
KERNEL32.dll339GlobalAddAtomA
KERNEL32.dll147FormatMessageA
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll320GetThreadLocale
KERNEL32.dll240GetFullPathNameA
KERNEL32.dll335GetVolumeInformationA
KERNEL32.dll130FindFirstFileA
KERNEL32.dll126FindClose
KERNEL32.dll528SetEndOfFile
KERNEL32.dll593UnlockFile
KERNEL32.dll417LockFile
KERNEL32.dll142FlushFileBuffers
KERNEL32.dll537SetFilePointer
KERNEL32.dll635WriteFile
KERNEL32.dll470ReadFile
KERNEL32.dll49CreateFileA
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll85DuplicateHandle
KERNEL32.dll639WritePrivateProfileStringA
KERNEL32.dll333GetVersionExA
KERNEL32.dll285GetProcessVersion
KERNEL32.dll400LoadLibraryA
KERNEL32.dll278GetProcAddress
KERNEL32.dll152FreeLibrary
KERNEL32.dll586TlsGetValue
KERNEL32.dll413LocalReAlloc
KERNEL32.dll587TlsSetValue
KERNEL32.dll88EnterCriticalSection
KERNEL32.dll354GlobalReAlloc
KERNEL32.dll399LeaveCriticalSection
KERNEL32.dll351GlobalHandle
KERNEL32.dll76DeleteCriticalSection
KERNEL32.dll584TlsAlloc
KERNEL32.dll377InitializeCriticalSection
KERNEL32.dll410LocalFree
KERNEL32.dll406LocalAlloc
KERNEL32.dll667lstrcpyA
KERNEL32.dll574SizeofResource
KERNEL32.dll244GetLastError
KERNEL32.dll542SetLastError
KERNEL32.dll347GlobalFlags
KERNEL32.dll670lstrcpynA
KERNEL32.dll426MulDiv
KERNEL32.dll397LCMapStringA
KERNEL32.dll299GetStringTypeA
KERNEL32.dll405LoadResource
USER32.dll521SetRectEmpty
USER32.dll578TranslateAcceleratorA
USER32.dll382LoadMenuA
USER32.dll507SetMenu
USER32.dll466ReuseDDElParam
USER32.dll588UnpackDDElParam
USER32.dll10BringWindowToTop
USER32.dll337IntersectRect
USER32.dll331InflateRect
USER32.dll450RegisterClipboardFormatA
USER32.dll436PostThreadMessageA
USER32.dll277GetMessageA
USER32.dll597ValidateRect
USER32.dll237GetCursorPos
USER32.dll405MessageBoxA
USER32.dll492SetCursor
USER32.dll554ShowOwnedPopups
USER32.dll435PostQuitMessage
USER32.dll614wvsprintfA
USER32.dll266GetMenuCheckMarkDimensions
USER32.dll368LoadBitmapA
USER32.dll274GetMenuState
USER32.dll411ModifyMenuA
USER32.dll520SetRect
USER32.dll366LoadAcceleratorsA
USER32.dll176EnableMenuItem
USER32.dll557ShowWindow
USER32.dll413MoveWindow
USER32.dll545SetWindowTextA
USER32.dll352IsDialogMessageA
USER32.dll593UpdateWindow
USER32.dll472SendDlgItemMessageA
USER32.dll564SystemParametersInfoA
USER32.dll400MapWindowPoints
USER32.dll297GetSysColor
USER32.dll431PeekMessageA
USER32.dll144DispatchMessageA
USER32.dll248GetFocus
USER32.dll501SetFocus
USER32.dll2AdjustWindowRectEx
USER32.dll201EqualRect
USER32.dll130DeferWindowPos
USER32.dll8BeginDeferWindowPos
USER32.dll64CopyRect
USER32.dll179EndDeferWindowPos
USER32.dll510SetMenuItemBitmaps
USER32.dll48CheckMenuItem
USER32.dll60CopyAcceleratorTableA
USER32.dll522SetScrollInfo
USER32.dll524SetScrollRange
USER32.dll293GetScrollPos
USER32.dll523SetScrollPos
USER32.dll305GetTopWindow
USER32.dll349IsChild
USER32.dll216GetCapture
USER32.dll606WinHelpA
USER32.dll612wsprintfA
USER32.dll219GetClassInfoA
USER32.dll446RegisterClassA
USER32.dll269GetMenuItemCount
USER32.dll296GetSubMenu
USER32.dll270GetMenuItemID
USER32.dll265GetMenu
USER32.dll320GetWindowTextLengthA
USER32.dll319GetWindowTextA
USER32.dll242GetDlgCtrlID
USER32.dll257GetKeyState
USER32.dll128DefWindowProcA
USER32.dll85CreateWindowExA
USER32.dll549SetWindowsHookExA
USER32.dll17CallNextHookEx
USER32.dll518SetPropA
USER32.dll584UnhookWindowsHookEx
USER32.dll264GetLastActivePopup
USER32.dll249GetForegroundWindow
USER32.dll502SetForegroundWindow
USER32.dll289GetPropA
USER32.dll18CallWindowProcA
USER32.dll463RemovePropA
USER32.dll280GetMessageTime
USER32.dll279GetMessagePos
USER32.dll311GetWindow
USER32.dll404MessageBeep
USER32.dll43CharUpperA
USER32.dll317GetWindowRect
USER32.dll539SetWindowLongA
USER32.dll542SetWindowPos
USER32.dll458RegisterWindowMessageA
USER32.dll283GetNextDlgTabItem
USER32.dll180EndDialog
USER32.dll213GetActiveWindow
USER32.dll482SetActiveWindow
USER32.dll359IsWindow
USER32.dll72CreateDialogIndirectParamA
USER32.dll138DestroyWindow
USER32.dll285GetParent
USER32.dll314GetWindowLongA
USER32.dll243GetDlgItem
USER32.dll360IsWindowEnabled
USER32.dll33CharNextA
USER32.dll282GetNextDlgGroupItem
USER32.dll470ScrollWindow
USER32.dll362IsWindowVisible
USER32.dll467ScreenToClient
USER32.dll609WindowFromPoint
USER32.dll299GetSystemMenu
USER32.dll4AppendMenuA
USER32.dll356IsIconic
USER32.dll474SendMessageA
USER32.dll300GetSystemMetrics
USER32.dll228GetClientRect
USER32.dll164DrawIcon
USER32.dll374LoadIconA
USER32.dll433PostMessageA
USER32.dll178EnableWindow
USER32.dll460ReleaseCapture
USER32.dll421OffsetRect
USER32.dll298GetSysColorBrush
USER32.dll338InvalidateRect
USER32.dll205FindWindowA
USER32.dll240GetDesktopWindow
USER32.dll370LoadCursorA
USER32.dll225GetClassNameA
USER32.dll54ClientToScreen
USER32.dll443PtInRect
USER32.dll325GrayStringA
USER32.dll137DestroyMenu
USER32.dll387LoadStringA
USER32.dll182EndPaint
USER32.dll170DrawTextA
USER32.dll566TabbedTextOutA
USER32.dll461ReleaseDC
USER32.dll9BeginPaint
USER32.dll313GetWindowDC
USER32.dll238GetDC
USER32.dll395MapDialogRect
USER32.dll555ShowScrollBar
USER32.dll581TranslateMessage
USER32.dll122DefDlgProcA
USER32.dll327HideCaret
USER32.dll552ShowCaret
USER32.dll202ExcludeUpdateRgn
USER32.dll161DrawFocusRect
USER32.dll589UnregisterClassA
USER32.dll361IsWindowUnicode
GDI32.dll234GetObjectA
GDI32.dll67DeleteDC
GDI32.dll323SaveDC
GDI32.dll321RestoreDC
GDI32.dll330SelectObject
GDI32.dll250GetStockObject
GDI32.dll337SetBkMode
GDI32.dll353SetMapMode
GDI32.dll373SetViewportOrgEx
GDI32.dll287OffsetViewportOrgEx
GDI32.dll372SetViewportExtEx
GDI32.dll324ScaleViewportExtEx
GDI32.dll376SetWindowExtEx
GDI32.dll325ScaleWindowExtEx
GDI32.dll190GetClipBox
GDI32.dll336SetBkColor
GDI32.dll276IntersectClipRect
GDI32.dll70DeleteObject
GDI32.dll199GetDeviceCaps
GDI32.dll270GetViewportExtEx
GDI32.dll273GetWindowExtEx
GDI32.dll64CreateSolidBrush
GDI32.dll310PtVisible
GDI32.dll313RectVisible
GDI32.dll387TextOutA
GDI32.dll98ExtTextOutA
GDI32.dll91Escape
GDI32.dll263GetTextExtentPointA
GDI32.dll278LPtoDP
GDI32.dll65DPtoLP
GDI32.dll258GetTextColor
GDI32.dll173GetBkColor
GDI32.dll290PatBlt
GDI32.dll226GetMapMode
GDI32.dll37CreateDIBitmap
GDI32.dll31CreateCompatibleDC
GDI32.dll10BitBlt
GDI32.dll370SetTextColor
GDI32.dll25CreateBitmap
comdlg32.dll7GetFileTitleA
comdlg32.dll9GetOpenFileNameA
comdlg32.dll11GetSaveFileNameA
WINSPOOL.DRV61DocumentPropertiesA
WINSPOOL.DRV105OpenPrinterA
WINSPOOL.DRV26ClosePrinter
ADVAPI32.dll279RegCloseKey
ADVAPI32.dll310RegQueryValueExA
ADVAPI32.dll302RegOpenKeyExA
ADVAPI32.dll283RegCreateKeyExA
ADVAPI32.dll321RegSetValueExA
SHELL32.dll13DragFinish
SHELL32.dll15DragQueryFileA
COMCTL32.dll17
COMCTL32.dll23ImageList_Destroy
oledlg.dll8
ole32.dll20CoFreeUnusedLibraries
ole32.dll206OleUninitialize
ole32.dll183OleInitialize
ole32.dll69CoTaskMemFree
ole32.dll23CoGetClassObject
ole32.dll84CreateILockBytesOnHGlobal
ole32.dll240StgOpenStorageOnILockBytes
ole32.dll6CLSIDFromString
ole32.dll5CLSIDFromProgID
ole32.dll185OleIsCurrentClipboard
ole32.dll56CoRegisterMessageFilter
ole32.dll233StgCreateDocfileOnILockBytes
ole32.dll62CoRevokeClassObject
ole32.dll178OleFlushClipboard
ole32.dll68CoTaskMemAlloc
OLEAUT32.dll4
OLEAUT32.dll6
OLEAUT32.dll9
OLEAUT32.dll420
OLEAUT32.dll2
OLEAUT32.dll12
OLEAUT32.dll150
OLEAUT32.dll7

StringTable 040904B0

CompanyName
FileDescriptionTc_Ds_Anal MFC Application
FileVersion1, 0, 0, 1
InternalNameTc_Ds_Anal
LegalCopyrightCopyright (C) 1901
LegalTrademarks
OriginalFilenameTc_Ds_Anal.EXE
ProductNameTc_Ds_Anal Application
ProductVersion1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0279040EXE06/03/2002 07:15:03#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK