filenamemkdir.exe
size32768 (0x8000)
md5e58f3cae8cf26f7254708dcc45632827
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1990492
12729114
1472992
484473
1074
1181683
10844732
1081682

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x393db01a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x11f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x5000
SizeOfInitializedData0x2000
SizeOfUninitializedData0
AddressOfEntryPoint0x52bb
BaseOfCode0x1000
BaseOfData0x6000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x8000
SizeOfHeaders0x1000
CheckSum0
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x46780x5000R-X CODE
.rdata0x60000x7140x1000R-- IDATA
.data0x70000x7f40x1000RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x623c0x3c
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x60000x120
Delay_IAT0x61dc0x40
CLR_Header00
module_namehintordfunction_name
MSVCRT.dll700strerror
MSVCRT.dll97__mb_cur_max
MSVCRT.dll594fgets
MSVCRT.dll599fopen
MSVCRT.dll723tolower
MSVCRT.dll706strpbrk
MSVCRT.dll398_pctype
MSVCRT.dll277_isctype
MSVCRT.dll588fclose
MSVCRT.dll679realloc
MSVCRT.dll704strncmp
MSVCRT.dll576calloc
MSVCRT.dll386_mkdir
MSVCRT.dll705strncpy
MSVCRT.dll671putc
MSVCRT.dll591fflush
MSVCRT.dll245_get_osfhandle
MSVCRT.dll238_fstat
MSVCRT.dll211_exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll729vfprintf
MSVCRT.dll618getenv
MSVCRT.dll271_initterm
MSVCRT.dll131__setusermatherr
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll106__p__commode
MSVCRT.dll111__p__fmode
MSVCRT.dll129__set_app_type
MSVCRT.dll202_except_handler3
MSVCRT.dll183_controlfp
MSVCRT.dll676qsort
MSVCRT.dll575bsearch
MSVCRT.dll657malloc
MSVCRT.dll695strchr
MSVCRT.dll606free
MSVCRT.dll451_strlwr
MSVCRT.dll442_stat
MSVCRT.dll673puts
MSVCRT.dll475_umask
MSVCRT.dll447_strdup
MSVCRT.dll249_getcwd
MSVCRT.dll179_close
MSVCRT.dll408_read
MSVCRT.dll391_open
MSVCRT.dll176_chmod
MSVCRT.dll142_access
MSVCRT.dll480_utime
MSVCRT.dll177_chsize
MSVCRT.dll275_iob
MSVCRT.dll600fprintf
MSVCRT.dll585exit
MSVCRT.dll685setlocale
MSVCRT.dll670printf
MSVCRT.dll100__p___initenv
MSVCRT.dll200_errno
MSVCRT.dll88__getmainargs
KERNEL32.dll479LoadLibraryA
KERNEL32.dll301GetLastError
KERNEL32.dll457InterlockedExchange
KERNEL32.dll485LocalAlloc
KERNEL32.dll560RaiseException
KERNEL32.dll297GetFullPathNameA
KERNEL32.dll55CreateFileA
KERNEL32.dll30CloseHandle
KERNEL32.dll159FindClose
KERNEL32.dll292GetFileInformationByHandle
KERNEL32.dll195FreeLibrary
KERNEL32.dll339GetProcAddress
KERNEL32.dll163FindFirstFileA
KERNEL32.dll172FindNextFileA
offsetsizetypecomment
032768EXE06/07/2000 02:14:50#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK