FahCore_17.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	FahCore_17.exe
size	9016832 (0x899600)
md5	ea04c6ff78a80cb957f7459c4b385591

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
132	30729	1
152	20115	12
158	40219	62
158	30319	2
170	30319	475
131	30729	1
147	30729	15
1	0	285
171	30319	171
96	3077	1
170	40219	238
171	40219	230
157	40219	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x527bdd17
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0x64f600
SizeOfInitializedData	0x251600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x452087
BaseOfCode	0x1000
BaseOfData	0x651000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x8a5000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x64f4b8	0x64f600	R-X CODE
.rdata	0x651000	0x1d6cdc	0x1d6e00	R-- IDATA
.data	0x828000	0x29f24	0x22600	RW- IDATA
.idata	0x852000	0x248b	0x2600	RW- IDATA
.ctors	0x855000	0x104	0x200	R-- IDATA
.dtors	0x856000	0x104	0x200	R-- IDATA
.reloc	0x857000	0x4dc77	0x4de00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x852000	0xa0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x857000	0x44e30
DEBUG	0x6523b0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x7392c0	0x40
Bound_IAT	0	0
IAT	0x852724	0x684
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
OpenCL.dll	54		clGetMemObjectInfo
OpenCL.dll	44		clGetDeviceIDs
OpenCL.dll	56		clGetPlatformInfo
OpenCL.dll	55		clGetPlatformIDs
OpenCL.dll	62		clReleaseContext
OpenCL.dll	61		clReleaseCommandQueue
OpenCL.dll	69		clRetainContext
OpenCL.dll	68		clRetainCommandQueue
OpenCL.dll	72		clRetainMemObject
OpenCL.dll	65		clReleaseMemObject
OpenCL.dll	73		clRetainProgram
OpenCL.dll	66		clReleaseProgram
OpenCL.dll	71		clRetainKernel
OpenCL.dll	64		clReleaseKernel
OpenCL.dll	63		clReleaseEvent
OpenCL.dll	77		clSetKernelArg
OpenCL.dll	14		clCreateProgramWithSource
OpenCL.dll	11		clCreateKernel
OpenCL.dll	2		clCreateCommandQueue
OpenCL.dll	3		clCreateContext
OpenCL.dll	1		clCreateBuffer
OpenCL.dll			clBuildProgram
OpenCL.dll	25		clEnqueueMapBuffer
OpenCL.dll	28		clEnqueueNDRangeKernel
OpenCL.dll	57		clGetProgramBuildInfo
OpenCL.dll	52		clGetKernelInfo
OpenCL.dll	30		clEnqueueReadBuffer
OpenCL.dll	37		clEnqueueWriteBuffer
OpenCL.dll	20		clEnqueueCopyBuffer
OpenCL.dll	81		clWaitForEvents
OpenCL.dll	41		clFlush
OpenCL.dll	35		clEnqueueUnmapMemObject
OpenCL.dll	46		clGetEventInfo
OpenCL.dll	45		clGetDeviceInfo
OpenCL.dll	40		clFinish
SETUPAPI.dll	322		SetupDiEnumDeviceInfo
SETUPAPI.dll	339		SetupDiGetClassDevsA
SETUPAPI.dll	371		SetupDiGetDeviceRegistryPropertyA
WSOCK32.dll		56
WSOCK32.dll		15
WSOCK32.dll		112
WSOCK32.dll		14
WSOCK32.dll		115
WSOCK32.dll		151
WSOCK32.dll		18
WSOCK32.dll		51
WSOCK32.dll		9
WSOCK32.dll		55
WSOCK32.dll		8
WSOCK32.dll		11
WSOCK32.dll		3
WSOCK32.dll		22
WSOCK32.dll		23
WSOCK32.dll		13
WSOCK32.dll		21
WSOCK32.dll		2
WSOCK32.dll		19
WSOCK32.dll		16
WSOCK32.dll		1
WSOCK32.dll		4
WSOCK32.dll		52
WSOCK32.dll		111
WSOCK32.dll		10
WSOCK32.dll		12
USER32.dll	506		LoadStringW
USER32.dll	505		LoadStringA
USER32.dll	325		GetLastInputInfo
USER32.dll	526		MessageBoxA
USER32.dll	291		GetDesktopWindow
USER32.dll	360		GetProcessWindowStation
USER32.dll	395		GetUserObjectInformationW
ADVAPI32.dll	642		RegisterEventSourceA
ADVAPI32.dll	654		ReportEventA
ADVAPI32.dll	219		DeregisterEventSource
ADVAPI32.dll	621		RegQueryValueExA
ADVAPI32.dll	637		RegSetValueExA
ADVAPI32.dll	560		RegCloseKey
ADVAPI32.dll	608		RegOpenKeyExA
ADVAPI32.dll	375		InitializeSecurityDescriptor
ADVAPI32.dll	694		SetSecurityDescriptorDacl
ADVAPI32.dll	92		ControlService
ADVAPI32.dll	710		StartServiceA
ADVAPI32.dll	77		ChangeServiceConfig2A
ADVAPI32.dll	218		DeleteService
ADVAPI32.dll	552		QueryServiceStatus
ADVAPI32.dll	504		OpenSCManagerA
ADVAPI32.dll	506		OpenServiceA
ADVAPI32.dll	128		CreateServiceA
ADVAPI32.dll	87		CloseServiceHandle
ADVAPI32.dll	646		RegisterServiceCtrlHandlerExA
ADVAPI32.dll	704		SetServiceStatus
ADVAPI32.dll	711		StartServiceCtrlDispatcherA
ADVAPI32.dll	573		RegDeleteKeyA
KERNEL32.dll	288		FatalAppExitA
KERNEL32.dll	718		HeapDestroy
KERNEL32.dll	717		HeapCreate
KERNEL32.dll	532		GetModuleFileNameW
KERNEL32.dll	772		IsProcessorFeaturePresent
KERNEL32.dll	768		IsDebuggerPresent
KERNEL32.dll	1189		SetUnhandledExceptionFilter
KERNEL32.dll	1235		UnhandledExceptionFilter
KERNEL32.dll	100		CompareStringW
KERNEL32.dll	565		GetNumberOfConsoleInputEvents
KERNEL32.dll	907		PeekConsoleInputA
KERNEL32.dll	504		GetFullPathNameA
KERNEL32.dll	370		GetCPInfo
KERNEL32.dll	739		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1159		SetStdHandle
KERNEL32.dll	909		PeekNamedPipe
KERNEL32.dll	454		GetDateFormatA
KERNEL32.dll	661		GetTimeFormatA
KERNEL32.dll	722		HeapReAlloc
KERNEL32.dll	485		GetFileAttributesA
KERNEL32.dll	1118		SetFileAttributesA
KERNEL32.dll	1135		SetHandleCount
KERNEL32.dll	1100		SetCurrentDirectoryA
KERNEL32.dll	446		GetCurrentDirectoryA
KERNEL32.dll	1110		SetEnvironmentVariableA
KERNEL32.dll	307		FindFirstFileExA
KERNEL32.dll	466		GetDriveTypeA
KERNEL32.dll	292		FileTimeToLocalFileTime
KERNEL32.dll	293		FileTimeToSystemTime
KERNEL32.dll	862		MoveFileA
KERNEL32.dll	281		ExitProcess
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	282		ExitThread
KERNEL32.dll	664		GetTimeZoneInformation
KERNEL32.dll	723		HeapSetInformation
KERNEL32.dll	390		GetCommandLineA
KERNEL32.dll	715		HeapAlloc
KERNEL32.dll	1111		SetEnvironmentVariableW
KERNEL32.dll	516		GetLocaleInfoA
KERNEL32.dll	269		EnumSystemLocalesA
KERNEL32.dll	780		IsValidLocale
KERNEL32.dll	1316		WriteConsoleW
KERNEL32.dll	467		GetDriveTypeW
KERNEL32.dll	611		GetStartupInfoW
KERNEL32.dll	410		GetConsoleCP
KERNEL32.dll	343		FlushFileBuffers
KERNEL32.dll	353		FreeEnvironmentStringsW
KERNEL32.dll	474		GetEnvironmentStringsW
KERNEL32.dll	724		HeapSize
KERNEL32.dll	360		GetACP
KERNEL32.dll	567		GetOEMCP
KERNEL32.dll	778		IsValidCodePage
KERNEL32.dll	586		GetProcessHeap
KERNEL32.dll	831		LoadLibraryW
KERNEL32.dll	949		ReadConsoleInputA
KERNEL32.dll	1085		SetConsoleMode
KERNEL32.dll	738		InitializeCriticalSection
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	825		LeaveCriticalSection
KERNEL32.dll	828		LoadLibraryA
KERNEL32.dll	238		EnterCriticalSection
KERNEL32.dll	533		GetModuleHandleA
KERNEL32.dll	1202		Sleep
KERNEL32.dll	633		GetSystemTimeAsFileTime
KERNEL32.dll	514		GetLastError
KERNEL32.dll	1112		SetErrorMode
KERNEL32.dll	302		FindClose
KERNEL32.dll	323		FindNextFileA
KERNEL32.dll	306		FindFirstFileA
KERNEL32.dll	1113		SetEvent
KERNEL32.dll	745		InterlockedCompareExchange
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	130		CreateEventA
KERNEL32.dll	749		InterlockedExchangeAdd
KERNEL32.dll	748		InterlockedExchange
KERNEL32.dll	1224		TlsSetValue
KERNEL32.dll	1223		TlsGetValue
KERNEL32.dll	582		GetProcessAffinityMask
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	896		OpenProcess
KERNEL32.dll	449		GetCurrentProcessId
KERNEL32.dll	1221		TlsAlloc
KERNEL32.dll	1222		TlsFree
KERNEL32.dll	1139		SetLastError
KERNEL32.dll	1177		SetThreadPriority
KERNEL32.dll	654		GetThreadPriority
KERNEL32.dll	232		DuplicateHandle
KERNEL32.dll	452		GetCurrentThread
KERNEL32.dll	453		GetCurrentThreadId
KERNEL32.dll	1022		ReleaseSemaphore
KERNEL32.dll	751		InterlockedIncrement
KERNEL32.dll	1043		ResumeThread
KERNEL32.dll	171		CreateSemaphoreA
KERNEL32.dll	1039		ResetEvent
KERNEL32.dll	1169		SetThreadContext
KERNEL32.dll	646		GetThreadContext
KERNEL32.dll	1210		SuspendThread
KERNEL32.dll	1271		WaitForMultipleObjects
KERNEL32.dll	623		GetSystemDirectoryA
KERNEL32.dll	899		OpenSemaphoreA
KERNEL32.dll	549		GetNativeSystemInfo
KERNEL32.dll	675		GetVersionExA
KERNEL32.dll	359		GenerateConsoleCtrlEvent
KERNEL32.dll	531		GetModuleFileNameA
KERNEL32.dll	863		MoveFileExA
KERNEL32.dll	1149		SetPriorityClass
KERNEL32.dll	479		GetExitCodeProcess
KERNEL32.dll	594		GetProcessTimes
KERNEL32.dll	1216		TerminateProcess
KERNEL32.dll	211		DeleteFileA
KERNEL32.dll	428		GetConsoleMode
KERNEL32.dll	612		GetStdHandle
KERNEL32.dll	349		FormatMessageA
KERNEL32.dll	840		LocalFree
KERNEL32.dll	1212		SwitchToThread
KERNEL32.dll	136		CreateFileA
KERNEL32.dll	851		LockFileEx
KERNEL32.dll	627		GetSystemInfo
KERNEL32.dll	704		GlobalMemoryStatusEx
KERNEL32.dll	155		CreateMutexA
KERNEL32.dll	1018		ReleaseMutex
KERNEL32.dll	1136		SetHandleInformation
KERNEL32.dll	161		CreatePipe
KERNEL32.dll	164		CreateProcessA
KERNEL32.dll	352		FreeEnvironmentStringsA
KERNEL32.dll	472		GetEnvironmentStrings
KERNEL32.dll	1217		TerminateThread
KERNEL32.dll	181		CreateThread
KERNEL32.dll	1069		SetConsoleCtrlHandler
KERNEL32.dll	1171		SetThreadExecutionState
KERNEL32.dll	659		GetTickCount
KERNEL32.dll	628		GetSystemPowerStatus
KERNEL32.dll	667		GetUserDefaultLCID
KERNEL32.dll	615		GetStringTypeExA
KERNEL32.dll	616		GetStringTypeExW
KERNEL32.dll	811		LCMapStringA
KERNEL32.dll	813		LCMapStringW
KERNEL32.dll	1107		SetEndOfFile
KERNEL32.dll	1127		SetFilePointerEx
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	1027		RemoveDirectoryW
KERNEL32.dll	214		DeleteFileW
KERNEL32.dll	221		DeviceIoControl
KERNEL32.dll	507		GetFullPathNameW
KERNEL32.dll	313		FindFirstFileW
KERNEL32.dll	325		FindNextFileW
KERNEL32.dll	490		GetFileAttributesW
KERNEL32.dll	126		CreateDirectoryExW
KERNEL32.dll	117		CopyFileW
KERNEL32.dll	447		GetCurrentDirectoryW
KERNEL32.dll	1101		SetCurrentDirectoryW
KERNEL32.dll	492		GetFileInformationByHandle
KERNEL32.dll	487		GetFileAttributesExW
KERNEL32.dll	498		GetFileTime
KERNEL32.dll	1130		SetFileTime
KERNEL32.dll	1121		SetFileAttributesW
KERNEL32.dll	864		MoveFileExW
KERNEL32.dll	462		GetDiskFreeSpaceExW
KERNEL32.dll	129		CreateDirectoryW
KERNEL32.dll	645		GetTempPathW
KERNEL32.dll	871		MultiByteToWideChar
KERNEL32.dll	21		AreFileApisANSI
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	960		ReadFile
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	674		GetVersion
KERNEL32.dll	499		GetFileType
KERNEL32.dll	935		QueryPerformanceCounter
KERNEL32.dll	703		GlobalMemoryStatus
KERNEL32.dll	342		FlushConsoleInputBuffer
KERNEL32.dll	747		InterlockedDecrement
KERNEL32.dll	234		EncodePointer
KERNEL32.dll	202		DecodePointer
KERNEL32.dll	209		DeleteCriticalSection
KERNEL32.dll	518		GetLocaleInfoW
KERNEL32.dll	617		GetStringTypeW
KERNEL32.dll	1048		RtlUnwind
KERNEL32.dll	719		HeapFree
KERNEL32.dll	945		RaiseException
GDI32.dll	48		CreateCompatibleDC
GDI32.dll	459		GetDeviceCaps
GDI32.dll	47		CreateCompatibleBitmap
GDI32.dll	631		SelectObject
GDI32.dll	507		GetObjectA
GDI32.dll	19		BitBlt
GDI32.dll	423		GetBitmapBits
GDI32.dll	230		DeleteObject
GDI32.dll	227		DeleteDC
GDI32.dll	49		CreateDCA

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	9011248	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK