filenameclock.exe
size31024 (0x7930)
md5eefb841d76e799f1815a2f191b944733
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x2e647dee
PointerToSymbolTable0
NumberOfSymbols0x514
SizeOfOptionalHeader0xe0
Characteristics0x8386
Magic0x10b
LinkerVersion2.50
SizeOfCode0x3e00
SizeOfInitializedData0x3400
SizeOfUninitializedData0x600
AddressOfEntryPoint0x4230
BaseOfCode0x1000
BaseOfData0x5000
ImageBase0x12b0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion3.10
Reserved10
SizeOfImage0xb000
SizeOfHeaders0x400
CheckSum0xa4e3
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v4.2

Sections

namevavsizeraw sizeflags
.text0x10000x3de00x3e00R-X CODE
.bss0x50000x45c0RW- UDATA
.rdata0x60000x10c0x200R-- IDATA
.data0x70000xa5c0xc00RW- IDATA
.idata0x80000xa6e0xc00R-- IDATA
.rsrc0x90000xfe40x1000R-- IDATA
.reloc0xa0000x9300xa00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x80000xa6e
RESOURCE0x90000xfe4
EXCEPTION00
SECURITY00
BASERELOC0xa0000x838
DEBUG0x60000x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#13040
ICON#27440
MENUCLOCK2340
MENUGENERICMENU580
DIALOGABOUTBOX2540
DIALOG#1006180
STRING#12420
STRING#2700
GROUP_ICONCCKK340
VERSION#17920
idlangstring
21033Clock
31033Not enough timing resources for Clock. Close other applications and try again.
41033uclucida
51033Always on &Top
221033sFont
231033Clock
241033clock.ini
module_namehintordfunction_name
comdlg32.dll4ChooseFontW
SHELL32.dll51ShellAboutW
KERNEL32.dll222GetFileType
KERNEL32.dll275GetStdHandle
KERNEL32.dll235GetModuleFileNameA
KERNEL32.dll279GetStringTypeW
KERNEL32.dll537UnhandledExceptionFilter
KERNEL32.dll443RtlUnwind
KERNEL32.dll334HeapAlloc
KERNEL32.dll100ExitProcess
KERNEL32.dll161GetCommandLineA
KERNEL32.dll210GetEnvironmentStrings
KERNEL32.dll306GetVersion
KERNEL32.dll273GetStartupInfoA
KERNEL32.dll237GetModuleHandleA
KERNEL32.dll303GetUserDefaultLCID
KERNEL32.dll230GetLocaleInfoW
KERNEL32.dll600lstrcatW
KERNEL32.dll609lstrcpyW
KERNEL32.dll615lstrlenW
KERNEL32.dll285GetSystemTime
KERNEL32.dll228GetLocalTime
KERNEL32.dll391MulDiv
KERNEL32.dll583WritePrivateProfileStringW
KERNEL32.dll256GetPrivateProfileStringW
KERNEL32.dll371LocalAlloc
KERNEL32.dll252GetPrivateProfileIntW
KERNEL32.dll565WideCharToMultiByte
KERNEL32.dll259GetProcessHeap
KERNEL32.dll578WriteFile
KERNEL32.dll392MultiByteToWideChar
KERNEL32.dll2147483647
GDI32.dll99ExtTextOutW
GDI32.dll283Rectangle
GDI32.dll338SetTextColor
GDI32.dll229GetTextExtentExPointW
GDI32.dll10BitBlt
GDI32.dll233GetTextExtentPointW
GDI32.dll45CreateFontIndirectW
GDI32.dll249LineTo
GDI32.dll260PatBlt
GDI32.dll331SetROP2
GDI32.dll220GetStockObject
GDI32.dll275Polygon
GDI32.dll31CreateCompatibleDC
GDI32.dll38CreateDiscardableBitmap
GDI32.dll305SetBkColor
GDI32.dll336SetTextAlign
GDI32.dll67DeleteDC
GDI32.dll299SelectObject
GDI32.dll55CreatePen
GDI32.dll306SetBkMode
GDI32.dll202GetNearestColor
GDI32.dll64CreateSolidBrush
GDI32.dll70DeleteObject
GDI32.dll254MoveToEx
GDI32.dll171GetDeviceCaps
USER32.dll498SetRect
USER32.dll141DispatchMessageW
USER32.dll555TranslateMessage
USER32.dll273GetMessageW
USER32.dll533ShowWindow
USER32.dll307GetWindowRect
USER32.dll5AppendMenuW
USER32.dll519SetWindowPos
USER32.dll375LoadStringW
USER32.dll290GetSystemMenu
USER32.dll45CheckMenuItem
USER32.dll169EnableMenuItem
USER32.dll256GetMenu
USER32.dll395MessageBoxW
USER32.dll510SetTimer
USER32.dll83CreateWindowExW
USER32.dll439ReleaseDC
USER32.dll229GetDC
USER32.dll429RegisterClassW
USER32.dll361LoadCursorW
USER32.dll126DefWindowProcW
USER32.dll344IsIconic
USER32.dll419PostMessageW
USER32.dll351IsZoomed
USER32.dll327InvalidateRect
USER32.dll363LoadIconW
USER32.dll232GetDialogBaseUnits
USER32.dll438ReleaseCapture
USER32.dll463SetCapture
USER32.dll206GetAsyncKeyState
USER32.dll196FillRect
USER32.dll288GetSysColor
USER32.dll219GetClientRect
USER32.dll175EndPaint
USER32.dll9BeginPaint
USER32.dll566UpdateWindow
USER32.dll420PostQuitMessage
USER32.dll471SetCursor
USER32.dll353KillTimer
USER32.dll522SetWindowTextW
USER32.dll585wsprintfW
USER32.dll320InflateRect
USER32.dll405OffsetRect
USER32.dll291GetSystemMetrics
USER32.dll517SetWindowLongW
USER32.dll305GetWindowLongW

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionClock Applet
FileVersion3.50
InternalNameclock
LegalCopyrightCopyright © Microsoft Corp. 1981-1994
OriginalFilenameCLOCK.EXE
ProductNameMicrosoft® Windows NT(TM) Operating System
ProductVersion3.50

VS_FIXEDFILEINFO

FileVersion3.50.795.1
ProductVersion3.50.795.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
030208EXE08/31/1994 12:56:14#
15c115HTM#
7600816BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK