filename1111.exe
size116224 (0x1c600)
md5ef6c8512a828de27c5193146dbf29048
typePE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
203655012
147210222
225208065
199411181
223210051
2242100519
225210054
1090
221210055
225311012
219210051
222311011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x562e6462
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x5a00
SizeOfInitializedData0x16e00
SizeOfUninitializedData0
AddressOfEntryPoint0x694a
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x20000
SizeOfHeaders0x400
CheckSum0
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000x59ad0x5a00R-X CODE
.rdata0x70000x156540x15800R-- IDATA
.data0x1d0000xd900x800RW- IDATA
.rsrc0x1e0000x1e00x200R-- IDATA
.reloc0x1f0000x6000x600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x1ba740x64
RESOURCE0x1e0000x1e0
EXCEPTION00
SECURITY00
BASERELOC0x1f0000x600
DEBUG0x71f00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x78000x40
Bound_IAT00
IAT0x70000x178
Delay_IAT00
CLR_Header0x74480x48
typenamesizecp
MANIFEST#13810
module_namehintordfunction_name
MSVCP120D.dll1389public: __int64 __thiscall std::ios_base::width(__int64)

?width@ios_base@std@@QAE_J_J@Z

MSVCP120D.dll1293public: __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const *, __int64)

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

MSVCP120D.dll1290public: int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char)

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

MSVCP120D.dll914public: char __thiscall std::basic_ios<char, struct std::char_traits<char> >::fill(void)const

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ

MSVCP120D.dll920public: int __thiscall std::ios_base::flags(void)const

?flags@ios_base@std@@QBEHXZ

MSVCP120D.dll1390public: __int64 __thiscall std::ios_base::width(void)const

?width@ios_base@std@@QBE_JXZ

MSVCP120D.dll640public: void __thiscall std::_Container_base12::_Orphan_all(void)

?_Orphan_all@_Container_base12@std@@QAEXXZ

MSVCP120D.dll641public: void __thiscall std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void)

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

MSVCP120D.dll1358bool __cdecl std::uncaught_exception(void)

?uncaught_exception@std@@YA_NXZ

MSVCP120D.dll1265public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool)

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

MSVCP120D.dll1337public: class std::basic_ostream<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::tie(void)const

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

MSVCP120D.dll1014public: bool __thiscall std::ios_base::good(void)const

?good@ios_base@std@@QBE_NXZ

MSVCP120D.dll165public: __thiscall std::_Lockit::~_Lockit(void)

??1_Lockit@std@@QAE@XZ

MSVCP120D.dll102public: __thiscall std::_Lockit::_Lockit(int)

??0_Lockit@std@@QAE@H@Z

MSVCP120D.dll724void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP120D.dll1203public: class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::rdbuf(void)const

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

MSVCP120D.dll94public: __thiscall std::_Container_base12::_Container_base12(void)

??0_Container_base12@std@@QAE@XZ

MSVCP120D.dll728void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP120D.dll727void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP120D.dll160public: __thiscall std::_Container_base12::~_Container_base12(void)

??1_Container_base12@std@@QAE@XZ

MSVCP120D.dll446void __cdecl std::_Debug_message(wchar_t const *, wchar_t const *, unsigned int)

?_Debug_message@std@@YAXPB_W0I@Z

MSVCP120D.dll209public: class std::basic_istream<char, struct std::char_traits<char> > & __thiscall std::basic_istream<char, struct std::char_traits<char> >::operator>>(int &)

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z

MSVCP120D.dll260public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int)

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z

MSVCP120D.dll699char const * __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPBDH@Z

MSVCP120D.dll720char const * __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAPBDH@Z

MSVCP120D.dll118public: __thiscall std::locale::id::id(unsigned int)

??0id@locale@std@@QAE@I@Z

MSVCP120D.dll738class std::basic_istream<char, struct std::char_traits<char> > std::cin

?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A

MSVCP120D.dll921public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::flush(void)

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

MSVCP120D.dll755class std::basic_ostream<char, struct std::char_traits<char> > std::cout

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

MSVCR120D.dll461__crtTerminateProcess
MSVCR120D.dll462__crtUnhandledException
MSVCR120D.dll642_crt_debugger_hook
MSVCR120D.dll685_except_handler4_common
MSVCR120D.dll626_controlfp_s
MSVCR120D.dll843_invoke_watson
MSVCR120D.dll1139_onexit
MSVCR120D.dll464__dllonexit
MSVCR120D.dll603_calloc_dbg
MSVCR120D.dll1343_unlock
MSVCR120D.dll971_lock
MSVCR120D.dll459__crtSetUnhandledExceptionFilter
MSVCR120D.dll311void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120D.dll622_commode
MSVCR120D.dll726_fmode
MSVCR120D.dll473__initenv
MSVCR120D.dll837_initterm
MSVCR120D.dll838_initterm_e
MSVCR120D.dll537__setusermatherr
MSVCR120D.dll623_configthreadlocale
MSVCR120D.dll604_cexit
MSVCR120D.dll694_exit
MSVCR120D.dll1679exit
MSVCR120D.dll366_CrtSetCheckCount
MSVCR120D.dll349_CrtDbgReportW
MSVCR120D.dll535__set_app_type
MSVCR120D.dll472__getmainargs
MSVCR120D.dll580_amsg_exit
MSVCR120D.dll397_XcptFilter
MSVCR120D.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120D.dll114void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR120D.dll1154_purecall
MSVCR120D.dll830_hypot
MSVCR120D.dll263void __cdecl __ExceptionPtrCopy(void *, void const *)

?__ExceptionPtrCopy@@YAXPAXPBX@Z

MSVCR120D.dll1831memcpy
MSVCR120D.dll1833memmove
MSVCR120D.dll1913strlen
MSVCR120D.dll106public: virtual __thiscall std::exception::~exception(void)

??1exception@std@@UAE@XZ

MSVCR120D.dll44public: __thiscall std::exception::exception(class std::exception const &)

??0exception@std@@QAE@ABV01@@Z

MSVCR120D.dll112void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR120D.dll408__CxxQueryExceptionSize
MSVCR120D.dll403__CxxExceptionFilter
MSVCR120D.dll409__CxxRegisterExceptionObject
MSVCR120D.dll402__CxxDetectRethrow
MSVCR120D.dll410__CxxUnregisterExceptionObject
MSVCR120D.dll1891setlocale
MSVCR120D.dll376_CxxThrowException
MSVCR120D.dll137void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR120D.dll412__FrameUnwindFilter
MSVCR120D.dll325public: virtual char const * __thiscall std::exception::what(void)const

?what@exception@std@@UBEPBDXZ

MSVCR120D.dll795_getch
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll289EncodePointer
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll1362Sleep
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll254DecodePointer
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll1069QueryPerformanceCounter
mscoree.dll119_CorExeMain
offsetsizetypecomment
0116224EXE10/26/2015 17:35:30#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK