ipz2.unpacked.exe_

info
MZ
PE
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

parent	ipz2.exe__
filename	ipz2.unpacked.exe__
size	1019392 (0xf8e00)
md5	f16775b1995f2eec0f143bd5b1ff75df

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
96	3077	2
105	2067	16
15	3077	30
93	2067	2
19	9049	2
0	0	9
1	0	244
93	2179	17
95	3077	590
90	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4cba93b2
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0xb1000
SizeOfInitializedData	0x61000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa3cf6
BaseOfCode	0x1000
BaseOfData	0xb2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x113000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xb088a	0xb1000	R-X CODE
.rdata	0xb2000	0x336a4	0x34000	R-- IDATA
.data	0xe6000	0x2c728	0x5000	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xe4578	0xc8
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0xe44d0	0x48
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	ord	function_name
KERNEL32.DLL		GetFileSize
KERNEL32.DLL		CreateFileA
KERNEL32.DLL		DeleteCriticalSection
KERNEL32.DLL		InterlockedIncrement
KERNEL32.DLL		InitializeCriticalSection
KERNEL32.DLL		GetSystemTime
KERNEL32.DLL		GlobalMemoryStatus
KERNEL32.DLL		GetTickCount
KERNEL32.DLL		SetEvent
KERNEL32.DLL		GetCurrentThreadId
KERNEL32.DLL		GetCurrentProcessId
KERNEL32.DLL		CreateEventA
KERNEL32.DLL		ResetEvent
KERNEL32.DLL		MultiByteToWideChar
KERNEL32.DLL		WideCharToMultiByte
KERNEL32.DLL		GetLastError
KERNEL32.DLL		DeleteFileA
KERNEL32.DLL		CopyFileA
KERNEL32.DLL		GetLocalTime
KERNEL32.DLL		CreateDirectoryA
KERNEL32.DLL		ExpandEnvironmentStringsA
KERNEL32.DLL		Sleep
KERNEL32.DLL		SetErrorMode
KERNEL32.DLL		CreateMutexA
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetVersion
KERNEL32.DLL		GetFileType
KERNEL32.DLL		CreateFileMappingA
KERNEL32.DLL		QueryPerformanceCounter
KERNEL32.DLL		FreeLibrary
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetVersionExA
KERNEL32.DLL		FlushConsoleInputBuffer
KERNEL32.DLL		SleepEx
KERNEL32.DLL		SetLastError
KERNEL32.DLL		GetSystemDirectoryA
KERNEL32.DLL		ReadFile
KERNEL32.DLL		PeekNamedPipe
KERNEL32.DLL		FormatMessageA
KERNEL32.DLL		GetCurrentDirectoryA
KERNEL32.DLL		GetFullPathNameA
KERNEL32.DLL		GetSystemInfo
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		MapViewOfFile
KERNEL32.DLL		UnmapViewOfFile
KERNEL32.DLL		EnterCriticalSection
KERNEL32.DLL		LeaveCriticalSection
KERNEL32.DLL		GetTempFileNameA
KERNEL32.DLL		CreateProcessA
KERNEL32.DLL		OutputDebugStringA
KERNEL32.DLL		GetModuleFileNameA
KERNEL32.DLL		SetConsoleCtrlHandler
KERNEL32.DLL		WaitForMultipleObjects
KERNEL32.DLL		TerminateThread
KERNEL32.DLL		GetACP
KERNEL32.DLL		GetOEMCP
KERNEL32.DLL		GetCPInfo
KERNEL32.DLL		GetStringTypeA
KERNEL32.DLL		GetStringTypeW
KERNEL32.DLL		GetLocaleInfoA
KERNEL32.DLL		CloseHandle
KERNEL32.DLL		WaitForSingleObject
KERNEL32.DLL		GetStdHandle
KERNEL32.DLL		CreateThread
KERNEL32.DLL		CompareStringA
KERNEL32.DLL		LCMapStringW
KERNEL32.DLL		LCMapStringA
KERNEL32.DLL		VirtualQuery
KERNEL32.DLL		InterlockedExchange
KERNEL32.DLL		SetStdHandle
KERNEL32.DLL		FlushFileBuffers
KERNEL32.DLL		GetTimeZoneInformation
KERNEL32.DLL		GetStartupInfoA
KERNEL32.DLL		SetHandleCount
KERNEL32.DLL		GetEnvironmentStringsW
KERNEL32.DLL		FreeEnvironmentStringsW
KERNEL32.DLL		CompareStringW
KERNEL32.DLL		SetEnvironmentVariableA
KERNEL32.DLL		HeapSize
KERNEL32.DLL		CreateFileW
KERNEL32.DLL		SetEndOfFile
KERNEL32.DLL		GetTempPathA
KERNEL32.DLL		GetEnvironmentStrings
KERNEL32.DLL		FreeEnvironmentStringsA
KERNEL32.DLL		UnhandledExceptionFilter
KERNEL32.DLL		TlsGetValue
KERNEL32.DLL		TlsSetValue
KERNEL32.DLL		TlsFree
KERNEL32.DLL		TlsAlloc
KERNEL32.DLL		WriteFile
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		HeapCreate
KERNEL32.DLL		HeapDestroy
KERNEL32.DLL		FindFirstFileA
KERNEL32.DLL		GetDriveTypeA
KERNEL32.DLL		HeapFree
KERNEL32.DLL		HeapAlloc
KERNEL32.DLL		HeapReAlloc
KERNEL32.DLL		GetSystemTimeAsFileTime
KERNEL32.DLL		GetCommandLineA
KERNEL32.DLL		TerminateProcess
KERNEL32.DLL		GetCurrentProcess
KERNEL32.DLL		RtlUnwind
KERNEL32.DLL		ReadConsoleInputA
KERNEL32.DLL		SetConsoleMode
KERNEL32.DLL		GetConsoleMode
KERNEL32.DLL		ExitThread
KERNEL32.DLL		ResumeThread
KERNEL32.DLL		FileTimeToSystemTime
KERNEL32.DLL		FileTimeToLocalFileTime
KERNEL32.DLL		GetFileInformationByHandle
KERNEL32.DLL		SetFilePointer
KERNEL32.DLL		FindClose
ADVAPI32.dll		ReportEventA
ADVAPI32.dll		RegisterServiceCtrlHandlerExA
ADVAPI32.dll		CryptDecrypt
ADVAPI32.dll		CryptCreateHash
ADVAPI32.dll		CryptSetHashParam
ADVAPI32.dll		CryptDestroyHash
ADVAPI32.dll		CryptSignHashA
ADVAPI32.dll		CryptExportKey
ADVAPI32.dll		CryptGetUserKey
ADVAPI32.dll		CryptAcquireContextA
ADVAPI32.dll		CryptGetProvParam
ADVAPI32.dll		CryptDestroyKey
ADVAPI32.dll		CryptReleaseContext
ADVAPI32.dll		CryptEnumProvidersA
ADVAPI32.dll		StartServiceCtrlDispatcherA
ADVAPI32.dll		StartServiceA
ADVAPI32.dll		CloseServiceHandle
ADVAPI32.dll		CreateServiceA
ADVAPI32.dll		SetServiceStatus
ADVAPI32.dll		OpenSCManagerA
ADVAPI32.dll		RegisterEventSourceA
ADVAPI32.dll		DeregisterEventSource
ADVAPI32.dll		RegOpenKeyA
ADVAPI32.dll		RegEnumKeyA
ADVAPI32.dll		RegQueryValueExA
ADVAPI32.dll		RegCloseKey
ADVAPI32.dll		OpenServiceA
ADVAPI32.dll		ControlService
ADVAPI32.dll		DeleteService
CRYPT32.dll		CertOpenStore
CRYPT32.dll		CertFindCertificateInStore
CRYPT32.dll		CertEnumCertificatesInStore
CRYPT32.dll		CertCloseStore
CRYPT32.dll		CertDuplicateCertificateContext
CRYPT32.dll		CertGetCertificateContextProperty
CRYPT32.dll		CertFreeCertificateContext
ICMP.dll		IcmpCreateFile
ICMP.dll		IcmpCloseHandle
ICMP.dll		IcmpSendEcho
MPR.dll		WNetCancelConnectionA
MPR.dll		WNetAddConnection2A
USER32.dll		GetDesktopWindow
USER32.dll		GetProcessWindowStation
USER32.dll		GetUserObjectInformationW
USER32.dll		GetCursorPos
USER32.dll		MessageBoxA
WINMM.dll		waveInOpen
WINMM.dll		waveInReset
WINMM.dll		waveInClose
WINMM.dll		waveInStart
WINMM.dll		waveInPrepareHeader
WINMM.dll		waveInAddBuffer
WINMM.dll		waveInUnprepareHeader
WLDAP32.dll	41
WLDAP32.dll	27
WLDAP32.dll	301
WLDAP32.dll	33
WLDAP32.dll	35
WLDAP32.dll	200
WLDAP32.dll	79
WLDAP32.dll	32
WLDAP32.dll	30
WLDAP32.dll	26
WLDAP32.dll	50
WLDAP32.dll	60
WLDAP32.dll	143
WLDAP32.dll	211
WLDAP32.dll	22
WLDAP32.dll	46
WS2_32.dll	6
WS2_32.dll	7
WS2_32.dll	5
WS2_32.dll	21
WS2_32.dll	12
WS2_32.dll	55
WS2_32.dll	51
WS2_32.dll	56
WS2_32.dll	20
WS2_32.dll	17
WS2_32.dll	112
WS2_32.dll	116
WS2_32.dll	115
WS2_32.dll	2
WS2_32.dll	13
WS2_32.dll	1
WS2_32.dll	15
WS2_32.dll	23
WS2_32.dll	10
WS2_32.dll	8
WS2_32.dll	9
WS2_32.dll	4
WS2_32.dll	111
WS2_32.dll	151
WS2_32.dll	3
WS2_32.dll	16
WS2_32.dll	18
WS2_32.dll	19
WS2_32.dll	11
WS2_32.dll	57
WS2_32.dll	52
WS2_32.dll	14

show previews

offset	size	type	comment
0	962560	EXE	10/17/2010 06:12:02	#
15c1	15	HTM		#
eb000	56832	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 1019392 bytes (996 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

ipz2.unpacked.exe__

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory