filenameadb.exe
size815104 (0xc7000)
md5f711b725223a27edb78a4f786e91c1f5
typePE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x51914362
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion2.56
SizeOfCode0x99c00
SizeOfInitializedData0x2d000
SizeOfUninitializedData0x15400
AddressOfEntryPoint0x1130
BaseOfCode0x1000
BaseOfData0x9b000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xe0000
SizeOfHeaders0x400
CheckSum0xcc6fb
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Dev-C++ v5

Sections

namevavsizeraw sizeflags
.text0x10000x99b5c0x99c00R-X CODE
.data0x9b0000x13e40x1400RW- IDATA
.rdata0x9d0000x2a4600x2a600R-- IDATA
.bss0xc80000x152e80RW- UDATA
.idata0xde0000x151c0x1600RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xde0000x151c
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
ADVAPI32.DLL136DeregisterEventSource
ADVAPI32.DLL439RegisterEventSourceA
ADVAPI32.DLL449ReportEventA
GDI32.dll12BitBlt
GDI32.dll33CreateCompatibleBitmap
GDI32.dll34CreateCompatibleDC
GDI32.dll35CreateDCA
GDI32.dll70DeleteDC
GDI32.dll73DeleteObject
GDI32.dll119GetBitmapBits
GDI32.dll146GetDeviceCaps
GDI32.dll183GetObjectA
GDI32.dll279SelectObject
KERNEL32.dll38CloseHandle
KERNEL32.dll64CreateEventA
KERNEL32.dll68CreateFileA
KERNEL32.dll84CreatePipe
KERNEL32.dll85CreateProcessA
KERNEL32.dll107DeleteCriticalSection
KERNEL32.dll126EnterCriticalSection
KERNEL32.dll156ExitProcess
KERNEL32.dll214FreeLibrary
KERNEL32.dll284GetCurrentProcessId
KERNEL32.dll286GetCurrentThreadId
KERNEL32.dll308GetFileAttributesA
KERNEL32.dll313GetFileSize
KERNEL32.dll316GetFileType
KERNEL32.dll325GetLastError
KERNEL32.dll335GetModuleFileNameA
KERNEL32.dll337GetModuleHandleA
KERNEL32.dll364GetProcAddress
KERNEL32.dll388GetStdHandle
KERNEL32.dll403GetSystemTimeAsFileTime
KERNEL32.dll414GetTempPathA
KERNEL32.dll423GetTickCount
KERNEL32.dll432GetVersion
KERNEL32.dll433GetVersionExA
KERNEL32.dll460GlobalMemoryStatus
KERNEL32.dll492InitializeCriticalSection
KERNEL32.dll495InterlockedCompareExchange
KERNEL32.dll497InterlockedExchange
KERNEL32.dll512IsDBCSLeadByteEx
KERNEL32.dll523LeaveCriticalSection
KERNEL32.dll524LoadLibraryA
KERNEL32.dll560MultiByteToWideChar
KERNEL32.dll597QueryPerformanceCounter
KERNEL32.dll616ReadFile
KERNEL32.dll638ResetEvent
KERNEL32.dll664SetConsoleCtrlHandler
KERNEL32.dll698SetEvent
KERNEL32.dll703SetFilePointer
KERNEL32.dll710SetHandleInformation
KERNEL32.dll713SetLastError
KERNEL32.dll739SetUnhandledExceptionFilter
KERNEL32.dll751Sleep
KERNEL32.dll808WaitForMultipleObjects
KERNEL32.dll810WaitForSingleObject
KERNEL32.dll814WideCharToMultiByte
KERNEL32.dll827WriteFile
msvcrt.dll_access
msvcrt.dll4_chmod
msvcrt.dll37_getcwd
msvcrt.dll38_getpid
msvcrt.dll64_read
msvcrt.dll78_stat
msvcrt.dll80_strdup
msvcrt.dll81_stricmp
msvcrt.dll95_umask
msvcrt.dll97_unlink
msvcrt.dll55__getmainargs
msvcrt.dll61__lc_codepage
msvcrt.dll65__mb_cur_max
msvcrt.dll77__p__environ
msvcrt.dll79__p__fmode
msvcrt.dll99__set_app_type
msvcrt.dll142_beginthread
msvcrt.dll143_beginthreadex
msvcrt.dll147_cexit
msvcrt.dll179_endthreadex
msvcrt.dll182_errno
msvcrt.dll193_exit
msvcrt.dll205_findclose
msvcrt.dll206_findfirst
msvcrt.dll209_findnext
msvcrt.dll228_fullpath
msvcrt.dll235_getch
msvcrt.dll266_iob
msvcrt.dll268_isctype
msvcrt.dll378_mkdir
msvcrt.dll383_onexit
msvcrt.dll392_pctype
msvcrt.dll426_setmode
msvcrt.dll451_stricmp
msvcrt.dll455_strnicmp
msvcrt.dll490_vsnprintf
msvcrt.dll531_wfopen
msvcrt.dll583abort
msvcrt.dll590atexit
msvcrt.dll592atoi
msvcrt.dll595calloc
msvcrt.dll604exit
msvcrt.dll607fclose
msvcrt.dll610fflush
msvcrt.dll613fgets
msvcrt.dll618fopen
msvcrt.dll619fprintf
msvcrt.dll620fputc
msvcrt.dll621fputs
msvcrt.dll624fread
msvcrt.dll625free
msvcrt.dll629fseek
msvcrt.dll631ftell
msvcrt.dll633fwrite
msvcrt.dll637getenv
msvcrt.dll641gmtime
msvcrt.dll671localeconv
msvcrt.dll672localtime
msvcrt.dll676malloc
msvcrt.dll680memchr
msvcrt.dll682memcpy
msvcrt.dll683memmove
msvcrt.dll684memset
msvcrt.dll687perror
msvcrt.dll695qsort
msvcrt.dll696raise
msvcrt.dll698realloc
msvcrt.dll705setvbuf
msvcrt.dll706signal
msvcrt.dll712sscanf
msvcrt.dll713strcat
msvcrt.dll714strchr
msvcrt.dll715strcmp
msvcrt.dll717strcpy
msvcrt.dll719strerror
msvcrt.dll721strlen
msvcrt.dll722strncat
msvcrt.dll723strncmp
msvcrt.dll724strncpy
msvcrt.dll725strpbrk
msvcrt.dll726strrchr
msvcrt.dll731strtol
msvcrt.dll732strtoul
msvcrt.dll739time
msvcrt.dll742tolower
msvcrt.dll748vfprintf
msvcrt.dll761wcslen
msvcrt.dll768wcsstr
SHELL32.DLL88SHGetFolderPathA
USER32.dll249GetDesktopWindow
USER32.dll306GetProcessWindowStation
USER32.dll334GetUserObjectInformationW
USER32.dll431MessageBoxA
WS2_32.DLL14WSACleanup
WS2_32.DLL17WSACreateEvent
WS2_32.DLL22WSAEnumNetworkEvents
WS2_32.DLL25WSAEventSelect
WS2_32.DLL26WSAGetLastError
WS2_32.DLL64WSAStartup
WS2_32.DLL77accept
WS2_32.DLL78bind
WS2_32.DLL79closesocket
WS2_32.DLL80connect
WS2_32.DLL84gethostbyname
WS2_32.DLL94htonl
WS2_32.DLL95htons
WS2_32.DLL99listen
WS2_32.DLL102recv
WS2_32.DLL105send
WS2_32.DLL107setsockopt
WS2_32.DLL108shutdown
WS2_32.DLL109socket
AdbWinApi.dllAdbCloseHandle
AdbWinApi.dll1AdbCreateInterfaceByName
AdbWinApi.dll2AdbEnumInterfaces
AdbWinApi.dll3AdbGetEndpointInformation
AdbWinApi.dll4AdbGetInterfaceName
AdbWinApi.dll5AdbGetSerialNumber
AdbWinApi.dll6AdbGetUsbDeviceDescriptor
AdbWinApi.dll7AdbGetUsbInterfaceDescriptor
AdbWinApi.dll8AdbNextInterface
AdbWinApi.dll9AdbOpenDefaultBulkReadEndpoint
AdbWinApi.dll10AdbOpenDefaultBulkWriteEndpoint
AdbWinApi.dll11AdbReadEndpointSync
AdbWinApi.dll12AdbWriteEndpointSync
offsetsizetypecomment
0815104EXE05/13/2013 19:47:46#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK