filenamebindata.exe.x-msdownload
size372406 (0x5aeb6)
md5f79be354dbc18e60308f108fa3298633
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
1079384
103
1179453
1472531
1079991

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x559910f9
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x2200
SizeOfInitializedData0x1000
SizeOfUninitializedData0
AddressOfEntryPoint0x3040
BaseOfCode0x1000
BaseOfData0x4000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x5c000
SizeOfHeaders0x1000
CheckSum0x69300
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x21fa0x2200R-X CODE
.rdata0x40000xe210x1000R-- IDATA
.data0x50000x568a40x56a00RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x42dc0x12c
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x421c0x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x40000x21c
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
rpcrt4.dll17UuidFromStringW
rpcrt4.dll166RpcStringFreeW
user32.dll125GetDC
user32.dll8GetDlgItem
user32.dllReleaseDC
user32.dll17GetWindowTextW
user32.dll243DialogBoxParamA
user32.dll49DefWindowProcW
user32.dll231GetActiveWindow
user32.dll107InvalidateRect
user32.dll116SendMessageA
user32.dll141RegisterClassA
user32.dll210GetParent
user32.dll138CreateMenu
user32.dll230WinHelpA
user32.dll180SetForegroundWindow
user32.dll208CreateWindowExW
user32.dll227GetSysColorBrush
user32.dll97GetDlgItemTextW
user32.dll61SetWindowTextW
user32.dll249AppendMenuA
user32.dll238GetWindowLongA
user32.dll191ShowWindow
user32.dll42LoadStringW
user32.dll184UpdateWindow
user32.dll179MessageBoxW
user32.dll154GetClientRect
user32.dll10CreateWindowExA
user32.dll86EndPaint
user32.dll29IsWindow
user32.dll40GetWindowRect
user32.dll92GetSysColor
user32.dll143CharUpperA
user32.dll134DestroyMenu
user32.dll194GetDlgItemTextA
user32.dll233BeginPaint
user32.dll155TranslateMessage
olepro32.dll103OleTranslateColor
olepro32.dll151OleLoadPicture
msvcrt.dll109_wcsicmp
msvcrt.dll39free
msvcrt.dll131strlen
msvcrt.dll125__set_app_type
msvcrt.dll14memset
msvcrt.dll242wcscmp
msvcrt.dll96_initterm
msvcrt.dll136__p__commode
msvcrt.dllrealloc
msvcrt.dll104__CxxFrameHandler
msvcrt.dll51_adjust_fdiv
msvcrt.dll153strncpy
msvcrt.dll169__p__fmode
msvcrt.dll239malloc
msvcrt.dll85__setusermatherr
msvcrt.dll241wcschr
msvcrt.dll71wcslen
msvcrt.dll4_except_handler3
msvcrt.dll115_CxxThrowException
msvcrt.dll212_controlfp
msvcrt.dll78_cexit
msvcrt.dll223wcscat
msvcrt.dll48__initenv
msvcrt.dll36exit
msvcrt.dll77wcsncmp
msvcrt.dll247wcscpy
msvcrt.dll7__getmainargs
msvcrt.dll19_acmdln
msvcrt.dll98_XcptFilter
shlwapi.dll104PathAppendW
kernel32.dll34GetStartupInfoA
kernel32.dll91MultiByteToWideChar
kernel32.dll140VirtualAlloc
kernel32.dll194LocalAlloc
kernel32.dll52HeapFree
kernel32.dll100LocalReAlloc
kernel32.dll93lstrlenW
kernel32.dll163VirtualProtect
kernel32.dll179MulDiv
kernel32.dll10GetVersion
kernel32.dll176GetCurrentProcess
kernel32.dll57lstrcmpA
kernel32.dll207lstrcpynW
kernel32.dll73GetModuleHandleA
kernel32.dll6ReadFile
kernel32.dll133LocalFree
kernel32.dll214GlobalFree
kernel32.dll208lstrcpyW
kernel32.dll108ExitProcess
kernel32.dll185CloseHandle
kernel32.dll89GlobalAlloc
kernel32.dll21GetPrivateProfileIntW
kernel32.dll234GetACP
winmm.dll159sndPlaySoundW
winmm.dll6timeGetTime
comdlg32.dll168GetSaveFileNameA
comdlg32.dll11GetOpenFileNameA
comctl32.dll241InitCommonControls
comctl32.dll124ImageList_ReplaceIcon
shell32.dll208ExtractIconExA
shell32.dll39DragFinish
shell32.dll6DragQueryFileA
version.dll177VerQueryValueW
version.dll197GetFileVersionInfoA
version.dll173GetFileVersionInfoSizeA
version.dll104VerQueryValueA
version.dll176VerLanguageNameW
version.dll156GetFileVersionInfoW
version.dll71GetFileVersionInfoSizeW
ole32.dll184OleUninitialize
gdi32.dll221GetStockObject
gdi32.dll164SelectObject
gdi32.dll12SetBkColor
gdi32.dll101CreateCompatibleDC
gdi32.dll171DeleteObject
gdi32.dll206BitBlt
gdi32.dll165TextOutA
gdi32.dll90CreateSolidBrush
gdi32.dll162CreateCompatibleBitmap
advapi32.dll212RegOpenKeyExA
advapi32.dll20RegCloseKey
advapi32.dll143RegQueryValueExA
offsetsizetypecomment
0371712EXE07/05/2015 11:11:53#
15c115HTM#
5ac00694BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 372406 bytes (364 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK