filenamecstudio.exe
size611328 (0x95400)
md5fba8578d82d267510d2b60e43b18e9fc
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
221204262
223204261
2242042619
225204269
2036550115
10208
2252061743
219206171
15101
222206171

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x52a19f3d
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x48000
SizeOfInitializedData0x12c8400
SizeOfUninitializedData0
AddressOfEntryPoint0x23da7
BaseOfCode0x1000
BaseOfData0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x1336000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.textbss0x10000x2102d0RWX CODE UDATA
.text0x230000x47fe60x48000R-X CODE
.rdata0x6b0000x64900x6600R-- IDATA
.data0x720000x127e4b00x3200RW- IDATA
.idata0x12f10000x1b760x1c00R-- IDATA
.rsrc0x12f30000x314d00x31600R-- IDATA
.reloc0x13250000x104a00x10600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x12f15380xb4
RESOURCE0x12f30000x314d0
EXCEPTION00
SECURITY00
BASERELOC0x13250000x3004
DEBUG0x6b9a00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x6ef580x40
Bound_IAT00
IAT0x12f10000x538
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAPDEVELOPER51600
BITMAPTOOLBAR466960
ICON#1297620
ICON#2676240
ICON#396400
ICON#442640
ICON#524400
ICON#611280
GROUP_ICONAPPLICATION900
MANIFEST#13810
module_namehintordfunction_name
KERNEL32.dll214CreateProcessA
KERNEL32.dll248DebugActiveProcess
KERNEL32.dll1429WaitForDebugEvent
KERNEL32.dll251DebugBreakProcess
KERNEL32.dll613GetModuleHandleW
KERNEL32.dll609GetModuleFileNameW
KERNEL32.dll412FreeLibrary
KERNEL32.dll1424VirtualQuery
KERNEL32.dll512GetCurrentDirectoryA
KERNEL32.dll185CreateFileA
KERNEL32.dll262DeleteFileA
KERNEL32.dll358FindClose
KERNEL32.dll362FindFirstFileA
KERNEL32.dll379FindNextFileA
KERNEL32.dll569GetFileSize
KERNEL32.dll1087ReadFile
KERNEL32.dll1258SetFilePointer
KERNEL32.dll1486WriteFile
KERNEL32.dll126CloseHandle
KERNEL32.dll591GetLocalTime
KERNEL32.dll752GetTickCount
KERNEL32.dll974MultiByteToWideChar
KERNEL32.dll1466WideCharToMultiByte
KERNEL32.dll610GetModuleHandleA
KERNEL32.dll973MulDiv
KERNEL32.dll789GlobalAlloc
KERNEL32.dll804GlobalSize
KERNEL32.dll800GlobalLock
KERNEL32.dll807GlobalUnlock
KERNEL32.dll287EncodePointer
KERNEL32.dll253DecodePointer
KERNEL32.dll869IsDebuggerPresent
KERNEL32.dll874IsProcessorFeaturePresent
KERNEL32.dll1071RaiseException
KERNEL32.dll590GetLastError
KERNEL32.dll667GetProcAddress
KERNEL32.dll932LoadLibraryExW
KERNEL32.dll1053QueryPerformanceCounter
KERNEL32.dll520GetCurrentProcessId
KERNEL32.dll524GetCurrentThreadId
KERNEL32.dll724GetSystemTimeAsFileTime
KERNEL32.dll813HeapAlloc
KERNEL32.dll817HeapFree
KERNEL32.dll672GetProcessHeap
KERNEL32.dll149ContinueDebugEvent
MSVCR120D.dll366_CrtSetCheckCount
MSVCR120D.dll114void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR120D.dll1533_wsplitpath_s
MSVCR120D.dll1499_wmakepath_s
MSVCR120D.dll1975wcscpy_s
MSVCR120D.dll625_controlfp_s
MSVCR120D.dll841_invoke_watson
MSVCR120D.dll458__crtSetUnhandledExceptionFilter
MSVCR120D.dll311void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120D.dll683_except_handler4_common
MSVCR120D.dll621_commode
MSVCR120D.dll406__CxxFrameHandler3
MSVCR120D.dll724_fmode
MSVCR120D.dll562_acmdln
MSVCR120D.dll835_initterm
MSVCR120D.dll836_initterm_e
MSVCR120D.dll536__setusermatherr
MSVCR120D.dll622_configthreadlocale
MSVCR120D.dll870_ismbblead
MSVCR120D.dll603_cexit
MSVCR120D.dll112void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR120D.dll1677exit
MSVCR120D.dll692_exit
MSVCR120D.dll534__set_app_type
MSVCR120D.dll471__getmainargs
MSVCR120D.dll579_amsg_exit
MSVCR120D.dll446__crtGetShowWindowMode
MSVCR120D.dll397_XcptFilter
MSVCR120D.dll460__crtTerminateProcess
MSVCR120D.dll461__crtUnhandledException
MSVCR120D.dll641_crt_debugger_hook
MSVCR120D.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120D.dll1137_onexit
MSVCR120D.dll463__dllonexit
MSVCR120D.dll602_calloc_dbg
MSVCR120D.dll349_CrtDbgReportW
MSVCR120D.dll1341_unlock
MSVCR120D.dll969_lock
MSVCR120D.dll343_CRT_RTC_INITW
MSVCR120D.dll1774labs
MSVCR120D.dll1564abs
MSVCR120D.dll1152_purecall
MSIMG32.dll2GradientFill
MSIMG32.dll3TransparentBlt
MSIMG32.dllAlphaBlend
USER32.dll855UpdateWindow
USER32.dll14BeginPaint
USER32.dll233EndPaint
USER32.dll495InvalidateRect
USER32.dll787SetWindowTextA
USER32.dll463GetWindowTextA
USER32.dll293GetClientRect
USER32.dll459GetWindowRect
USER32.dll3AdjustWindowRectEx
USER32.dll713SetCursor
USER32.dll307GetCursorPos
USER32.dll73ClientToScreen
USER32.dll685ScreenToClient
USER32.dll423GetSysColor
USER32.dll452GetWindowLongA
USER32.dll780SetWindowLongA
USER32.dll311GetDesktopWindow
USER32.dll255EnumWindows
USER32.dll542LoadCursorA
USER32.dll546LoadIconA
USER32.dll323GetForegroundWindow
USER32.dll582MessageBoxA
USER32.dll740SetMenuItemInfoA
USER32.dll361GetMenuItemInfoA
USER32.dll489InsertMenuItemA
USER32.dll825TrackPopupMenu
USER32.dll9AppendMenuA
USER32.dll359GetMenuItemCount
USER32.dll171DestroyMenu
USER32.dll110CreatePopupMenu
USER32.dll109CreateMenu
USER32.dll353GetMenu
USER32.dll426GetSystemMetrics
USER32.dll228EnableWindow
USER32.dll537KillTimer
USER32.dll769SetTimer
USER32.dll676ReleaseCapture
USER32.dll704SetCapture
USER32.dll281GetCapture
USER32.dll573MapVirtualKeyA
USER32.dll337GetKeyNameTextA
USER32.dll339GetKeyState
USER32.dll271GetActiveWindow
USER32.dll724SetFocus
USER32.dll16BringWindowToTop
USER32.dll783SetWindowPos
USER32.dll800ShowWindow
USER32.dll173DestroyWindow
USER32.dll112CreateWindowExA
USER32.dll285GetClassInfoExA
USER32.dll648RegisterClassExA
USER32.dll160DefWindowProcA
USER32.dll623PostMessageA
USER32.dll695SendMessageA
USER32.dll180DispatchMessageA
USER32.dll831TranslateMessage
USER32.dll824TrackMouseEvent
USER32.dll507IsClipboardFormatAvailable
USER32.dll223EmptyClipboard
USER32.dll296GetClipboardData
USER32.dll710SetClipboardData
USER32.dll75CloseClipboard
USER32.dll606OpenClipboard
USER32.dll548LoadImageA
USER32.dll202DrawFocusRect
USER32.dll211DrawTextA
USER32.dll204DrawFrameControl
USER32.dll498IsCharAlphaA
USER32.dll57CharUpperA
USER32.dll367GetMessageA
GDI32.dll48CreateCompatibleBitmap
GDI32.dll49CreateCompatibleDC
GDI32.dll61CreateFontA
GDI32.dll80CreateRectRgn
GDI32.dll86CreateSolidBrush
GDI32.dll267DeleteDC
GDI32.dll270DeleteObject
GDI32.dll277Ellipse
GDI32.dll480GetCharWidth32A
GDI32.dll475GetCharABCWidthsA
GDI32.dll490GetClipBox
GDI32.dll491GetClipRgn
GDI32.dll502GetDeviceCaps
GDI32.dll559GetPixel
GDI32.dll568GetStockObject
GDI32.dll609LineTo
GDI32.dll635PatBlt
GDI32.dll660Rectangle
GDI32.dll671RoundRect
GDI32.dll722SelectClipRgn
GDI32.dll724SelectObject
GDI32.dll738SetDCBrushColor
GDI32.dll739SetDCPenColor
GDI32.dll732SetBkMode
GDI32.dll760SetPixel
GDI32.dll771SetTextColor
GDI32.dll29CloseEnhMetaFile
GDI32.dll59CreateEnhMetaFileA
GDI32.dll268DeleteEnhMetaFile
GDI32.dll638PlayEnhMetaFile
GDI32.dll592GetTextMetricsA
GDI32.dll54CreateDIBSection
GDI32.dll550GetObjectA
GDI32.dll623MoveToEx
GDI32.dll789TextOutA
GDI32.dll652Polyline
GDI32.dll62CreateFontIndirectA
GDI32.dll19BitBlt
COMDLG32.dll2ChooseFontA
COMDLG32.dllChooseColorA
COMDLG32.dll13GetSaveFileNameA
COMDLG32.dll11GetOpenFileNameA
SHELL32.dll307ShellExecuteA
SHELL32.dll231SHGetPathFromIDListA
SHELL32.dll130SHBrowseForFolderA
ole32.dll123CoTaskMemFree
ole32.dll79CoInitialize
ole32.dll127CoUninitialize
offsetsizetypecomment
0611328EXE12/06/2013 09:56:13#
15c115HTM#
53c1029762PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER