filenameProject2.exe
size9728 (0x2600)
md5feb7193494bc548c15bcacf9efa6071e
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x51640d6f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion5.0
SizeOfCode0x1000
SizeOfInitializedData0x1000
SizeOfUninitializedData0
AddressOfEntryPoint0x1018
BaseOfCode0x1000
BaseOfData0x2000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x9000
SizeOfHeaders0x600
CheckSum0
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland C++ for Win32 1999

Sections

namevavsizeraw sizeflags
.text0x10000x10000xa00R-X CODE
.data0x20000x10000x400RW- IDATA
.tls0x30000x10000x200RW- IDATA
.rdata0x40000x10000x200R-- IDATA SHARED
.idata0x50000x10000x400R-- IDATA
.edata0x60000x10000x200R-- IDATA
.rsrc0x70000x10000x600R-- IDATA
.reloc0x80000x10000x200R-- IDATA SHARED

Data Directory

typevasize
EXPORT0x60000x6c
IMPORT0x50000x3ed
RESOURCE0x70000x600
EXCEPTION00
SECURITY00
BASERELOC0x80000xec
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x40000x18
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4030000x40309c0x40208b0x40401000
typenamesizecp
ICON#17440
RCDATADVCLAL160
GROUP_ICONMAINICON200
module_namehintordfunction_name
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLGetProcessHeap
KERNEL32.DLLHeapAlloc
KERNEL32.DLLHeapFree
CC3260.DLLoperator delete(void *)

@$bdele$qpv

CC3260.DLL_CatchCleanup()

@_CatchCleanup$qv

CC3260.DLL_InitTermAndUnexPtrs()

@_InitTermAndUnexPtrs$qv

CC3260.DLL_ReThrowException(unsigned int, unsigned char *)

@_ReThrowException$quipuc

CC3260.DLL___CRTL_MEM_UseBorMM
CC3260.DLL___CRTL_TLS_Alloc
CC3260.DLL___CRTL_TLS_ExitThread
CC3260.DLL___CRTL_TLS_Free
CC3260.DLL___CRTL_TLS_GetValue
CC3260.DLL___CRTL_TLS_InitThread
CC3260.DLL___CRTL_TLS_SetValue
CC3260.DLL____ExceptionHandler
CC3260.DLL__argc
CC3260.DLL__argv
CC3260.DLL__argv_default_expand
CC3260.DLL__exitargv
CC3260.DLL__handle_exitargv
CC3260.DLL__handle_setargv
CC3260.DLL__handle_wexitargv
CC3260.DLL__handle_wsetargv
CC3260.DLL__matherr
CC3260.DLL__matherrl
CC3260.DLL__setargv
CC3260.DLL__startup
CC3260.DLL__wargv_default_expand
CC3260.DLL_memcpy
CC3260.DLL_strlen
STLP45.DLL1091
STLP45.DLL179
ordentry_vafunction_name
10x1071__GetExceptDLLinfo
20x2098___CPPdebugHook
module_nameProject2.exe
flags0
timestamp0
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x6030
Functions(2)0x6028
NameOrdinals(2)0x6038
offsetsizetypecomment
09728EXE04/09/2013 12:45:35#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK