Additional information
File size: 1689118 bytes
MD5...: ecf0a83b966077839b3d51c11b5e8038
SHA1..: 8f4d52045b1df9e957fa684fa75a401ff2453602
SHA256: 8d66f91616631ee0a53f78680d2a3a77e5497ada64285760693212547994dadf
ssdeep: 24576:MlYGYNdyCblAy1KP2dW90CuJxC7aCEiV8ZVouR9cH0Mar/K4KaPliPURt+
oeT:GcdtTdM0RJxCfCV20jxKwliPE8

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x2b28
timedatestamp.....: 0x4918019b (Mon Nov 10 09:40:43 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name        viradd    virsiz   rawdsiz  ntrpy  md5
.text       0x1000    0x2084    0x2200   6.09  264ca42964cf5a4c6c722f9fd8c7f6d7
.rdata      0x4000     0x912     0xa00   4.71  f6694c54551d514f286e97634b5a17c3
.data       0x5000    0x1668     0xc00   4.53  ba2a1ce375072877ba713a730643bd60
.rsrc       0x7000   0xe9eb8   0xea000   7.93  7bd70533e404c51fb767e9de4ce0e415

( 2 imports )  
> MSVCR90.dll: _controlfp_s, _invoke_watson, strncpy, _except_handler4_common, _decode_pointer, _onexit, _lock,
__dllonexit, _unlock, _terminate@@YAXXZ, __set_app_type, _encode_pointer, __p__fmode, __p__commode, _adjust_fdiv,
__setusermatherr, _configthreadlocale, _initterm_e, _initterm, __initenv, exit, _XcptFilter, _exit, _cexit,
__getmainargs, _amsg_exit, realloc, bsearch, qsort, memset, memcpy, setbuf, getenv, atoi, malloc, free, _snprintf,
 strncmp, strrchr, fprintf, __iob_func, _crt_debugger_hook, _stricmp, _strdup
> KERNEL32.dll: LocalFree, IsDebuggerPresent, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, 
GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, 
SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, InterlockedExchange, HeapAlloc, IsBadReadPtr, 
SetLastError, GetProcessHeap, HeapFree, VirtualFree, VirtualProtect, VirtualAlloc, FreeLibrary, GetModuleHandleA, 
OutputDebugStringA, GetFullPathNameA, LoadLibraryA, GetProcAddress, UnmapViewOfFile, CreateFileA, GetFileSize, 
CreateFileMappingA, CloseHandle, MapViewOfFile, FindResourceA, LoadResource, LockResource, GetModuleFileNameA, 
GetLastError, FormatMessageA

( 0 exports ) 

RDS...: NSRL Reference Data Set
-
packers (Kaspersky): UPX, UPX, UPX
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

trid..: Win64 Executable Generic (42.6%)
Win32 Executable MS Visual C++ (generic) (18.7%)
UPX compressed Win32 Executable (15.2%)
Win32 EXE Yoda's Crypter (13.2%)
Win32 Executable Generic (4.2%)
pdfid.: -
packers (F-Prot): UPX, ZIP