Architecture |
IMAGE_FILE_MACHINE_I386
|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
Compilation Date |
1992-Jun-19 22:22:17
|
Detected languages |
Dutch - Netherlands
English - United States
|
Comments |
This installation was built with Inno Setup.
|
CompanyName |
Michael Scrivo
|
FileDescription |
Outlook on the Desktop
|
FileVersion |
1.6.0
|
LegalCopyright |
©2006-2010 Michael Scrivo
|
ProductName |
Outlook on the Desktop
|
ProductVersion |
1.6.0
|
Info |
Matching compiler(s): |
Microsoft Visual C++ 8.0
|
Malicious |
The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
- LoadLibraryA
- GetProcAddress
Can access the registry:
- RegQueryValueExA
- RegOpenKeyExA
- RegCloseKey
Possibly launches other programs:
Memory manipulation functions often used by packers:
- VirtualAlloc
- VirtualProtect
Functions related to the privilege level:
- OpenProcessToken
- AdjustTokenPrivileges
Can shut the system down or lock the screen:
|
Suspicious |
The PE header may have been manually modified. |
The resource timestamps differ from the PE header:
|
Suspicious |
The file contains overlay data. |
505646 bytes of data starting at offset 0xd400.
The overlay data has an entropy of 7.99958 and is possibly compressed or encrypted.
Overlay data amounts for 90.3072% of the executable.
|
Safe |
VirusTotal score: 0/67 (Scanned on 2017-12-27 08:43:45) |
All the AVs think this file is safe.
|
MD5 |
32c40679f881ad108adc70a39b640378
|
SHA1 |
72c6f60375668e9d202b607607cbe0ae6314403b
|
SHA256 |
999a1193e475096e7a7e3146b9779dfef11f9bf7b24034edb49dc8e2a2c93a67
|
SHA3 |
52a07e2076e0ac81b21dbb3eede3bab077a008544d518f7c11a0190dc3ab26c5
|
SSDeep |
12288:f20t4PKWY2fHMYXC+Pw6xKqziroASOK0TopGpyvXGf75RbaEDf1qSVfx6ENuUFtM:f20GPw6AqWEOMGpgXC75ld1qSVpcqG
|
Imports Hash |
4fb639b17a439bf0efa713bd4c6e715b
|
e_magic |
MZ
|
e_cblp |
0x50
|
e_cp |
0x2
|
e_crlc |
0
|
e_cparhdr |
0x4
|
e_minalloc |
0xf
|
e_maxalloc |
0xffff
|
e_ss |
0
|
e_sp |
0xb8
|
e_csum |
0
|
e_ip |
0
|
e_cs |
0
|
e_ovno |
0x1a
|
e_oemid |
0
|
e_oeminfo |
0
|
e_lfanew |
0x100
|
Signature |
PE
|
Machine |
IMAGE_FILE_MACHINE_I386
|
NumberofSections |
8
|
TimeDateStamp |
1992-Jun-19 22:22:17
|
PointerToSymbolTable |
0
|
NumberOfSymbols |
0
|
SizeOfOptionalHeader |
0xe0
|
Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
|
Magic |
PE32
|
LinkerVersion |
2.0
|
SizeOfCode |
0x9400
|
SizeOfInitializedData |
0x4600
|
SizeOfUninitializedData |
0
|
AddressOfEntryPoint |
0x00009B60 (Section: CODE)
|
BaseOfCode |
0x1000
|
BaseOfData |
0xb000
|
ImageBase |
0x400000
|
SectionAlignment |
0x1000
|
FileAlignment |
0x200
|
OperatingSystemVersion |
1.0
|
ImageVersion |
6.0
|
SubsystemVersion |
4.0
|
Win32VersionValue |
0
|
SizeOfImage |
0x14000
|
SizeOfHeaders |
0x400
|
Checksum |
0
|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
SizeofStackReserve |
0x100000
|
SizeofStackCommit |
0x4000
|
SizeofHeapReserve |
0x100000
|
SizeofHeapCommit |
0x1000
|
LoaderFlags |
0
|
NumberOfRvaAndSizes |
16
|
MD5 |
ef0e400de834c254ef1e0f3b1b6acbb1
|
SHA1 |
c071fd6fa474755b70f3fdb692e64d2eba14c77f
|
SHA256 |
c429ce2d155f8a2c548fb55f2895a3fe876b60d61874eed2eeb7464319d9f205
|
SHA3 |
7347699d5ebc456023bbc4773791f858d019b27b4dc2091f2efb20a27115b651
|
VirtualSize |
0x9280
|
VirtualAddress |
0x1000
|
SizeOfRawData |
0x9400
|
PointerToRawData |
0x400
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
Entropy |
6.53893
|
MD5 |
0aa31f826dbc484669c6ebb85ff30132
|
SHA1 |
ca9f4e6a9c05a7a71c0f9add5bbe17549fe3aea9
|
SHA256 |
e1871ba8495a60171e73859d74cd91488c8e7c3118db3e4341cc19b20e87d702
|
SHA3 |
cd2e1bffb56213492f7b55b1541d45215274c43840b0ce871c815ca79a49fea1
|
VirtualSize |
0x24c
|
VirtualAddress |
0xb000
|
SizeOfRawData |
0x400
|
PointerToRawData |
0x9800
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
Entropy |
2.73987
|
MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
VirtualSize |
0xe4c
|
VirtualAddress |
0xc000
|
SizeOfRawData |
0
|
PointerToRawData |
0x9c00
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
MD5 |
bb5485bf968b970e5ea81292af2acdba
|
SHA1 |
40a39d9e8c8cecd5356ab96745d82d2ebfe17cfb
|
SHA256 |
d9ea6e80cc1edfdffa8d534a8c61448b19b74d683845b94ad6d9a543e5ceb8cf
|
SHA3 |
09274dc071547ce3dc33528de99c9ad5a9eb119600e5a61b3127f74cde6dcfbf
|
VirtualSize |
0x950
|
VirtualAddress |
0xd000
|
SizeOfRawData |
0xa00
|
PointerToRawData |
0x9c00
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
Entropy |
4.43073
|
MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
VirtualSize |
0x8
|
VirtualAddress |
0xe000
|
SizeOfRawData |
0
|
PointerToRawData |
0xa600
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
MD5 |
9ba824905bf9c7922b6fc87a38b74366
|
SHA1 |
f43ee83e6afa1c343ff6db68e13efde43471cbb6
|
SHA256 |
ad44157821ba24c07dd44f66940dd75adee9d6919a0577c5a75aa502637dddaa
|
SHA3 |
370eba5499bce03a18d462f5b9e6ee4598126f2a2243cc5fa1590c7c7245c5d7
|
VirtualSize |
0x18
|
VirtualAddress |
0xf000
|
SizeOfRawData |
0x200
|
PointerToRawData |
0xa600
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
|
Entropy |
0.204488
|
MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
VirtualSize |
0x8b0
|
VirtualAddress |
0x10000
|
SizeOfRawData |
0
|
PointerToRawData |
0
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
|
MD5 |
bcda515e7ae89dfd313a569c2a2ef2db
|
SHA1 |
b0fba20c4c8db50070d2fdb899638eaf7cbb039c
|
SHA256 |
7866a37c5be8979bdaa9ba0e35624e4ef15ac5aa8c53e8a379ee73ca282f23bd
|
SHA3 |
856c8d4231fe8d5a8689e9fa5ce954c75b16a708ced4317f514f1e6dc3a412ad
|
VirtualSize |
0x2c00
|
VirtualAddress |
0x11000
|
SizeOfRawData |
0x2c00
|
PointerToRawData |
0xa800
|
PointerToRelocations |
0
|
PointerToLineNumbers |
0
|
NumberOfLineNumbers |
0
|
NumberOfRelocations |
0
|
Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
|
Entropy |
4.4792
|
kernel32.dll |
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
WideCharToMultiByte
TlsSetValue
TlsGetValue
MultiByteToWideChar
GetModuleHandleA
GetLastError
GetCommandLineA
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
ExitProcess
CreateFileA
CloseHandle
|
user32.dll |
MessageBoxA
|
oleaut32.dll |
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysAllocStringLen
|
advapi32.dll |
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
|
kernel32.dll (#2) |
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
WideCharToMultiByte
TlsSetValue
TlsGetValue
MultiByteToWideChar
GetModuleHandleA
GetLastError
GetCommandLineA
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
ExitProcess
CreateFileA
CloseHandle
|
user32.dll (#2) |
MessageBoxA
|
comctl32.dll |
InitCommonControls
|
advapi32.dll (#2) |
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
|
Type |
RT_ICON
|
Language |
Dutch - Netherlands
|
Codepage |
UNKNOWN
|
Size |
0x128
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.25755
|
MD5 |
c5af786bfd9fd1c53c8fe9f0bd9ce38b
|
SHA1 |
4f6f7d9973b47063aa5353225a2bc5a76aa2a96a
|
SHA256 |
f59f62e7843b3ff992cf769a3c608acd4a85a38b3b302cda8507b75163659d7b
|
SHA3 |
e178a71f02edb18e31bf550d484b2cba8d865e1e9796065addb07855ce5627f9
|
Type |
RT_ICON
|
Language |
Dutch - Netherlands
|
Codepage |
UNKNOWN
|
Size |
0x568
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.47151
|
MD5 |
0a451222f7037983439a58e3b44db529
|
SHA1 |
6881cba71174502883d53a8885fb90dad81fd0c0
|
SHA256 |
dc785b2a3e4ea82bd34121cc04e80758e221f11ee686fcfd87ce49f8e6730b22
|
SHA3 |
d5599c242df5383add3fb330d42b31f1751594b36bbf52195e7d1dd564e7f0e3
|
Type |
RT_ICON
|
Language |
Dutch - Netherlands
|
Codepage |
UNKNOWN
|
Size |
0x2e8
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.91708
|
MD5 |
90ed3aac2a942e3067e6471b32860e77
|
SHA1 |
b849a2b9901473810b5d74e6703be78c3a7e64e3
|
SHA256 |
ca8fc96218d0a7e691dd7b95da05a27246439822d09b829af240523b28fd5bb3
|
SHA3 |
3f02085a0d69091556ede0b585f45145adce9849e175d8177c2f0fe0891a1bd8
|
Type |
RT_ICON
|
Language |
Dutch - Netherlands
|
Codepage |
UNKNOWN
|
Size |
0x8a8
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.91366
|
MD5 |
af05dd5bd4c3b1fc94922c75ed4f9519
|
SHA1 |
f54685a8a314e6f911c75cf7554796212fb17c3e
|
SHA256 |
3bbacbad1458254c59ad7d0fd9bea998d46b70b8f8dcfc56aad561a293ffdae3
|
SHA3 |
150dba8cc825d5c0e9ff3c59015533288d19931847210338a3ef7cdc390c0e78
|
Type |
RT_STRING
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x2f2
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.21823
|
MD5 |
bbf4b644f9dd284b35eb31573d0df2f7
|
SHA1 |
4f9885ae629e83464e313af5254ef86f01accd0b
|
SHA256 |
2c0d32398e3c95657a577c044cc32fe24fa058d0c32e13099b26fd678de8354f
|
SHA3 |
ebed2e4a929600c1460761d462143feb092840986b31c9748d3aeb8174d4205e
|
Type |
RT_STRING
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x30c
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.31515
|
MD5 |
ac2a0551cb90f91d779ee8622682dfb1
|
SHA1 |
ff0db7d2f48d85ceb3539b21ebe9d0ca3443f1da
|
SHA256 |
840989e0a92f2746ae60b8e3efc1a39bcca17e82df3634c1643d76141fc75bb3
|
SHA3 |
58a85f5c53df73aa79e5f5a36aa151ca0d9da4d450ebc2975a3ee827b46342a5
|
Type |
RT_STRING
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x2ce
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.25024
|
MD5 |
c99b474c52df3049dfb38b5308f2827d
|
SHA1 |
7375e693629ce6bbd1a0419621d094bcd2c67bb7
|
SHA256 |
26bda4da3649a575157a6466468a0a86944756643855954120fd715f3c9c7f78
|
SHA3 |
c6013febd14dd876e3b81111ec17dd2724dbf4147b0ad7be9d03259bcb59fef3
|
Type |
RT_STRING
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x68
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
2.86149
|
MD5 |
aec4e28ea9db1361160cde225d158108
|
SHA1 |
249013a10cde021c713ba2dc8912f9e05be35735
|
SHA256 |
d786490af7fe66042fb4a7d52023f5a1442f9b5e65d067b9093d1a128a6af34c
|
SHA3 |
a067c4d88d719ed8d568951acb776bd798b691a8b153f8d94ba0574ede1fbf4c
|
Type |
RT_STRING
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0xb4
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.20731
|
MD5 |
c76a8843204c0572bca24ada35abe8c7
|
SHA1 |
066052030d0a32310da8cb5a51d0590960a65f32
|
SHA256 |
00a0794f0a493c167f64ed8b119d49bdc59f76bb35e5c295dc047095958ee2fd
|
SHA3 |
07523cf88b3803ea41acfeb3c9c0c4b5b4b9fb6f9a3232802491d8de1b6c9166
|
Type |
RT_STRING
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0xae
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
3.04592
|
MD5 |
4bd4f3f6d918ba49d8800ad83d277a86
|
SHA1 |
1f5e4c73965fea1d1f729efbe7568dcd081a2168
|
SHA256 |
34973a8a33b90ec734bd328198311f579666d5aeb04c94f469ebb822689de3c3
|
SHA3 |
2d01c56a5bf0b390addf4fb5b6ae02f9a64bd03ffd300d3763615bbb8ec911fe
|
Type |
RT_RCDATA
|
Language |
UNKNOWN
|
Codepage |
UNKNOWN
|
Size |
0x2c
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
4.45821
|
MD5 |
4543af4e977159edfda20b356de04b31
|
SHA1 |
19682c16558e82db946848af27d7dc6c7b9d68dc
|
SHA256 |
d8b0aa50f8f6a644151953728082f4e76a4651f1176de9d11a68b29959a9e756
|
SHA3 |
5f278f63d83a810a1783207481b6f7b708e64b615965bc1f639641ae6d818d3b
|
Type |
RT_GROUP_ICON
|
Language |
English - United States
|
Codepage |
UNKNOWN
|
Size |
0x3e
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
2.64576
|
Detected Filetype |
Icon file
|
MD5 |
f6262f462f61a1af1cac10cf4b790e5a
|
SHA1 |
4aa3239c2c59fa5f246b0dd68da564e529b98ff4
|
SHA256 |
44b095a62d7e401671f57271e6cada367bb55cf7b300ef768b3487b841facd3c
|
SHA3 |
f2a1d165133c29eba349014fa5f8059ddebe1aba5b220fb89f1a474e95c482ca
|
Type |
RT_VERSION
|
Language |
English - United States
|
Codepage |
UNKNOWN
|
Size |
0x4b8
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
2.83175
|
MD5 |
f87832daae49f613f0ba4b53532ca514
|
SHA1 |
b1527bc70b1f7d678f46bae2c792e1663ad76ded
|
SHA256 |
01cc616accce69424d875dba6f80af1ab243c6d03bdfa958b5eaddeef606e0af
|
SHA3 |
05d68d5b68061ed27be92ba8622b8f9c7736c742c50ddbc83451d7d9d50f722c
|
Type |
RT_MANIFEST
|
Language |
English - United States
|
Codepage |
UNKNOWN
|
Size |
0x560
|
TimeDateStamp |
2009-Jun-11 16:17:46
|
Entropy |
5.05007
|
MD5 |
8d7accca43bc3864983dbbb9af490005
|
SHA1 |
07ae72350bcbfedb5015a78efd74fcfd3bab11ac
|
SHA256 |
ec233469005d39f4f2673be991a0415318631a59c5976c35d4dd22db45226fd0
|
SHA3 |
d340127cbdd815e5c2dd4b44e8755c28512ad5e969b757cfcec6612b00e9d186
|
'%s' is not a valid integer value |
'%s' is not a valid floating point value |
'%s' is not a valid date |
'%s' is not a valid time |
'%s' is not a valid date and time |
Invalid argument to time encode |
Invalid argument to date encode |
Out of memory |
I/O error %d |
File not found |
Invalid filename |
Too many open files |
File access denied |
Read beyond end of file |
Disk full |
Invalid numeric input |
Division by zero |
Range check error |
Integer overflow |
Invalid floating point operation |
Floating point division by zero |
Floating point overflow |
Floating point underflow |
Invalid pointer operation |
Invalid class typecast |
Access violation at address %p. %s of address %p |
Stack overflow |
Control-C hit |
Privileged instruction |
Operation aborted |
Exception %s in module %s at %p. |
%s%s |
Application Error |
Format '%s' invalid or incompatible with argument |
No argument for format '%s' |
Invalid variant type conversion |
Invalid variant operation |
Variant method calls not supported |
Read |
Write |
Format result longer than 4096 characters |
Format string too long |
Error creating variant array |
Variant is not an array |
Variant array index out of bounds |
External exception %x |
Jan |
Feb |
Mar |
Apr |
May |
Jun |
Jul |
Aug |
Sep |
Oct |
Nov |
Dec |
January |
February |
March |
April |
May |
June |
July |
August |
September |
October |
November |
December |
Sun |
Mon |
Tue |
Wed |
Thu |
Fri |
Sat |
Sunday |
Monday |
Tuesday |
Wednesday |
Thursday |
Friday |
Saturday |
Signature |
0xfeef04bd
|
StructVersion |
0x10000
|
FileVersion |
1.6.0.0
|
ProductVersion |
1.6.0.0
|
FileFlags |
(EMPTY)
|
FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
FileType |
VFT_APP
|
Language |
UNKNOWN
|
Comments |
This installation was built with Inno Setup.
|
CompanyName |
Michael Scrivo
|
FileDescription |
Outlook on the Desktop
|
FileVersion (#2) |
1.6.0
|
LegalCopyright |
©2006-2010 Michael Scrivo
|
ProductName |
Outlook on the Desktop
|
ProductVersion (#2) |
1.6.0
|
Resource LangID |
English - United States
|
StartAddressOfRawData |
0x40e000
|
EndAddressOfRawData |
0x40e008
|
AddressOfIndex |
0x40c3d0
|
AddressOfCallbacks |
0x40f010
|
SizeOfZeroFill |
0
|
Characteristics |
IMAGE_SCN_TYPE_REG
|
Callbacks |
(EMPTY)
|
[*] Warning: Section BSS has a size of 0!
[*] Warning: Section .tls has a size of 0!
[*] Warning: Section .reloc has a size of 0!