48fc329ea410c3244461c907f7971a83
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2015-Oct-27 23:10:55 |
| Detected languages |
English - United States
|
| CompanyName | Sysinternals |
| FileDescription | BGInfo - Wallpaper text configurator |
| FileVersion | 4.21 |
| InternalName | BGInfo |
| LegalCopyright | Copyright © 2000-2014 Mark Russinovich |
| OriginalFilename | Bginfo.exe |
| ProductName | BGInfo |
| ProductVersion | 4.21 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C++ v6.0 DLL
Microsoft Visual C++ 6.0 - 8.0 MASM/TASM - sig1(h) |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Tries to detect virtualized environments:
|
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: Microsoft Corporation
Issuer: Microsoft Code Signing PCA |
| Safe | VirusTotal score: 0/69 (Scanned on 2022-02-17 17:28:54) | All the AVs think this file is safe. |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x108 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2015-Oct-27 23:10:55 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 12.0 |
| SizeOfCode | 0x156a00 |
| SizeOfInitializedData | 0xa7c00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x001333F8 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x158000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.1 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.1 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x202000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x2030a5 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rdata
.data
.rsrc
.reloc
Imports
| WSOCK32.dll |
WSAStartup
|
|---|---|
| COMCTL32.dll |
#17
CreateToolbarEx |
| VERSION.dll |
VerQueryValueA
GetFileVersionInfoA GetFileVersionInfoSizeA |
| snmpapi.dll |
SnmpUtilOidCpy
SnmpUtilOidNCmp SnmpSvcGetUptime |
| KERNEL32.dll |
GetStartupInfoW
GetStringTypeW GetTimeZoneInformation GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleCP ReadConsoleW LCMapStringW OutputDebugStringW WriteConsoleW SetUnhandledExceptionFilter UnhandledExceptionFilter SetFilePointerEx CreateFileW GetProcAddress LocalAlloc LocalFree LoadLibraryA GetModuleHandleA GetCommandLineW DecodePointer InterlockedIncrement InterlockedDecrement HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap RaiseException GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteFile SetEndOfFile CloseHandle GetLocalTime FormatMessageA lstrlenA GetSystemDirectoryA CreateFileA LockResource GlobalMemoryStatus SetErrorMode LoadResource SizeofResource GetFileSize ReadFile FindClose GetStdHandle IsValidCodePage GetFileType SetStdHandle GetSystemTimeAsFileTime AreFileApisANSI GetModuleHandleExW ExitThread CreateThread HeapQueryInformation VirtualAlloc IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind SetConsoleMode ReadConsoleInputA GetConsoleMode FindResourceExW SearchPathA GetProfileIntA GetTempFileNameA GetTempPathA VerifyVersionInfoA VerSetConditionMask GetFileTime GetFileSizeEx GetFileAttributesExA lstrcpyA lstrcmpiA DuplicateHandle UnlockFile GetNativeSystemInfo SystemTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetTickCount LockFile FlushFileBuffers GetCurrentDirectoryA GetACP GetCPInfo GetOEMCP GetUserDefaultUILanguage CompareStringW ResumeThread SetThreadPriority WaitForSingleObject LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc CopyFileA GlobalSize InitializeCriticalSection lstrcmpA GlobalFlags GlobalGetAtomNameA GlobalFindAtomA GlobalAddAtomA lstrcmpW GlobalDeleteAtom LoadLibraryExW FreeResource GetSystemDirectoryW GetCurrentThreadId LeaveCriticalSection EnterCriticalSection EncodePointer GetCurrentProcessId LoadLibraryW GetModuleHandleW GetModuleFileNameW SetLastError OutputDebugStringA CompareStringA MultiByteToWideChar FindResourceW SystemTimeToTzSpecificLocalTime SetFilePointer GetLogicalDriveStringsA VirtualQuery VirtualProtect DeleteFileA GetFileAttributesA SetEnvironmentVariableA GetCommandLineA GetSystemInfo GetEnvironmentStrings FreeLibrary GetFullPathNameA GetModuleFileNameA WaitForMultipleObjects GetExitCodeProcess TerminateProcess ExitProcess GetCurrentProcess OpenProcess WideCharToMultiByte GetVersionExA CreateDirectoryA MulDiv Sleep GlobalFree GlobalUnlock GlobalLock GlobalAlloc GetDateFormatA GetTimeFormatA QueryPerformanceFrequency QueryPerformanceCounter GetComputerNameA GetVolumeInformationA FindFirstFileA GetDiskFreeSpaceA GetWindowsDirectoryA GetDriveTypeA FindResourceA ExpandEnvironmentStringsA GetEnvironmentVariableA |
| USER32.dll |
LockWindowUpdate
SetParent SetRect SetCursorPos CopyAcceleratorTableA DestroyAcceleratorTable CreateAcceleratorTableA LoadAcceleratorsW ToAsciiEx GetKeyboardState MapVirtualKeyExA GetKeyboardLayout CreateDialogIndirectParamA WaitMessage GetSystemMenu GetComboBoxInfo LoadMenuW TrackMouseEvent GetKeyNameTextA ReuseDDElParam UnpackDDElParam InsertMenuItemA BringWindowToTop MonitorFromPoint UpdateLayeredWindow IsMenu SetWindowRgn LoadImageW DrawStateA EnumDisplayMonitors SetLayeredWindowAttributes MapVirtualKeyA GetMenuDefaultItem CreatePopupMenu NotifyWinEvent LoadCursorW InvertRect HideCaret EnableScrollBar GetAsyncKeyState MessageBeep GetNextDlgTabItem GetIconInfo IsRectEmpty SetRectEmpty DrawFocusRect WindowFromPoint ReleaseCapture GetNextDlgGroupItem CharUpperA DestroyIcon DeleteMenu ShowOwnedPopups CopyImage DestroyMenu GetWindowDC TabbedTextOutA GrayStringA DrawTextExA RemoveMenu AppendMenuA InsertMenuA GetMenuState GetMenuStringA RealChildWindowFromPoint GetDesktopWindow ClientToScreen SendDlgItemMessageA GetMonitorInfoA MonitorFromWindow WinHelpA GetScrollInfo SetScrollInfo LoadIconW SetWindowsHookExA GetWindow GetTopWindow GetClassLongA EqualRect CopyRect RemovePropA ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow ValidateRect GetForegroundWindow SetActiveWindow GetMenuItemCount GetMenuItemID SetClassLongA GetCapture GetKeyState GetDlgCtrlID IsChild IsWindow GetClassInfoExA GetClassInfoA RegisterClassA GetMessageTime GetMessagePos PeekMessageA RegisterWindowMessageA GetLastActivePopup GetWindowThreadProcessId IsWindowEnabled UnhookWindowsHookEx LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps GetFocus DrawIconEx EnableMenuItem CheckMenuItem SetCapture EmptyClipboard RegisterClipboardFormatA SetClipboardData CloseClipboard OpenClipboard DrawEdge IsDialogMessageA LoadStringA LoadIconA CheckMenuRadioItem GetClassNameA EnumChildWindows GetParent SetWindowLongA GetWindowLongA PtInRect UnionRect FrameRect ChildWindowFromPoint MapWindowPoints ScreenToClient GetCursorPos MessageBoxA AdjustWindowRectEx GetClientRect GetWindowTextLengthA GetWindowTextA GetPropA SetPropA InvalidateRect EndPaint BeginPaint SetForegroundWindow UpdateWindow SetMenuDefaultItem SetMenuItemInfoA GetMenuItemInfoA TrackPopupMenu GetSubMenu GetMenu LoadMenuA TranslateAcceleratorA LoadAcceleratorsA EnableWindow KillTimer SetTimer GetActiveWindow SetFocus IsDlgButtonChecked CheckRadioButton CheckDlgButton GetDlgItemTextA SetDlgItemTextA DialogBoxParamA CreateDialogParamA IsZoomed IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement SetWindowPos MoveWindow GetDoubleClickTime CopyIcon ModifyMenuA CharUpperBuffA DrawMenuBar DefFrameProcA DefMDIChildProcA TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect ShowWindow DestroyWindow CreateWindowExA RegisterClassExA CallWindowProcA PostQuitMessage DefWindowProcA PostMessageA DispatchMessageA TranslateMessage GetMessageA DrawFrameControl DrawIcon GetWindowRgn DestroyCursor MapDialogRect SetMenu CreateMenu DrawTextA PostThreadMessageA GetUserObjectInformationA GetProcessWindowStation SystemParametersInfoA LoadImageA OffsetRect SubtractRect IntersectRect FillRect SetSysColors GetSysColor GetWindowRect ReleaseDC GetDC GetSystemMetrics IsIconic GetWindowPlacement LoadCursorA InflateRect GetSysColorBrush SetCursor SetWindowTextA GetDlgItem EndDialog DialogBoxIndirectParamA SendMessageA CallNextHookEx IsCharLowerA |
| GDI32.dll |
SetBkColor
ExtTextOutA DPtoLP GetPixel PatBlt CopyMetaFileA CreateDCA CreateHatchBrush CreatePatternBrush CreateRectRgn Escape ExcludeClipRect GetObjectType GetViewportExtEx GetWindowExtEx IntersectClipRect PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign TextOutA SetViewportExtEx SetViewportOrgEx CreateFontIndirectA GetMapMode OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx GetTextExtentPoint32A CombineRgn CreateRectRgnIndirect SetRectRgn GetNearestPaletteIndex GetBkColor GetTextMetricsA CreateDIBitmap EnumFontFamiliesA GetTextCharsetInfo CreateEllipticRgn UpdateColors GetTextColor CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExA GetRgnBox OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx LPtoDP GetViewportOrgEx GetTextFaceA EnumFontsA CreateFontA CreateBitmap SetWindowOrgEx MoveToEx SetPixel LineTo CreatePen GdiFlush UnrealizeObject GetDCOrgEx SetBrushOrgEx GetObjectA SetDIBColorTable CreateDIBSection SetStretchBltMode StretchBlt SetBkMode SelectPalette SelectObject RealizePalette GetSystemPaletteEntries GetPaletteEntries GetNearestColor GetDIBits GetClipBox DeleteObject DeleteDC CreateSolidBrush CreatePalette CreateCompatibleDC CreateCompatibleBitmap BitBlt EndPage StartPage EndDoc SetTextColor Ellipse GetStockObject StartDocA SetWindowExtEx GetDeviceCaps SetMapMode |
| WINSPOOL.DRV |
OpenPrinterA
ClosePrinter DocumentPropertiesA |
| COMDLG32.dll |
ChooseColorA
GetSaveFileNameA GetOpenFileNameA PrintDlgA CommDlgExtendedError |
| ADVAPI32.dll |
RegSetValueA
RegEnumKeyA RegEnumValueA RegDeleteKeyA RegCreateKeyExA StartServiceA StartServiceCtrlDispatcherA SetServiceStatus RegisterServiceCtrlHandlerA QueryServiceStatus OpenServiceA OpenSCManagerA DeleteService CreateServiceA CloseServiceHandle CreateProcessAsUserA ImpersonateLoggedOnUser FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken RevertToSelf RegDeleteValueA RegEnumKeyExA GetUserNameA RegOpenKeyExA RegSetValueExA RegQueryValueExW RegQueryValueExA RegOpenKeyA RegCreateKeyA RegCloseKey |
| SHELL32.dll |
DragFinish
ShellExecuteA Shell_NotifyIconA SHChangeNotify SHGetFileInfoA SHBrowseForFolderA SHAppBarMessage DragQueryFileA SHGetDesktopFolder SHGetSpecialFolderLocation SHGetPathFromIDListA |
| ole32.dll |
RevokeDragDrop
RegisterDragDrop CoLockObjectExternal OleGetClipboard IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning DoDragDrop CoInitializeEx ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoDisconnectObject OleInitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes CreateStreamOnHGlobal OleRun CoCreateInstance CoUninitialize CoInitialize |
| OLEAUT32.dll |
SysAllocString
SafeArrayGetUBound SafeArrayGetLBound SysStringLen OleLoadPicture SysAllocStringLen LoadTypeLib VariantTimeToSystemTime VariantChangeType SafeArrayGetElement GetErrorInfo VariantCopy VarBstrFromDate VariantClear VariantInit SystemTimeToVariantTime SysAllocStringByteLen SysStringByteLen SysFreeString |
| MSIMG32.dll |
AlphaBlend
TransparentBlt |
| SHLWAPI.dll |
PathRemoveFileSpecW
StrFormatKBSizeA PathStripToRootA PathIsUNCA PathFindExtensionA PathFindFileNameA |
| UxTheme.dll |
DrawThemeParentBackground
OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemeSysColor GetWindowTheme GetThemePartSize DrawThemeText |
| OLEACC.dll |
AccessibleObjectFromWindow
LresultFromObject CreateStdAccessibleObject |
| gdiplus.dll |
GdipBitmapLockBits
GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipBitmapUnlockBits GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipDeleteGraphics GdipDrawImageI GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipGetImageHeight GdipDrawImageRectI |
| IMM32.dll |
ImmGetContext
ImmGetOpenStatus ImmReleaseContext |
| WINMM.dll |
PlaySoundA
|
Delayed Imports
HELP
CREATEPROCESS_MANIFEST_RESOURCE_ID
1
106
2
3
4
5
6
MENU
NOTIFICATION
ABOUT
BACKGROUND
DATABASE
DEFINEFIELD
DESKTOPS
ENVSTRINGS
HELP (#2)
MAIN
MULTIMON
OPTIONS
OUTPUTFILE
POPUP
POSITION
REGISTRYEXAMPLE
SELECTCOLOR
USERFIELDS
WMIQUERY
7
8
2501
2502
ACCELERATORS
HAND
APPICON
APPICON1
APPICON2
TABICON
1 (#2)
1 (#3)
String Table contents
| Bullet |
| Color |
| Align Left |
| Align Centered |
| Cut |
| Bold |
| Italic |
| Underline |
| Align Right |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 4.21.0.0 |
| ProductVersion | 4.21.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | Sysinternals |
| FileDescription | BGInfo - Wallpaper text configurator |
| FileVersion (#2) | 4.21 |
| InternalName | BGInfo |
| LegalCopyright | Copyright © 2000-2014 Mark Russinovich |
| OriginalFilename | Bginfo.exe |
| ProductName | BGInfo |
| ProductVersion (#2) | 4.21 |
| Resource LangID | English - United States |
|---|
TLS Callbacks
Load Configuration
| Size | 0x48 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x5ad3f0 |
| SEHandlerTable | 0x5975e0 |
| SEHandlerCount | 876 |
RICH Header
| XOR Key | 0x4b3d24e2 |
|---|---|
| Unmarked objects | 0 |
| C++ objects (VS2008 SP1 build 30729) | 1 |
| C objects (VS2008 SP1 build 30729) | 15 |
| Imports (VS2008 SP1 build 30729) | 43 |
| Total imports | 854 |
| C++ objects (VS2013 build 21005) | 81 |
| ASM objects (VS2013 build 21005) | 49 |
| C objects (VS2013 build 21005) | 194 |
| C++ objects (20806) | 318 |
| C objects (VS2013 UPD4 build 31101) | 1 |
| C++ objects (VS2013 UPD4 build 31101) | 20 |
| Resource objects (VS2013 build 21005) | 1 |
| 151 | 1 |
| Linker (VS2013 UPD4 build 31101) | 1 |