By using Saferwall you consent to our Terms of Service and Privacy Policy and allow us to share your submission with the security community. Learn more

File header

Characteristics	0x22	File is executable, Large Address Aware
Machine	0x8664	x64
Number of sections	0x7	7
Number of symbols	0x0	0
Pointer to symbol table	0x0	0
Size of optional header	0xf0	240B
Time date stamp	0x56f9db89	2016-03-29 01:34:01.000Z
Signature	0x4550	PE

Optional header

Address of entrypoint	0xe2efc	929532
Base of code	0x1000	4096
Checksum	0x19160f	1644047
Dll characteristics	0x8160	33120
File alignment	0x200	512
Image base	0x140000000	5368709120
Loader flags	0x0	0
Magic	0x20b	PE32+
Major image version	0x0	0
Major linker version	0xe	14
Major os version	0x5	5
Major subsystem version	0x5	OS/2 character
Minor image version	0x0	0
Minor linker version	0x0	0
Minor os version	0x2	2
Minor subsystem version	0x2	Windows GUI
Number of rva and sizes	0x10	16B
Section alignment	0x1000	4096
Size of code	0xffe00	1023.50KB
Size of headers	0x400	1.00KB
Size of heap commit	0x1000	4.00KB
Size of heap reserve	0x100000	1.00MB
Size of image	0x196000	1.59MB
Size of initialized data	0x91600	581.50KB
Size of stack commit	0x1000	4.00KB
Size of stack reserve	0x100000	1.00MB
Size of uninitialized data	0x0	0B
Subsystem	0x2	Windows GUI
Win32 version value	0x0	0

Data Directory

	Size	Virtual Address
Export Directory	0x5b36	0x147cb0
Import Directory	0x118	0x14d7e8
Resource Directory	0x262dc	0x16d000
Exception Directory	0xbc40	0x160000
Security Directory	0x3a20	0x18b400
Base Relocation Table	0x1500	0x194000
Debug Directory	0x70	0x13a000
Architecture specific	0x0	0x0
RVA of GlobalPointer	0x0	0x0
TLS Directory	0x0	0x0
Load Config Directory	0x94	0x13a070
Bound Import Directory	0x0	0x0
Import Address Table	0x11e0	0x101000
Delay Import Descriptors	0x0	0x0
COM Runtime Descriptor	0x0	0x0
Reserved	0x0	0x0