By using Saferwall you consent to our Terms of Service and Privacy Policy and allow us to share your submission with the security community. Learn more

PE (Portable Executable)

File header

Characteristics 0x818f Relocation info stripped, File is executable, Line numbers stripped, Local symbols stripped, Bytes of machine word are reversed, 32 bit word machine, Bytes of machine word are reversed
Machine 0x14c Intel 386 or later processors and compatible processors
Number of sections 0xa 10
Number of symbols 0x0 0
Pointer to symbol table 0x0 0
Size of optional header 0xe0 224B
Time date stamp 0x669b8870 2024-07-20 09:50:40.000Z
Signature 0x4550 PE

Optional header

Address of entrypoint 0xbfbe0 785376
Base of code 0x1000 4096
Base of data 0xc1000 790528
Checksum 0xe2029 925737
Dll characteristics 0x8140 33088
File alignment 0x200 512
Image base 0x400000 4194304
Loader flags 0x0 0
Magic 0x10b PE32
Major image version 0x0 0
Major linker version 0x2 2
Major os version 0x6 6
Major subsystem version 0x6 ?
Minor image version 0x0 0
Minor linker version 0x19 25
Minor os version 0x1 1
Minor subsystem version 0x1 Native
Number of rva and sizes 0x10 16B
Section alignment 0x1000 4096
Size of code 0xbec00 763.00KB
Size of headers 0x400 1.00KB
Size of heap commit 0x1000 4.00KB
Size of heap reserve 0x100000 1.00MB
Size of image 0x131000 1.19MB
Size of initialized data 0x60c00 387.00KB
Size of stack commit 0x4000 16.00KB
Size of stack reserve 0x100000 1.00MB
Size of uninitialized data 0x0 0B
Subsystem 0x2 Windows GUI
Win32 version value 0x0 0

Data Directory

SizeVirtual Address
Export Directory 0x9a 0xd2000
Import Directory 0x10d0 0xcf000
Resource Directory 0x5b2a8 0xd5000
Exception Directory 0x0 0x0
Security Directory 0x0 0x0
Base Relocation Table 0x0 0x0
Debug Directory 0x0 0x0
Architecture specific 0x0 0x0
RVA of GlobalPointer 0x0 0x0
TLS Directory 0x18 0xd4000
Load Config Directory 0x0 0x0
Bound Import Directory 0x0 0x0
Import Address Table 0x278 0xcf318
Delay Import Descriptors 0x1a4 0xd1000
COM Runtime Descriptor 0x0 0x0
Reserved 0x0 0x0