5a55167bddc89f8b6f103f2443532ab78f9cbfec6f45315632ccb6ec35c3ea50

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2013-Sep-15 15:40:45
Detected languages English - United States
Debug artifacts X:\C++\Projects\CmdUtils\Out\Win32\Release\clipcopy.pdb
CompanyName (c) Siddharth Barman
FileDescription Utility
FileVersion 1.0.0.1
InternalName clipcopy
LegalCopyright Copyright (C) 2013, Siddharth Barman
OriginalFilename clipcopy
ProductName ClipCopy
ProductVersion 1.0.0.1

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Info Interesting strings found in the binary: Contains domain names:
  • http://siddharthbarman.com
  • siddharthbarman.com
Info The PE is digitally signed. Signer: NEXTlegal
Issuer: DigiCert SHA2 Assured ID Code Signing CA
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 e285bee6af6e014220ac420a44340284
SHA1 0172e7fac15e593149d02c33102c1d6cf92949b7
SHA256 5a55167bddc89f8b6f103f2443532ab78f9cbfec6f45315632ccb6ec35c3ea50
SHA3 ba164651d93444d3dcd1f434c7bf11a58f417b573bc44293513a1b297c186d63
SSDeep 1536:udNTnN3yfkXGcvHvlTi3W4VdcK6aa6h+NzPxC:2TnN3FJvHvlTT4XUbxC
Imports Hash 06a0fd532eac26b651e3f16f71aeeb67

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2013-Sep-15 15:40:45
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 11.0
SizeOfCode 0x4200
SizeOfInitializedData 0x1d400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000046E3 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x6000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x25000
SizeOfHeaders 0x400
Checksum 0x25b26
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 bbda942f118d927350b875fa10fd4fdc
SHA1 674c5661dfc81f840aab7a4beacb3718cb6e798f
SHA256 28074799af7e030afc1d637178b632d77f5d5848a607d50f70450210b823095f
SHA3 5db5ec76040582f2ac0b114952005dc033624b805476aa46a9d47f9c686379d7
VirtualSize 0x407a
VirtualAddress 0x1000
SizeOfRawData 0x4200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.29214

.rdata

MD5 26125028f53453f8afe15c54cb546cae
SHA1 5022ae98eeb3c61906ba0f77b16486d9b8079a0c
SHA256 ac06c8643e30ce13b638d25893794e66cce0a88c7aaa32b881ead7b43921dd8b
SHA3 926ea702e2e7ab51af7885d1eecda2a6377b818e305e1b67c42960dcef914c4d
VirtualSize 0x1dca
VirtualAddress 0x6000
SizeOfRawData 0x1e00
PointerToRawData 0x4600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.55516

.data

MD5 e51e4daf251594a1dcf49c88ab0a6fca
SHA1 5a4b903567e2ef2804cb39188514f06d70046ce8
SHA256 ea6da23809a7a73c69e9426ae2df0c742ea5e872d1b49c46346dc6e40a45d1a2
SHA3 7ea830fb20e901f948e20d240576e93ccd0eed23b8fb35872a215f7d99cb0f89
VirtualSize 0x57c
VirtualAddress 0x8000
SizeOfRawData 0x200
PointerToRawData 0x6400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.67866

.rsrc

MD5 db2038a4db8b916e0a70ab2d244e1705
SHA1 6f3dec1d74bfc81b25d805d091992bb2d32aec98
SHA256 0d7c5c7b3638613788260f889edd6a3e86dd0133f1a604e73ebed747cfb6d0fc
SHA3 a4bc942739124d095189d909dd7d0df86abff33c7abbe7d8ec82adc24bc3f101
VirtualSize 0x1a140
VirtualAddress 0x9000
SizeOfRawData 0x1a200
PointerToRawData 0x6600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.51791

.reloc

MD5 49f9e2ac869d609dda75c33bce907bd1
SHA1 e5109182fd2e7ef57562fe314bf26e0500e0d4b7
SHA256 9121a8a3a3f68d89df02d0f1bf74016837a1a1d9dfa41c0dd5045dbdf16d9c01
SHA3 92e2d3f30416eb3a8a381e8f3b92b01fec5f517649be9b5cfe40e98e200510e6
VirtualSize 0xd48
VirtualAddress 0x24000
SizeOfRawData 0xe00
PointerToRawData 0x20800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.59792

Imports

KERNEL32.dll CreateFileW
CloseHandle
FormatMessageW
LocalFree
EncodePointer
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
GlobalUnlock
GlobalLock
lstrlenW
InitializeCriticalSectionEx
GetLastError
GlobalFree
GlobalAlloc
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DeleteCriticalSection
DecodePointer
USER32.dll SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
MSVCP110.dll ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Syserror_map@std@@YAPBDH@Z
MSVCR110.dll free
_wgetcwd
??_V@YAXPAX@Z
_get_errno
_wfindfirst64i32
_findclose
_wfindnext64i32
swprintf_s
??0exception@std@@QAE@XZ
memset
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_XcptFilter
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__winitenv
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_wcsicmp
_purecall
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
memmove
??1exception@std@@UAE@XZ
vswprintf_s
_CxxThrowException
__CxxFrameHandler3
??3@YAXPAX@Z
memcpy

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1560
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.79311
Detected Filetype PNG graphic file
MD5 05f48fdd502f57724a1e916814f6354a
SHA1 7ec663bf35fc2619003a36e09feb9ca374c3ac5b
SHA256 441e5dd75bd1cec3c739ea8f83398b4bb05d4048a96b037153ed46355bc3e020
SHA3 42d77cbd3e857743a927019f74da8804c1dc9cc55432ebd77b777eb768444e63

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.67901
MD5 34c8455841760ac5663417761b17234a
SHA1 cff3a0ec3113a371e1a467daf968d415724cc365
SHA256 d165595ad93cbe1103a70b6acdb670d74faeab577ae77108b9f90accdfb53c88
SHA3 444e0c59277bdf5a1d4fb45e7e05f92c9fa273280a926b40704576538016be51

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.93834
MD5 77d89b49100ed05b942f82e94fbf857d
SHA1 819f67815e7202360a3851ac5abb6d6a9de6be7b
SHA256 ac0b7931586d52b3bb1085639ad89f610b2ac121e77c1a1eb1ec555162c9d7aa
SHA3 d4b3adad8e50d72ca8f6924ee037d2a2fd64649b8dd6f8af08fc4f0ee3e448fb

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.41785
MD5 2943622969d83fdb68371188dccabe5e
SHA1 46c00cc33df3cac348da4e0afa6f6b9dc6074471
SHA256 d6c19445ead25d2d6d8620ceacfd3165c981b61ce6d04d919395da8b97f28bc7
SHA3 d8b424e0cbdad64873f2395b2c052bb1b256286d39f0963f013e8dc77478442c

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.34233
MD5 37f753fdbde258e3cc76199cafffe25b
SHA1 abfce55f09ad4b06e5e5893d8240d5f7ceb3bbc5
SHA256 63180859e5ff20e50d3146d866a094b2d2825a90c857a55a7943b32f64340d8d
SHA3 ff16bc384f7fb29ab21ce7451bc3a709b26e3e0cb794d2ce25281085e2eef140

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.61501
MD5 cb6241f3ab5be2a1c1a0ad3e6a714a80
SHA1 f0cd76a8c9baff08515a4c14092a4a19b243dc0b
SHA256 40028e02ef418e6416ff195d70333d315cbea242bf32a0ec3e635258ade0a410
SHA3 9c339aaabba5f32ff9d07b3e84547c4f764e99f125fc3e7543225c970b9b8514

5 (#2)

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94936
Detected Filetype Icon file
MD5 eb7d25cee0c614f90c50999681766f9a
SHA1 e038941a19c178fc1cd12ee50b7c1103b8f98f1d
SHA256 108bf17a134a4196ee7263494edd65286dd22c6e1b2adf0f1049521fb14e2100
SHA3 70ec5ca9ec07b93e0db230012f8d6ca9e1b94b88b96cfe1618101c244cfd992d

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x2d8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33113
MD5 ddd84ecfe0dd543c15af1b9555b06bcf
SHA1 af9cc37c99ffd7217b9711c417995ae5c16e1633
SHA256 d80a2bceeaed54b42fa8c662fbcbc216ada824605e01658307252d7a2b9cd8d4
SHA3 e4984cc5fe8305d22218f46f05aaa7a4fe2b12e04b0040e7067c3141060bc47b

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.1
ProductVersion 1.0.0.1
FileFlags (EMPTY)
FileOs VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
FileType VFT_APP
Language English - United States
CompanyName (c) Siddharth Barman
FileDescription Utility
FileVersion (#2) 1.0.0.1
InternalName clipcopy
LegalCopyright Copyright (C) 2013, Siddharth Barman
OriginalFilename clipcopy
ProductName ClipCopy
ProductVersion (#2) 1.0.0.1
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2013-Sep-15 15:40:45
Version 0.0
SizeofData 80
AddressOfRawData 0x6b10
PointerToRawData 0x5110
Referenced File X:\C++\Projects\CmdUtils\Out\Win32\Release\clipcopy.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2013-Sep-15 15:40:45
Version 0.0
SizeofData 16
AddressOfRawData 0x6b60
PointerToRawData 0x5160

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x408034
SEHandlerTable 0x406de0
SEHandlerCount 15

RICH Header

XOR Key 0x12fa9b91
Unmarked objects 0
ASM objects (50929) 1
C objects (50929) 19
Imports (50929) 4
C++ objects (50929) 8
Total imports 142
185 (30716) 7
211 (VS2012 UPD3 build 60610) 8
Resource objects (VS2012 UPD3 build 60610) 1
151 1
Linker (VS2012 UPD3 build 60610) 1

Errors

Leave a comment

No comments yet.