975ed160d932e8b203e4aa9070fbf48882476f53b9a1faaf1c2ca10b667deef9
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 1998-Oct-10 19:23:27 |
| Detected languages |
English - United States
|
| Comments | Greetings to: misch,philippe,bob, rougi, mimmelchen, hula-hula,luxembourg(thats where i live, it's a country) |
| CompanyName | Skylam |
| LegalCopyright | Skylam |
| ProductName | Mouse-o-meter |
| FileVersion | 2.52.0008 |
| ProductVersion | 2.52.0008 |
| InternalName | mouse |
| OriginalFilename | mouse.exe |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual Basic 5.0
Microsoft Visual Basic v5.0 - v6.0 Microsoft Visual Basic v6.0 |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
May have dropper capabilities:
|
| Suspicious | VirusTotal score: 1/69 (Scanned on 2023-08-25 23:28:30) | Bkav: W32.AIDetectMalware |
Hashes
| MD5 | 5bdb3eb9b1642f13bf8b26ce38d052fc 🔍 |
|---|---|
| SHA1 | 1429e15d0cdf3fc1b56d52184df832758f2f187e 🔍 |
| SHA256 | 975ed160d932e8b203e4aa9070fbf48882476f53b9a1faaf1c2ca10b667deef9 🔍 |
| SHA3 | 2f7489f1ac057c62d1189aa028bd47081354593ea0ef57fba1745320e99a023d 🔍 |
| SSDeep | 768:P6BwXRBC4b0BFT3Y86fQu7vqIgwSFIjkDTH/nuTsz8ZfWD2097QTzvbX/XyW1Hb:y6R4c0otZ7y6SFIj8/mZf6neSGf+ 🔍 |
| Imports Hash | 4f75a0e9f6380d94c7bba459dddae5ff 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 1998-Oct-10 19:23:27 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 4.52 |
| SizeOfCode | 0x19a00 |
| SizeOfInitializedData | 0x6200 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00001634 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x1b000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 2.34 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x23000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x21274 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | 96e15e3a275f93ab35010fe8429c8d5b 🔍 |
|---|---|
| SHA1 | 073a8420d9a0c781a9a375e880701400eff13b5a 🔍 |
| SHA256 | 82931917258291073bdf9ac5094881f02302bf0a9e4e2a53764d2e90f2319f35 🔍 |
| SHA3 | 6aeb261df229e8f5fe8f7b41a462bba7382a0a84766113c45a28b2c637925368 🔍 |
| VirtualSize | 0x19994 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x19a00 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.75415 |
.data
| MD5 | bf619eac0cdf3f68d496ea9344137e8b 🔍 |
|---|---|
| SHA1 | 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍 |
| SHA256 | 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍 |
| SHA3 | 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍 |
| VirtualSize | 0x2ba0 |
| VirtualAddress | 0x1b000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x19e00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0 |
.idata
| MD5 | b92c26865c8c67deb0850d2f3e547dc6 🔍 |
|---|---|
| SHA1 | 613413bfe0ccdaf81a1de170943b69bd29593d18 🔍 |
| SHA256 | 4094e5b6184652fb50c3caa94dccc02c24270cd42931daf5173469189812bda1 🔍 |
| SHA3 | 772996a693e0f298db48f65fdcf1d987f925905b9db864cb9f17a45f615b429e 🔍 |
| VirtualSize | 0x878 |
| VirtualAddress | 0x1e000 |
| SizeOfRawData | 0xa00 |
| PointerToRawData | 0x1a000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.01505 |
.rsrc
| MD5 | 76057f814c1bf0414d630f4b3763a9e3 🔍 |
|---|---|
| SHA1 | 03e7d259195de39179caf125051b7a7a09db58f6 🔍 |
| SHA256 | 259e5a27f6f091bad410b223f305505935f0b970adbec570a6ca03499e8d93ba 🔍 |
| SHA3 | 19df055e8f20ea075b8a99717e77fdf1b540cdd85c4e8d9daa0abf9777e8d909 🔍 |
| VirtualSize | 0x730 |
| VirtualAddress | 0x1f000 |
| SizeOfRawData | 0x800 |
| PointerToRawData | 0x1aa00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 3.05795 |
.reloc
| MD5 | a3e2248d95be62cebb04e8685b8af6df 🔍 |
|---|---|
| SHA1 | 5c073f6e182b458590b87b15ee4e5227091a3fd5 🔍 |
| SHA256 | 7ef8fe42826750f6936fff35a212c24d3a66e2a379ef7ffb6d74a38c7721a023 🔍 |
| SHA3 | d0dfe36cf42fbc0c400a1f0ea2c81441ee88ddd88d46893a675af2fcf31eaea7 🔍 |
| VirtualSize | 0x23ac |
| VirtualAddress | 0x20000 |
| SizeOfRawData | 0x2400 |
| PointerToRawData | 0x1b200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.44385 |
Imports
| MSVBVM50.DLL |
#690
__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaStrBool __vbaBoolStr __vbaExitProc __vbaOnError __vbaObjSet #595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaFPFix _CIsin __vbaChkstk EVENT_SINK_AddRef __vbaStrCmp __vbaVarTstEq __vbaR4Str __vbaI2I4 __vbaObjVar DllFunctionCall _adj_fpatan __vbaLateIdCallLd __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 #607 __vbaR8ErrVar __vbaI2Str __vbaVarDiv #608 __vbaFPException __vbaStrVarVal #534 __vbaVarCat #537 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r #100 __vbaI4Var #689 __vbaVarAdd __vbaLateMemCall __vbaStrToAnsi __vbaVarDup #616 __vbaVarCopy __vbaFpI4 __vbaLateMemCallLd _CIatan __vbaStrMove _allmul __vbaLateIdSt _CItan _CIexp __vbaFreeObj __vbaFreeStr #581 |
|---|
Delayed Imports
30001
| Type |
RT_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | Unicode (UTF 16LE) |
| Size | 0x2e8 |
| TimeDateStamp | 1998-Oct-10 19:23:24 |
| Entropy | 2.31399 |
| MD5 | 15af41b398d33dd0d09c4b308d217fa5 🔍 |
| SHA1 | f75c0fec20c6cc2af78126521dfe7a8662701709 🔍 |
| SHA256 | d29f6fa4fd675ba4e25902f0cee54139eba262db144dd5e905b005815109fb7b 🔍 |
| SHA3 | 557259678b6ab5cdef81bd7577650f3b957efdf5187715ee9e59fa7a2e25af65 🔍 |
1
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | UNKNOWN |
| Codepage | Unicode (UTF 16LE) |
| Size | 0x14 |
| TimeDateStamp | 1998-Oct-10 19:23:24 |
| Entropy | 2.55772 |
| Detected Filetype | Icon file |
| MD5 | 3bf3dab34389939d33d9ed5fe5512e12 🔍 |
| SHA1 | 9fa24dbd475945a72884a0eff2a65f3143c5403e 🔍 |
| SHA256 | 28a84099cc59614e2e4f281774af68487a242bbb638164658b39435a1f0a57e1 🔍 |
| SHA3 | 8ee351afb2db988569c0e2946baa513e52a25da7f882a909e43e70adec82d57d 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | Unicode (UTF 16LE) |
| Size | 0x344 |
| TimeDateStamp | 1998-Oct-10 19:23:24 |
| Entropy | 3.44338 |
| MD5 | 330a2c71201ac4b94b777677332e71ab 🔍 |
| SHA1 | 1a8364a7790223f57ecc3fe7a33c8c911d721a9e 🔍 |
| SHA256 | ada38ad8b3adee78d23a93a1a3ef42d41e241c8734b279cf745d0de7ec2ee82f 🔍 |
| SHA3 | c7c24317d08391f7da1f3754ecbc1d44015c329d35b9db8843c7882f21a13ba2 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.52.0.8 |
| ProductVersion | 2.52.0.8 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| Comments | Greetings to: misch,philippe,bob, rougi, mimmelchen, hula-hula,luxembourg(thats where i live, it's a country) |
| CompanyName | Skylam |
| LegalCopyright | Skylam |
| ProductName | Mouse-o-meter |
| FileVersion (#2) | 2.52.0008 |
| ProductVersion (#2) | 2.52.0008 |
| InternalName | mouse |
| OriginalFilename | mouse.exe |
| Resource LangID | English - United States |
|---|
TLS Callbacks
Load Configuration
RICH Header
Errors
Leave a comment
No comments yet.