File Name | tabboz.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.216.174 |
Database Version | 2025-05-19 18:00:25 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
eac01f0a1b79fbe00bc2f30492ca3db0
|
|
SHA1 |
d43b4e1e26e6ea7ea81bb588e538f624ce4bca0c
|
|
SHA256 |
bbf358b3c8e302b1df6729ee9f995c96b95c3fa7eb80d220f9bdbba765071780
|
|
SHA512 |
da3fec2a40f85ff861acc6aa12dd0e182bd5967c19408db5c20d9b0c50448f5b1d1074db4f7e6b585699f3683888d41bca178f36aec171b93c9545b4485b06bf
|
|
ImpHash |
f610c154e7fab83c6a6dc33a2d2cd4bb
|
Icon |
Hash: 9885576d8bbac84f6d224ac0c02a930f
Fuzzy: 28621522899d1decee194e5c9af678f7 dHash: 8092b8b970703071 |
Image Base | 0x00400000 |
Entry Point | 0x00410000 |
Compilation Time | 2015-01-24 23:19:07 |
Checksum | 0x00000000 (Actual: 0x002491b4) |
OS Version | 1.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
6 libraries
KERNEL32, USER32, bwcc32, ADVAPI32, WINMM, GDI32 |
Exports | 2 functions |
Resources | 283 Resources |
Sections | 6 Sections |
Comments | Spegni il computer ed esci di casa... |
CompanyName | Obscured Truckware [Andrea Bonomi, Emanuele Caccialanza, Daniele Gazzarri.] |
FileDescription | Tabboz Simulator |
FileVersion | 1, 0, 0, 2000 |
InternalName | Tabboz Simulator 32 |
LegalCopyright | Copyright © 1997-2000 by Obscured Truckware |
OriginalFilename | Tabboz.exe |
ProductName | Tabboz Simulator |
ProductVersion | 1, 0, 0, 2000 |
Translation | 0x0410 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
CODE |
0x00010000 |
65,536 bytes | 63,488 bytes | 6.32 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
EEB01FAB272538DBCDAD854EA86F1615 |
DATA |
0x00020000 |
36,864 bytes | 31,744 bytes | 4.63 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
046F6DA4F5A9294FE47CA6FFA4FFE8A4 |
.idata |
0x00030000 |
4,096 bytes | 2,048 bytes | 4.51 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D02DF2D2A01AB6F391DB3D29BFDBC6A7 |
.edata |
0x00040000 |
4,096 bytes | 512 bytes | 1.11 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
04B4F0755AEF05DEB2B908A70DB60E91 |
.reloc |
0x00050000 |
8,192 bytes | 5,632 bytes | 6.74 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
C321A8561AFEBA5F3D50112225EB454D |
.rsrc |
0x00060000 |
2,285,568 bytes | 2,285,568 bytes | 6.93 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
9EC3DC320FC69B4BF734E26B5551C3EF |
2 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_CURSOR | 2 | 616 bytes | |
RT_BITMAP | 123 | 2,110,962 bytes | |
RT_ICON | 23 | 36,568 bytes | |
RT_MENU | 1 | 748 bytes | |
RT_DIALOG | 81 | 100,842 bytes | |
RT_STRING | 27 | 19,500 bytes | |
RT_GROUP_CURSOR | 2 | 40 bytes | |
RT_GROUP_ICON | 23 | 460 bytes | |
RT_VERSION | 1 | 1,032 bytes |
Product | Tabboz Simulator |
Description | Tabboz Simulator |
File Version | 1, 0, 0, 2000 |
Original Name | Tabboz.exe |
Internal Name | Tabboz Simulator 32 |
Copyright | Copyright © 1997-2000 by Obscured Truckware |
✓ This file has been digitally signed and the certificate chain has been verified
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important