filenameMyAdd.dll
size40396 (0x9dcc)
md5270c8d30f420842974111fe59d758867
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
156303192
152201151
170303197
147307295
1054
171303195
155303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5153345a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion10.0
SizeOfCode0x1400
SizeOfInitializedData0x1a00
SizeOfUninitializedData0
AddressOfEntryPoint0x1e10
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x9000
SizeOfHeaders0x400
CheckSum0x7e25
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
.text0x10000x13620x1400R-X CODE
.rdata0x30000x110a0x1200R-- IDATA
.data0x50000x2300x200RW- IDATA
.pdata0x60000x1f80x200R-- IDATA
.rsrc0x70000x1b40x200R-- IDATA
.reloc0x80000x5c0x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x40200xea
IMPORT0x38dc0x50
RESOURCE0x70000x1b4
EXCEPTION0x60000x1f8
SECURITY00
BASERELOC0x80000x34
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x1c8
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#23461252
module_namehintordfunction_name
KERNEL32.dll537GetModuleFileNameA
KERNEL32.dll539GetModuleHandleA
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll666GetTickCount
KERNEL32.dll937QueryPerformanceCounter
KERNEL32.dll1216Sleep
KERNEL32.dll203DecodePointer
KERNEL32.dll238EncodePointer
KERNEL32.dll640GetSystemTimeAsFileTime
mclmcrrt8_0.dll78array_ref_getV_int_proxy
mclmcrrt8_0.dll276mclcppGetArrayBuffer_proxy
mclmcrrt8_0.dll12array_buffer_set_proxy
mclmcrrt8_0.dll8array_buffer_add_proxy
mclmcrrt8_0.dll274mclcppFeval_proxy
mclmcrrt8_0.dll10array_buffer_get_proxy
mclmcrrt8_0.dll14array_buffer_to_cell_proxy
mclmcrrt8_0.dll160mclFeval_proxy
mclmcrrt8_0.dll210mclGetStackTrace_proxy
mclmcrrt8_0.dll163mclFreeStackTrace_proxy
mclmcrrt8_0.dll265mclTerminateInstance_proxy
mclmcrrt8_0.dll282mclmcrInitialize_proxy
mclmcrrt8_0.dll176mclGetEmbeddedCtfStream_proxy
mclmcrrt8_0.dll221mclInitializeComponentInstanceEmbedded_proxy
mclmcrrt8_0.dll156mclDestroyStream_proxy
mclmcrrt8_0.dll104array_ref_number_of_elements_proxy
mclmcrrt8_0.dll70array_ref_classID_proxy
mclmcrrt8_0.dll277mclcppGetLastError_proxy
mclmcrrt8_0.dll131error_info_get_message_proxy
mclmcrrt8_0.dll431ref_count_obj_release_proxy
mclmcrrt8_0.dll430ref_count_obj_addref_proxy
mclmcrrt8_0.dll272mclcppCreateError_proxy
mclmcrrt8_0.dll270mclWrite_proxy
MSVCR100.dll646_initterm
MSVCR100.dll925_onexit
MSVCR100.dll758_lock
MSVCR100.dll328__dllonexit
MSVCR100.dll1115_unlock
MSVCR100.dll320__clean_type_info_names_internal
MSVCR100.dll238public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR100.dll256void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR100.dll287__CppXcptFilter
MSVCR100.dll286__C_specific_handler
MSVCR100.dll414_amsg_exit
MSVCR100.dll498_encoded_null
MSVCR100.dll1379free
MSVCR100.dll647_initterm_e
MSVCR100.dll93public: virtual __cdecl std::exception::~exception(void) __ptr64

??1exception@std@@UEAA@XZ

MSVCR100.dll296__CxxFrameHandler3
MSVCR100.dll775_malloc_crt
MSVCR100.dll37public: __cdecl std::exception::exception(void) __ptr64

??0exception@std@@QEAA@XZ

MSVCR100.dll270_CxxThrowException
MSVCR100.dll36public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64

??0exception@std@@QEAA@AEBV01@@Z

MSVCR100.dll101void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

ordentry_vafunction_name
10x18d0?MyAdd@@YAXHAEAVmwArray@@AEBV1@1@Z
20x1470MyAddInitialize
30x13a0MyAddInitializeWithHandlers
40x14b0MyAddPrintStackTrace
50x1490MyAddTerminate
60x1550mlxMyAdd
module_nameMyAdd.dll
flags0
timestamp2013-03-27 18:03:06
version0.0
ordinal_base1
nFunctions6
nNames6
Names(6)0x4060
Functions(6)0x4048
NameOrdinals(6)0x4078
offsetsizetypecomment
15c115HTM#
320027596ZIP#
Scanning the drive for archives:
1 file, 40396 bytes (40 KiB)


--
Type = zip
Offset = 12800
Physical Size = 27596

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2013-04-28 02:03:04 .....           55           53  toolbox/local/Contents.m
2013-04-28 02:03:04 .....           54           53  toolbox/compiler/Contents.m
2013-04-28 02:03:04 .....         1484         1489  toolbox/compiler/system_dependent.m
2013-04-28 02:03:04 .....          197          153  .matlab/MATLAB_Editor_State.xml
2013-04-28 02:03:04 .....          163          105  .matlab/MATLAB_Help_Browser_State.xml
2013-04-28 02:03:04 .....           40           42  .matlab/MLintDefaultSettings.txt
2013-04-28 02:03:04 .....         4407         1431  .matlab/compopts.bat
2013-04-28 02:03:04 .....          203          117  .matlab/help_browser_toolbar.xml
2013-04-28 02:03:04 .....          751          392  .matlab/matlab.prf
2013-04-28 02:03:04 .....         6708          741  .matlab/matlab.settings
2013-04-28 02:03:04 .....        10181         1571  .matlab/plotpickercache.xml
2013-04-28 02:03:04 .....          779          784  .matlab/publish_configurations.m
2013-04-28 02:03:04 .....          584          589  .matlab/run_configurations.m
2013-04-28 02:03:04 .....          732          316  .matlab/shortcuts_2.xml
2013-04-28 02:03:04 .....          794          799  toolbox/compiler/ctfroot.m
2013-04-28 02:03:04 .....          704          709  toolbox/local/handle_graphicsrc.m
2013-04-28 02:03:04 .....         1544         1549  toolbox/local/hgrc.m
2013-04-28 02:03:04 .....          944          949  toolbox/local/initprefs.m
2013-04-28 02:03:04 .....         1949         1954  toolbox/local/matlabrc.m
2013-04-28 02:03:04 .....         4739         4744  toolbox/local/pathdef.m
2013-04-28 02:03:04 .....          914          919  toolbox/local/printopt.m
2013-04-28 02:03:04 .....         1364         1369  toolbox/local/userpath.m
2013-04-28 02:03:04 .....          659          664  MyAdd/MyAdd.m
2013-04-28 02:03:04 .....         6755         1522  .META/manifest.xml
2013-04-28 02:03:04 .....         3707          650  .META/filemanifest.xml
2013-04-28 02:03:04 .....         1017          302  [Content_Types].xml
2013-04-28 02:03:04 .....          443          214  _rels/.rels
------------------- ----- ------------ ------------  ------------------------
2013-04-28 02:03:04              51871        24180  27 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK