filenameShtrihTemplate.dll
size98304 (0x18000)
md504e2a7495f0fa6ce12aa0b56d51e938d
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
223210051
2242100511
221210055
225210055
203655012
1057
225305018
220305011
219210051
222305011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x537b413e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x11600
SizeOfInitializedData0x6a00
SizeOfUninitializedData0
AddressOfEntryPoint0xbb70
BaseOfCode0x1000
BaseOfData0x13000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x1c000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x115b30x11600R-X CODE
.rdata0x130000x41a70x4200R-- IDATA
.data0x180000x91c0x600RW- IDATA
.idata0x190000x9d30xa00R-- IDATA
.rsrc0x1a0000x43c0x600R-- IDATA
.reloc0x1b0000xc390xe00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x16fe00x1c7
IMPORT0x191900x50
RESOURCE0x1a0000x43c
EXCEPTION00
SECURITY00
BASERELOC0x1b0000xa70
DEBUG0x137800x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x14b900x40
Bound_IAT00
IAT0x190000x190
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#23810
module_namehintordfunction_name
MSVCP120D.dll720char const * __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAPBDH@Z

MSVCP120D.dll102public: __thiscall std::_Lockit::_Lockit(int)

??0_Lockit@std@@QAE@H@Z

MSVCP120D.dll699char const * __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPBDH@Z

MSVCP120D.dll514public: struct std::_Iterator_base12 ** __thiscall std::_Container_base12::_Getpfirst(void)const

?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ

MSVCP120D.dll118public: __thiscall std::locale::id::id(unsigned int)

??0id@locale@std@@QAE@I@Z

MSVCP120D.dll728void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP120D.dll727void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP120D.dll724void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP120D.dll640public: void __thiscall std::_Container_base12::_Orphan_all(void)

?_Orphan_all@_Container_base12@std@@QAEXXZ

MSVCP120D.dll160public: __thiscall std::_Container_base12::~_Container_base12(void)

??1_Container_base12@std@@QAE@XZ

MSVCP120D.dll94public: __thiscall std::_Container_base12::_Container_base12(void)

??0_Container_base12@std@@QAE@XZ

MSVCP120D.dll165public: __thiscall std::_Lockit::~_Lockit(void)

??1_Lockit@std@@QAE@XZ

MSVCP120D.dll446void __cdecl std::_Debug_message(wchar_t const *, wchar_t const *, unsigned int)

?_Debug_message@std@@YAXPB_W0I@Z

MSVCR120D.dll1993wcslen
MSVCR120D.dll1523_wsetlocale
MSVCR120D.dll137void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR120D.dll1826mbstowcs
MSVCR120D.dll2014wcstombs
MSVCR120D.dll1835memset
MSVCR120D.dll842_invalid_parameter
MSVCR120D.dll406__CxxFrameHandler3
MSVCR120D.dll971_lock
MSVCR120D.dll1343_unlock
MSVCR120D.dll603_calloc_dbg
MSVCR120D.dll464__dllonexit
MSVCR120D.dll1139_onexit
MSVCR120D.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120D.dll401__CppXcptFilter
MSVCR120D.dll580_amsg_exit
MSVCR120D.dll989_malloc_dbg
MSVCR120D.dll740_free_dbg
MSVCR120D.dll366_CrtSetCheckCount
MSVCR120D.dll837_initterm
MSVCR120D.dll838_initterm_e
MSVCR120D.dll685_except_handler4_common
MSVCR120D.dll642_crt_debugger_hook
MSVCR120D.dll462__crtUnhandledException
MSVCR120D.dll461__crtTerminateProcess
MSVCR120D.dll311void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120D.dll430__clean_type_info_names_internal
MSVCR120D.dll376_CxxThrowException
MSVCR120D.dll1913strlen
MSVCR120D.dll1831memcpy
MSVCR120D.dll1833memmove
MSVCR120D.dll830_hypot
MSVCR120D.dll114void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR120D.dll112void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR120D.dll1154_purecall
MSVCR120D.dll349_CrtDbgReportW
KERNEL32.dll254DecodePointer
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll289EncodePointer
ordentry_vafunction_name
10x1041DestroyObject
20x1104GetClassNames
30x1069GetClassObject
40x10a5SetPlatformCapabilities
module_nameShtrihTemplate.dll
flags0
timestamp2014-05-20 11:49:18
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x17018
Functions(4)0x17008
NameOrdinals(4)0x17028
offsetsizetypecomment
098304DLL05/20/2014 11:49:18#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK