filename | Dumped01~Rip.dll | |
---|---|---|
size | 5850360 (0x5944f8) | |
md5 | 0d7f58f848a189d5f912d8583a15e450 | |
type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | scan pending | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x120 |
Rich Header
lib id | version | times used |
---|---|---|
259 | 29395 | 25 |
261 | 29395 | 179 |
260 | 31935 | 20 |
259 | 31935 | 24 |
257 | 29395 | 9 |
1 | 0 | 140 |
95 | 4035 | 13 |
15 | 4035 | 6 |
96 | 4035 | 123 |
261 | 31935 | 35 |
260 | 29395 | 28 |
265 | 32217 | 1 |
255 | 32217 | 1 |
258 | 32217 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
module_name | hint | ord | function_name |
---|---|---|---|
GDI32.dll | 55 | CreateDIBSection | |
GDI32.dll | 389 | DeleteDC | |
GDI32.dll | 392 | DeleteObject | |
GDI32.dll | 875 | SelectObject | |
GDI32.dll | 627 | GetCharacterPlacementA | |
GDI32.dll | 628 | GetCharacterPlacementW | |
GDI32.dll | 922 | SetTextColor | |
GDI32.dll | 882 | SetBkColor | |
GDI32.dll | 883 | SetBkMode | |
GDI32.dll | 666 | GetGlyphOutlineA | |
GDI32.dll | 659 | GetFontLanguageInfo | |
GDI32.dll | 64 | CreateFontIndirectA | |
GDI32.dll | 67 | CreateFontIndirectW | |
GDI32.dll | 920 | SetTextAlign | |
GDI32.dll | 904 | SetMapMode | |
GDI32.dll | 49 | CreateCompatibleDC | |
GDI32.dll | 474 | ExtTextOutA | |
GDI32.dll | 772 | MoveToEx | |
GDI32.dll | 475 | ExtTextOutW | |
GDI32.dll | 733 | GetTextMetricsA | |
GDI32.dll | 692 | GetObjectW | |
GDI32.dll | 734 | GetTextMetricsW | |
GDI32.dll | 690 | GetObjectA | |
ADVAPI32.dll | 616 | RegCloseKey | |
ADVAPI32.dll | 663 | RegOpenKeyA | |
ADVAPI32.dll | 677 | RegQueryValueExA | |
USER32.dll | 289 | GetAsyncKeyState | |
KERNEL32.dll | 1579 | WriteConsoleW | |
KERNEL32.dll | 1510 | VirtualProtect | |
KERNEL32.dll | 643 | GetModuleHandleA | |
KERNEL32.dll | 815 | GetVersionExA | |
KERNEL32.dll | 1029 | MultiByteToWideChar | |
KERNEL32.dll | 1560 | WideCharToMultiByte | |
KERNEL32.dll | 983 | LoadLibraryA | |
KERNEL32.dll | 701 | GetProcAddress | |
KERNEL32.dll | 1507 | VirtualFree | |
KERNEL32.dll | 1504 | VirtualAlloc | |
KERNEL32.dll | 1068 | OutputDebugStringA | |
KERNEL32.dll | 756 | GetSystemInfo | |
KERNEL32.dll | 923 | IsProcessorFeaturePresent | |
KERNEL32.dll | 1580 | WriteFile | |
KERNEL32.dll | 622 | GetLastError | |
KERNEL32.dll | 211 | CreateFileW | |
KERNEL32.dll | 142 | CloseHandle | |
KERNEL32.dll | 317 | EnterCriticalSection | |
KERNEL32.dll | 282 | DeleteCriticalSection | |
KERNEL32.dll | 979 | LeaveCriticalSection | |
KERNEL32.dll | 858 | HeapAlloc | |
KERNEL32.dll | 708 | GetProcessHeap | |
KERNEL32.dll | 862 | HeapFree | |
KERNEL32.dll | 1479 | UnhandledExceptionFilter | |
KERNEL32.dll | 1415 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 548 | GetCurrentProcess | |
KERNEL32.dll | 1446 | TerminateProcess | |
KERNEL32.dll | 1121 | QueryPerformanceCounter | |
KERNEL32.dll | 549 | GetCurrentProcessId | |
KERNEL32.dll | 553 | GetCurrentThreadId | |
KERNEL32.dll | 762 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 888 | InitializeSListHead | |
KERNEL32.dll | 916 | IsDebuggerPresent | |
KERNEL32.dll | 737 | GetStartupInfoW | |
KERNEL32.dll | 646 | GetModuleHandleW | |
KERNEL32.dll | 865 | HeapReAlloc | |
KERNEL32.dll | 1257 | RtlUnwind | |
KERNEL32.dll | 1143 | RaiseException | |
KERNEL32.dll | 897 | InterlockedFlushSList | |
KERNEL32.dll | 1352 | SetLastError | |
KERNEL32.dll | 313 | EncodePointer | |
KERNEL32.dll | 884 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 1464 | TlsAlloc | |
KERNEL32.dll | 1466 | TlsGetValue | |
KERNEL32.dll | 1467 | TlsSetValue | |
KERNEL32.dll | 1465 | TlsFree | |
KERNEL32.dll | 439 | FreeLibrary | |
KERNEL32.dll | 985 | LoadLibraryExW | |
KERNEL32.dll | 1122 | QueryPerformanceFrequency | |
KERNEL32.dll | 362 | ExitProcess | |
KERNEL32.dll | 645 | GetModuleHandleExW | |
KERNEL32.dll | 642 | GetModuleFileNameW | |
KERNEL32.dll | 739 | GetStdHandle | |
KERNEL32.dll | 603 | GetFileType | |
KERNEL32.dll | 967 | LCMapStringW | |
KERNEL32.dll | 524 | GetConsoleOutputCP | |
KERNEL32.dll | 520 | GetConsoleMode | |
KERNEL32.dll | 1337 | SetFilePointerEx | |
KERNEL32.dll | 275 | DecodePointer | |
KERNEL32.dll | 385 | FindClose | |
KERNEL32.dll | 391 | FindFirstFileExW | |
KERNEL32.dll | 408 | FindNextFileW | |
KERNEL32.dll | 929 | IsValidCodePage | |
KERNEL32.dll | 446 | GetACP | |
KERNEL32.dll | 678 | GetOEMCP | |
KERNEL32.dll | 461 | GetCPInfo | |
KERNEL32.dll | 482 | GetCommandLineA | |
KERNEL32.dll | 483 | GetCommandLineW | |
KERNEL32.dll | 580 | GetEnvironmentStringsW | |
KERNEL32.dll | 438 | FreeEnvironmentStringsW | |
KERNEL32.dll | 744 | GetStringTypeW | |
KERNEL32.dll | 1379 | SetStdHandle | |
KERNEL32.dll | 427 | FlushFileBuffers | |
KERNEL32.dll | 867 | HeapSize |
Scanning the drive for archives: 1 file, 5850360 bytes (5714 KiB) Errors: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK