filenameCNMDR38.DLL
size167424 (0x28e00)
md50da8f0f034dde9a94af4fbb4712aadaf
typePE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
1075
2592109
6492103
6392101
6991111
28917840
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3c64374f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.0
SizeOfCode0x26c00
SizeOfInitializedData0x1e00
SizeOfUninitializedData0
AddressOfEntryPoint0x9122
BaseOfCode0x1000
BaseOfData0x28000
ImageBase0x66400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.10
Reserved10
SizeOfImage0x2c000
SizeOfHeaders0x400
CheckSum0x340df
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x26bc50x26c00R-X CODE
.data0x280000x11a00x1200RW- IDATA
.rsrc0x2a0000x4000x400R-- IDATA
.reloc0x2b0000x73a0x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x27b400x85
IMPORT0x275240x64
RESOURCE0x2a0000x400
EXCEPTION00
SECURITY00
BASERELOC0x2b0000x5dc
DEBUG0x11400x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x124
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#19280
module_namehintordfunction_name
msvcrt.dll182_adjust_fdiv
msvcrt.dll727malloc
msvcrt.dll314_initterm
msvcrt.dll676free
msvcrt.dll746qsort
msvcrt.dll812wcslen
msvcrt.dll809wcscpy
msvcrt.dll817wcsrchr
msvcrt.dll807wcscmp
msvcrt.dll806wcschr
msvcrt.dll815wcsncpy
KERNEL32.dll766SetLastError
KERNEL32.dll478GlobalFree
KERNEL32.dll471GlobalAlloc
KERNEL32.dll561LoadLibraryW
KERNEL32.dll229FreeLibrary
KERNEL32.dll393GetProcAddress
KERNEL32.dll592MulDiv
KERNEL32.dll485GlobalReAlloc
KERNEL32.dll121DeleteFileW
KERNEL32.dll439GetTempPathW
KERNEL32.dll437GetTempFileNameW
KERNEL32.dll346GetLastError
KERNEL32.dll753SetFilePointer
KERNEL32.dll886WriteFile
KERNEL32.dll656ReadFile
KERNEL32.dll44CloseHandle
KERNEL32.dll77CreateFileW
WINSPOOL.DRV75EndPagePrinter
WINSPOOL.DRV163StartPagePrinter
WINSPOOL.DRV77EnumFormsW
WINSPOOL.DRV116GetPrinterDataW
WINSPOOL.DRV121GetPrinterW
WINSPOOL.DRV165WritePrinter
WINSPOOL.DRV120GetPrinterDriverW
GDI32.dll48EngTextOut
GDI32.dll5CLIPOBJ_cEnumStart
GDI32.dll4CLIPOBJ_bEnum
GDI32.dll11EngCheckAbort
GDI32.dll25EngEraseSurface
GDI32.dll39EngPaint
GDI32.dll46EngStrokeAndFillPath
GDI32.dll26EngFillPath
GDI32.dll47EngStrokePath
GDI32.dll33EngLineTo
GDI32.dll20EngDeleteClip
GDI32.dll29EngGetCurrentCodePage
GDI32.dll14EngCreateBitmap
GDI32.dll9EngAssociateSurface
GDI32.dll35EngLockSurface
GDI32.dll17EngCreateDeviceSurface
GDI32.dll36EngMarkBandingSurface
GDI32.dll62HT_Get8BPPMaskPalette
GDI32.dll18EngCreatePalette
GDI32.dll51EngUnlockSurface
GDI32.dll24EngDeleteSurface
GDI32.dll21EngDeletePalette
GDI32.dll3BRUSHOBJ_ulGetBrushColor
GDI32.dll10EngBitBlt
GDI32.dll45EngStretchBltROP
GDI32.dll40EngPlgBlt
GDI32.dll13EngCopyBits
GDI32.dll44EngStretchBlt
GDI32.dll75XLATEOBJ_cGetPalette
GDI32.dll49EngTransparentBlt
GDI32.dll77XLATEOBJ_iXlate
GDI32.dll32EngGradientFill
GDI32.dll8EngAlphaBlend
GDI32.dll15EngCreateClip
ordentry_vafunction_name
10x3cb6DrvDisableDriver
20x3c76DrvEnableDriver
30x3c36DrvQueryDriverInfo
module_nameCNMDRV.dll
flags0
timestamp2002-02-08 20:25:12
version0.0
ordinal_base1
nFunctions3
nNames3
Names(3)0x27b74
Functions(3)0x27b68
NameOrdinals(3)0x27b80

StringTable 040904B0

CompanyNameCANON INC.
FileDescriptionBJ Raster Printer Graphics Driver
FileVersion1.52.2.0
InternalNameCNMDRV.DLL
LegalCopyrightCopyright CANON INC. 1999-2002 All Rights Reserved
OriginalFilenameCNMDRV.DLL
ProductNameCanon BJ Raster Printer Driver for Microsoft Windows XP / Windows 2000
ProductVersion1.52.2.0

VS_FIXEDFILEINFO

FileVersion0.3.0.0
ProductVersion1.52.2.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType3
FileSubtype1
offsetsizetypecomment
0167424DLL02/08/2002 20:38:39#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK