mod_wl.so

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	mod_wl.so
size	237568 (0x3a000)
md5	15eb53584e24ea41f00f28dc5821fdf8

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
12	7291	9
14	7299	3
10	8047	5
11	8047	5
4	8047	4
19	8034	4
1	0	190
93	3077	5
0	0	21
4	8447	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x4ecc055a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x22000
SizeOfInitializedData	0x11000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x27b81
BaseOfCode	0x7000
BaseOfData	0x29000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x3a000
SizeOfHeaders	0x7000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x7000	0x20c70	0x21000	R-X CODE
.text1	0x28000	0xb3c	0x1000	R-X CODE
.rdata	0x29000	0x156c	0x2000	R-- IDATA
.data	0x2b000	0x910	0x1000	RW- IDATA
.data1	0x2c000	0xa678	0xb000	RW- IDATA
.reloc	0x37000	0x282a	0x3000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x2a520	0x4c
IMPORT	0x2936c	0x8c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x37000	0x20e4
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x29000	0x2ec
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
libhttpd.dll	502		ap_set_deprecated
libhttpd.dll	212		_ap_hook_post_config@16
libhttpd.dll	157		_ap_hook_child_init@16
libhttpd.dll	202		_ap_hook_handler@16
libhttpd.dll	220		_ap_hook_translate_name@16
libhttpd.dll	208		_ap_hook_map_to_storage@16
libhttpd.dll	166		_ap_hook_fixups@16
libhttpd.dll	267		_ap_mpm_query@8
libhttpd.dll	235		_ap_is_matchexp@4
libhttpd.dll	415		_ap_strcmp_match@8
libhttpd.dll	37		_ap_check_cmd_context@8
libhttpd.dll	252		_ap_matches_request_vhost@12
libhttpd.dll	376		_ap_rwrite@12
libhttpd.dll	135		_ap_get_server_name@4
libhttpd.dll	136		_ap_get_server_port@4
libhttpd.dll	335		_ap_rflush@4
libhttpd.dll	141		_ap_get_status_line@4
libhttpd.dll	392		_ap_set_content_type@8
libhttpd.dll	339		_ap_rputs@8
libhttpd.dll	308		_ap_regexec@20
libhttpd.dll	293		_ap_pregcomp@12
libhttpd.dll	294		_ap_pregfree@8
libhttpd.dll	148		_ap_getword_nc@12
libhttpd.dll	269		_ap_no2slash@4
libhttpd.dll	422		_ap_unescape_url@4
libhttpd.dll	399		_ap_setup_client_block@8
libhttpd.dll	403		_ap_should_client_block@4
libhttpd.dll	116		_ap_get_client_block@12
libhttpd.dll	41		_ap_construct_url@12
libhttpd.dll	489		ap_real_exit_code
libhttpd.dll	477		ap_log_error
libhttpd.dll	479		ap_log_rerror
libapr-1.dll	233		_apr_pool_userdata_set@16
libapr-1.dll	342		_apr_table_elts@4
libapr-1.dll	344		_apr_table_make@8
libapr-1.dll	232		_apr_pool_userdata_get@12
libapr-1.dll	336		_apr_table_add@12
libapr-1.dll	328		_apr_strerror@12
libapr-1.dll	307		_apr_socket_create@20
libapr-1.dll	306		_apr_socket_connect@8
libapr-1.dll	297		_apr_sockaddr_info_get@24
libapr-1.dll	369		_apr_thread_mutex_destroy@4
libapr-1.dll	341		_apr_table_copy@8
libapr-1.dll	191		_apr_pmemdup@12
libapr-1.dll	215		_apr_pool_clear@4
libapr-1.dll	338		_apr_table_clear@4
libapr-1.dll	304		_apr_socket_bind@8
libapr-1.dll	314		_apr_socket_opt_set@12
libapr-1.dll	301		_apr_socket_addr_get@12
libapr-1.dll	143		_apr_is_empty_table@4
libapr-1.dll	335		_apr_strtok@12
libapr-1.dll	349		_apr_table_set@12
libapr-1.dll	423		apr_psprintf
libapr-1.dll	325		_apr_socket_timeout_set@12
libapr-1.dll	298		_apr_sockaddr_ip_get@8
libapr-1.dll	305		_apr_socket_close@4
libapr-1.dll	175		_apr_os_sock_get@8
libapr-1.dll	90		_apr_file_puts@8
libapr-1.dll	425		apr_snprintf
libapr-1.dll	414		_apr_vsnprintf@16
libapr-1.dll	404		_apr_time_now@0
libapr-1.dll	402		_apr_time_exp_lt@12
libapr-1.dll	223		_apr_pool_destroy@4
libapr-1.dll	76		_apr_file_open@20
libapr-1.dll	327		_apr_stat@16
libapr-1.dll	80		_apr_file_open_stderr@8
libapr-1.dll	82		_apr_file_open_stdout@8
libapr-1.dll	262		_apr_procattr_create@8
libapr-1.dll	267		_apr_procattr_io_set@16
libapr-1.dll	260		_apr_procattr_child_out_set@12
libapr-1.dll	257		_apr_procattr_child_err_set@12
libapr-1.dll	261		_apr_procattr_cmdtype_set@8
libapr-1.dll	263		_apr_procattr_detach_set@8
libapr-1.dll	258		_apr_procattr_child_errfn_set@8
libapr-1.dll	265		_apr_procattr_error_check_set@8
libapr-1.dll	235		_apr_proc_create@24
libapr-1.dll	227		_apr_pool_note_subprocess@12
libapr-1.dll	405		_apr_tokenize_to_argv@12
libapr-1.dll	34		_apr_cpystrn@12
libapr-1.dll	185		_apr_palloc@8
libapr-1.dll	270		_apr_pstrdup@8
libapr-1.dll	424		apr_pstrcat
libapr-1.dll	343		_apr_table_get@8
libapr-1.dll	350		_apr_table_setn@12
libapr-1.dll	272		_apr_pstrndup@12
libapr-1.dll	333		_apr_strtoff@16
libapr-1.dll	359		_apr_thread_cond_signal@4
libapr-1.dll	360		_apr_thread_cond_timedwait@16
libapr-1.dll	356		_apr_thread_cond_create@8
libapr-1.dll	370		_apr_thread_mutex_lock@4
libapr-1.dll	373		_apr_thread_mutex_unlock@4
libapr-1.dll	368		_apr_thread_mutex_create@12
libapr-1.dll	219		_apr_pool_create_ex@16
libapr-1.dll	213		_apr_pool_cleanup_register@16
libapr-1.dll	422		apr_pool_cleanup_null
libapr-1.dll	351		_apr_table_unset@8
KERNEL32.dll	662		Sleep
KERNEL32.dll	450		LoadLibraryA
KERNEL32.dll	180		FreeLibrary
KERNEL32.dll	318		GetProcAddress
KERNEL32.dll	426		InitializeCriticalSection
KERNEL32.dll	85		DeleteCriticalSection
KERNEL32.dll	93		DisableThreadLibraryCalls
KERNEL32.dll	282		GetLastError
WSOCK32.dll		19
WSOCK32.dll		8
WSOCK32.dll		11
WSOCK32.dll		52
WSOCK32.dll		16
WSOCK32.dll		7
WSOCK32.dll		18
WSOCK32.dll		112
WSOCK32.dll		111
WSOCK32.dll		115
MSVCP60.dll	1632		struct std::nothrow_t const std::nothrow ?nothrow@std@@3Unothrow_t@1@B
MSVCP60.dll	158		public: __thiscall std::ios_base::Init::Init(void) ??0Init@ios_base@std@@QAE@XZ
MSVCP60.dll	265		public: __thiscall std::ios_base::Init::~Init(void) ??1Init@ios_base@std@@QAE@XZ
MSVCP60.dll	269		public: __thiscall std::_Winit::~_Winit(void) ??1_Winit@std@@QAE@XZ
MSVCP60.dll	1029		void __cdecl std::_Xlen(void) ?_Xlen@std@@YAXXZ
MSVCP60.dll	267		public: __thiscall std::_Lockit::~_Lockit(void) ??1_Lockit@std@@QAE@XZ
MSVCP60.dll	162		public: __thiscall std::_Lockit::_Lockit(void) ??0_Lockit@std@@QAE@XZ
MSVCP60.dll	1633		public: static unsigned int const std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::npos ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
MSVCP60.dll	533		class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > __cdecl std::operator+(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &) ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
MSVCP60.dll	1030		void __cdecl std::_Xran(void) ?_Xran@std@@YAXXZ
MSVCP60.dll	564		bool __cdecl std::operator<(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &) ??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
MSVCP60.dll	479		bool __cdecl std::operator==(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, char const *) ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
MSVCP60.dll	165		public: __thiscall std::_Winit::_Winit(void) ??0_Winit@std@@QAE@XZ
MSVCRT.dll	391		_open
MSVCRT.dll	386		_mkdir
MSVCRT.dll	618		getenv
MSVCRT.dll	708		strspn
MSVCRT.dll	678		rand
MSVCRT.dll	692		srand
MSVCRT.dll	579		clock
MSVCRT.dll	723		tolower
MSVCRT.dll	664		memmove
MSVCRT.dll	679		realloc
MSVCRT.dll	585		exit
MSVCRT.dll	576		calloc
MSVCRT.dll	481		_vsnprintf
MSVCRT.dll	179		_close
MSVCRT.dll	606		free
MSVCRT.dll	695		strchr
MSVCRT.dll	720		time
MSVCRT.dll	65		_CxxThrowException
MSVCRT.dll	700		strerror
MSVCRT.dll	704		strncmp
MSVCRT.dll	709		strstr
MSVCRT.dll	200		_errno
MSVCRT.dll	573		atoi
MSVCRT.dll	430		_snprintf
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	15		void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
MSVCRT.dll	257		_getpid
MSVCRT.dll	648		isxdigit
MSVCRT.dll	633		isspace
MSVCRT.dll	402		_purecall
MSVCRT.dll	724		toupper
MSVCRT.dll	624		isalnum
MSVCRT.dll	705		strncpy
MSVCRT.dll	712		strtol
MSVCRT.dll	690		sprintf
MSVCRT.dll	657		malloc
MSVCRT.dll	711		strtok
MSVCRT.dll	169		_callnewh
MSVCRT.dll	14		public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	390		_onexit
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	46		void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCRT.dll	271		_initterm
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	447		_strdup
MSVCRT.dll	442		_stat
MSVCRT.dll	535		_write
MSVCRT.dll	453		_strnicmp
MSVCRT.dll	477		_unlink
MSVCRT.dll	627		isdigit
MSVCRT.dll	408		_read
MSVCRT.dll	449		_stricmp
MSVCRT.dll	324		_lseek

ord	entry_va	function_name
1	0x2b65c	weblogic_module

module_name	mod_wl.so
flags	0
timestamp	2011-11-22 20:26:02
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x2a54c
Functions(1)	0x2a548
NameOrdinals(1)	0x2a550

show previews

offset	size	type	comment
0	237568	DLL	11/22/2011 20:26:02	#
15c1	15	HTM		#
2fc80	2483	HTM		#
30634	153	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK