filenameminerd.exe
size198144 (0x30600)
md519bf03d4986ccbc019f8d6141685a44d
typePE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x553f5d04
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion2.23
SizeOfCode0x2b400
SizeOfInitializedData0x30200
SizeOfUninitializedData0x1400
AddressOfEntryPoint0x14e0
BaseOfCode0x1000
BaseOfData0x2d000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x37000
SizeOfHeaders0x400
CheckSum0x32984
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2b2c40x2b400R-X CODE IDATA
.data0x2d0000x7240x800RW- IDATA
.rdata0x2e0000x30340x3200R-- IDATA
.bss0x320000x12600RW- UDATA
.idata0x340000xe080x1000RW- IDATA
.CRT0x350000x340x200RW- IDATA
.tls0x360000x200x200RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x340000xe08
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x360040x18
LOAD_CONFIG00
Bound_IAT00
IAT0x342940x208
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4360000x43601c0x4323ac0x43502000
module_namehintordfunction_name
libcurl-4.dllcurl_easy_cleanup
libcurl-4.dll3curl_easy_getinfo
libcurl-4.dll4curl_easy_init
libcurl-4.dll6curl_easy_perform
libcurl-4.dll7curl_easy_recv
libcurl-4.dll8curl_easy_reset
libcurl-4.dll9curl_easy_send
libcurl-4.dll10curl_easy_setopt
libcurl-4.dll21curl_global_init
libcurl-4.dll52curl_slist_append
libcurl-4.dll53curl_slist_free_all
libcurl-4.dll57curl_version
KERNEL32.dll212DeleteCriticalSection
KERNEL32.dll239EnterCriticalSection
KERNEL32.dll452GetCurrentProcess
KERNEL32.dll453GetCurrentProcessId
KERNEL32.dll456GetCurrentThread
KERNEL32.dll457GetCurrentThreadId
KERNEL32.dll515GetLastError
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll581GetProcAddress
KERNEL32.dll612GetStartupInfoA
KERNEL32.dll629GetSystemInfo
KERNEL32.dll635GetSystemTimeAsFileTime
KERNEL32.dll663GetTickCount
KERNEL32.dll667GetTimeZoneInformation
KERNEL32.dll747InitializeCriticalSection
KERNEL32.dll806LeaveCriticalSection
KERNEL32.dll915QueryPerformanceCounter
KERNEL32.dll1117SetThreadPriority
KERNEL32.dll1127SetUnhandledExceptionFilter
KERNEL32.dll1140Sleep
KERNEL32.dll1154TerminateProcess
KERNEL32.dll1161TlsGetValue
KERNEL32.dll1174UnhandledExceptionFilter
KERNEL32.dll1206VirtualProtect
KERNEL32.dll1209VirtualQuery
msvcrt.dll46__argv
msvcrt.dll55__dllonexit
msvcrt.dll58__getmainargs
msvcrt.dll59__initenv
msvcrt.dll68__lconv_init
msvcrt.dll104__set_app_type
msvcrt.dll107__setusermatherr
msvcrt.dll121_acmdln
msvcrt.dll142_amsg_exit
msvcrt.dll159_cexit
msvcrt.dll208_errno
msvcrt.dll219_exit
msvcrt.dll243_fmode
msvcrt.dll304_initterm
msvcrt.dll308_iob
msvcrt.dll405_lock
msvcrt.dll562_onexit
msvcrt.dll630_snwprintf
msvcrt.dll680time
msvcrt.dll682localtime
msvcrt.dll692_stricmp
msvcrt.dll702_strnicmp
msvcrt.dll752_unlock
msvcrt.dll846calloc
msvcrt.dll856exit
msvcrt.dll859fclose
msvcrt.dll860feof
msvcrt.dll862fflush
msvcrt.dll863fgetc
msvcrt.dll870fopen
msvcrt.dll872fprintf
msvcrt.dll874fputc
msvcrt.dll879free
msvcrt.dll888fwprintf
msvcrt.dll890fwrite
msvcrt.dll895getenv
msvcrt.dll908islower
msvcrt.dll911isspace
msvcrt.dll912isupper
msvcrt.dll926isxdigit
msvcrt.dll930localeconv
msvcrt.dll934malloc
msvcrt.dll940memchr
msvcrt.dll941memcmp
msvcrt.dll942memcpy
msvcrt.dll943memmove
msvcrt.dll945memset
msvcrt.dll953puts
msvcrt.dll956qsort
msvcrt.dll958raise
msvcrt.dll960realloc
msvcrt.dll969signal
msvcrt.dll972sprintf
msvcrt.dll978strcat
msvcrt.dll980strchr
msvcrt.dll981strcmp
msvcrt.dll983strcpy
msvcrt.dll986strerror
msvcrt.dll989strlen
msvcrt.dll992strncmp
msvcrt.dll993strncpy
msvcrt.dll996strrchr
msvcrt.dll998strstr
msvcrt.dll1000strtok
msvcrt.dll1002strtol
msvcrt.dll1008_vsnprintf
msvcrt.dll1088abort
msvcrt.dll1097atoi
msvcrt.dll1118vfprintf
msvcrt.dll1137wcscpy
msvcrt.dll1229_strdup
libwinpthread-1.dll41pthread_cond_destroy
libwinpthread-1.dll42pthread_cond_init
libwinpthread-1.dll43pthread_cond_signal
libwinpthread-1.dll44pthread_cond_timedwait
libwinpthread-1.dll45pthread_cond_wait
libwinpthread-1.dll52pthread_create
libwinpthread-1.dll65pthread_join
libwinpthread-1.dll69pthread_mutex_destroy
libwinpthread-1.dll70pthread_mutex_init
libwinpthread-1.dll71pthread_mutex_lock
libwinpthread-1.dll74pthread_mutex_unlock
USER32.dll443MessageBoxW
WS2_32.dll54WSAIoctl
WS2_32.dll161select
WS2_32.dll166socket
offsetsizetypecomment
0198144EXE04/28/2015 10:12:20#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x323ac