filenamespds.dll
size2553855 (0x26f7ff)
md51fc299646f6783d80e92cb944f5ff8bb
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x3cfde376
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion4.20
SizeOfCode0xee800
SizeOfInitializedData0x20e00
SizeOfUninitializedData0
AddressOfEntryPoint0xdb730
BaseOfCode0x1000
BaseOfData0xf0000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x113000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ DLL

Sections

namevavsizeraw sizeflags
.text0x10000xee7ef0xee800R-X CODE
.rdata0xf00000x121a0x1400R-- IDATA
.data0xf20000x17d540x15a00RW- IDATA
.idata0x10a0000xc600xe00RW- IDATA
.rsrc0x10b0000x4700x600RW- IDATA
.reloc0x10c0000x665c0x6800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xf10e80x132
IMPORT0x10a0000x50
RESOURCE0x10b0000x470
EXCEPTION00
SECURITY00
BASERELOC0x10c0000x665c
DEBUG0xf00000x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10a2700x220
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#110480
module_namehintordfunction_name
WSOCK32.dll115
WSOCK32.dll57
WSOCK32.dll52
WSOCK32.dll11
WSOCK32.dll15
WSOCK32.dll23
WSOCK32.dll111
WSOCK32.dll4
WSOCK32.dll3
WSOCK32.dll2
WSOCK32.dll13
WSOCK32.dll6
WSOCK32.dll14
WSOCK32.dll1
WSOCK32.dll51
WSOCK32.dll19
WSOCK32.dll10
WSOCK32.dll56
WSOCK32.dll55
WSOCK32.dll18
WSOCK32.dll12
WSOCK32.dll16
WSOCK32.dll9
KERNEL32.dll32257GetTempPathA
KERNEL32.dll3073GetCurrentThreadId
KERNEL32.dll12288CreateDirectoryA
KERNEL32.dll37121GetVolumeInformationA
KERNEL32.dll39938SetLastError
KERNEL32.dll5121GetDiskFreeSpaceExA
KERNEL32.dll3587WriteFile
KERNEL32.dll15618ReadFile
KERNEL32.dll38146SetFilePointer
KERNEL32.dll29185GetSystemInfo
KERNEL32.dll43009GlobalMemoryStatus
KERNEL32.dll14080CreateFileA
KERNEL32.dll28416EnterCriticalSection
KERNEL32.dll50433InitializeCriticalSection
KERNEL32.dll56833LeaveCriticalSection
KERNEL32.dll7680CloseHandle
KERNEL32.dll23040DeleteCriticalSection
KERNEL32.dll41728FindFirstFileA
KERNEL32.dll44032FindNextFileA
KERNEL32.dll40704FindClose
KERNEL32.dll9473GetFileSize
KERNEL32.dll56578UnlockFileEx
KERNEL32.dll61697LockFileEx
KERNEL32.dll35842SetEndOfFile
KERNEL32.dll11521GetLastError
KERNEL32.dll60930VirtualAlloc
KERNEL32.dll61698VirtualFree
KERNEL32.dll57089LoadLibraryA
KERNEL32.dll21249GetProcAddress
KERNEL32.dll55298TryEnterCriticalSection
KERNEL32.dll13312CreateEventA
KERNEL32.dll20994ResetEvent
KERNEL32.dll64770WaitForSingleObject
KERNEL32.dll36866SetEvent
KERNEL32.dll49922Sleep
KERNEL32.dll2817GetCurrentThread
KERNEL32.dll21760DebugBreak
KERNEL32.dll18944CreateSemaphoreA
KERNEL32.dll18946ReleaseSemaphore
KERNEL32.dll53762TlsGetValue
KERNEL32.dll54018TlsSetValue
KERNEL32.dll7937GetExitCodeThread
KERNEL32.dll53250TlsAlloc
KERNEL32.dll53506TlsFree
KERNEL32.dll14336CreateFileMappingA
KERNEL32.dll2818OpenFileMappingA
KERNEL32.dll62721MapViewOfFile
KERNEL32.dll56834UnmapViewOfFile
KERNEL32.dll36609GetVersionExA
KERNEL32.dll47617HeapFree
KERNEL32.dll46081HeapAlloc
KERNEL32.dll2561GetCurrentProcessId
KERNEL32.dll55808GetCommandLineA
KERNEL32.dll14849GetModuleHandleA
KERNEL32.dll36353GetVersion
KERNEL32.dll35073GetTimeZoneInformation
KERNEL32.dll29697GetSystemTime
KERNEL32.dll12033GetLocalTime
KERNEL32.dll35840ExitProcess
KERNEL32.dll51970TerminateProcess
KERNEL32.dll2305GetCurrentProcess
KERNEL32.dll10241GetFileType
KERNEL32.dll23552DeleteFileA
KERNEL32.dll39168FileTimeToSystemTime
KERNEL32.dll38912FileTimeToLocalFileTime
KERNEL32.dll5889GetDriveTypeA
KERNEL32.dll8193GetFileAttributesA
KERNEL32.dll64257MoveFileA
KERNEL32.dll48385HeapReAlloc
KERNEL32.dll3072Beep
KERNEL32.dll19712CreateThread
KERNEL32.dll36096ExitThread
KERNEL32.dll47105HeapDestroy
KERNEL32.dll46593HeapCreate
KERNEL32.dll37888FatalAppExitA
KERNEL32.dll38914SetHandleCount
KERNEL32.dll26625GetStdHandle
KERNEL32.dll26113GetStartupInfoA
KERNEL32.dll514MultiByteToWideChar
KERNEL32.dll56321LCMapStringA
KERNEL32.dll259WideCharToMultiByte
KERNEL32.dll56577LCMapStringW
KERNEL32.dll14337GetModuleFileNameA
KERNEL32.dll52992GetCPInfo
KERNEL32.dll51456GetACP
KERNEL32.dll17921GetOEMCP
KERNEL32.dll49408FreeEnvironmentStringsA
KERNEL32.dll6401GetEnvironmentStrings
KERNEL32.dll49664FreeEnvironmentStringsW
KERNEL32.dll6913GetEnvironmentStringsW
KERNEL32.dll22274RtlUnwind
KERNEL32.dll47360FlushFileBuffers
KERNEL32.dll43010SetStdHandle
KERNEL32.dll10497GetFullPathNameA
KERNEL32.dll1793GetCurrentDirectoryA
KERNEL32.dll34818SetCurrentDirectoryA
KERNEL32.dll12290RaiseException
KERNEL32.dll27650SetConsoleCtrlHandler
KERNEL32.dll56066UnhandledExceptionFilter
KERNEL32.dll26881GetStringTypeA
KERNEL32.dll27649GetStringTypeW
KERNEL32.dll56065IsValidLocale
KERNEL32.dll55553IsValidCodePage
KERNEL32.dll35329GetUserDefaultLCID
KERNEL32.dll9216CompareStringA
KERNEL32.dll9472CompareStringW
KERNEL32.dll36098SetEnvironmentVariableA
KERNEL32.dll12289GetLocaleInfoA
KERNEL32.dll12545GetLocaleInfoW
ADVAPI32.dll62208GetUserNameA
ordentry_vafunction_name
10x1a04spqlcolinfo
20x1370spqlconnect
30x14bcspqldisconnect
40x1a28spqlfetch
50x1924spqlfreestok
60x1b88spqlgetdbq
70x1ba8spqlgetsvals
80x1b34spqlgmsg
90x11dcspqlinit
100x151cspqlperform
110x19e8spqltabinfo
120x1308spqlterm
module_namespds.dll
flags0
timestamp2002-06-05 10:09:58
version0.0
ordinal_base1
nFunctions12
nNames12
Names(12)0xf1140
Functions(12)0xf1110
NameOrdinals(12)0xf1170

StringTable 040904e4

CompanyNameSAS Institute Inc.
FileDescriptionThe SAS System for Windows
FileVersion0.00.1023271791
InternalNamespds
LegalCopyrightCopyright (c) 1999 by SAS Institute Inc.
OriginalFilenamespds.dll
ProductNameThe SAS System for Windows
ProductVersion0.00

VS_FIXEDFILEINFO

FileVersion0.0.15613.58223
ProductVersion0.0.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
01103360DLL06/05/2002 10:09:58#
15c115HTM#
10d6001450495BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK