minerd.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	minerd.exe
size	1689461 (0x19c775)
md5	22a276ee5ffeab71adcc2b9a6cee53a3

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xf
TimeDateStamp	0
PointerToSymbolTable	0x173c00
NumberOfSymbols	0x1b92
SizeOfOptionalHeader	0xe0
Characteristics	0x107
Magic	0x10b
LinkerVersion	2.24
SizeOfCode	0x120200
SizeOfInitializedData	0x1ae00
SizeOfUninitializedData	0x2200
AddressOfEntryPoint	0x14e0
BaseOfCode	0x1000
BaseOfData	0x122000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x17e000
SizeOfHeaders	0x400
CheckSum	0x1a49bf
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0xa00000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1200d0	0x120200	R-X CODE
.data	0x122000	0x10d4	0x1200	RW- IDATA
.rdata	0x124000	0x17f0c	0x18000	R-- IDATA
.bss	0x13c000	0x20a0	0	RW- UDATA
.idata	0x13f000	0x16c0	0x1800	RW- IDATA
.CRT	0x141000	0x38	0x200	RW- IDATA
.tls	0x142000	0x20	0x200	RW- IDATA
/4	0x143000	0x618	0x800	R-- IDATA DISCARDABLE
/19	0x144000	0x1caf4	0x1cc00	R-- IDATA DISCARDABLE
/31	0x161000	0x4d34	0x4e00	R-- IDATA DISCARDABLE
/45	0x166000	0x576c	0x5800	R-- IDATA DISCARDABLE
/57	0x16c000	0x2bd0	0x2c00	R-- IDATA DISCARDABLE
/70	0x16f000	0x4ea	0x600	R-- IDATA DISCARDABLE
/81	0x170000	0xce43	0xd000	R-- IDATA DISCARDABLE
/92	0x17d000	0xaf8	0xc00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x13f000	0x16c0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x142004	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x13f3f8	0x36c
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x542000	0x54201c	0x53c650	0x541020	0	0

module_name	hint	function_name
ADVAPI32.dll	176	CryptAcquireContextA
ADVAPI32.dll	179	CryptCreateHash
ADVAPI32.dll	182	CryptDestroyHash
ADVAPI32.dll	196	CryptGetHashParam
ADVAPI32.dll	200	CryptHashData
ADVAPI32.dll	203	CryptReleaseContext
KERNEL32.dll	83	CloseHandle
KERNEL32.dll	132	CreateEventA
KERNEL32.dll	173	CreateSemaphoreA
KERNEL32.dll	212	DeleteCriticalSection
KERNEL32.dll	234	DuplicateHandle
KERNEL32.dll	239	EnterCriticalSection
KERNEL32.dll	285	ExpandEnvironmentStringsA
KERNEL32.dll	351	FormatMessageA
KERNEL32.dll	356	FreeLibrary
KERNEL32.dll	452	GetCurrentProcess
KERNEL32.dll	453	GetCurrentProcessId
KERNEL32.dll	456	GetCurrentThread
KERNEL32.dll	457	GetCurrentThreadId
KERNEL32.dll	500	GetFileType
KERNEL32.dll	512	GetHandleInformation
KERNEL32.dll	515	GetLastError
KERNEL32.dll	532	GetModuleFileNameW
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	582	GetProcessAffinityMask
KERNEL32.dll	612	GetStartupInfoA
KERNEL32.dll	614	GetStdHandle
KERNEL32.dll	629	GetSystemInfo
KERNEL32.dll	635	GetSystemTimeAsFileTime
KERNEL32.dll	649	GetThreadContext
KERNEL32.dll	657	GetThreadPriority
KERNEL32.dll	663	GetTickCount
KERNEL32.dll	667	GetTimeZoneInformation
KERNEL32.dll	747	InitializeCriticalSection
KERNEL32.dll	806	LeaveCriticalSection
KERNEL32.dll	809	LoadLibraryA
KERNEL32.dll	890	PeekNamedPipe
KERNEL32.dll	915	QueryPerformanceCounter
KERNEL32.dll	941	ReadFile
KERNEL32.dll	962	ReleaseSemaphore
KERNEL32.dll	979	ResetEvent
KERNEL32.dll	982	ResumeThread
KERNEL32.dll	1038	SetCriticalSectionSpinCount
KERNEL32.dll	1053	SetEvent
KERNEL32.dll	1078	SetLastError
KERNEL32.dll	1089	SetProcessAffinityMask
KERNEL32.dll	1109	SetThreadContext
KERNEL32.dll	1117	SetThreadPriority
KERNEL32.dll	1127	SetUnhandledExceptionFilter
KERNEL32.dll	1140	Sleep
KERNEL32.dll	1143	SleepEx
KERNEL32.dll	1148	SuspendThread
KERNEL32.dll	1154	TerminateProcess
KERNEL32.dll	1159	TlsAlloc
KERNEL32.dll	1161	TlsGetValue
KERNEL32.dll	1162	TlsSetValue
KERNEL32.dll	1169	TryEnterCriticalSection
KERNEL32.dll	1174	UnhandledExceptionFilter
KERNEL32.dll	1192	VerSetConditionMask
KERNEL32.dll	1195	VerifyVersionInfoA
KERNEL32.dll	1206	VirtualProtect
KERNEL32.dll	1209	VirtualQuery
KERNEL32.dll	1216	WaitForMultipleObjects
KERNEL32.dll	1218	WaitForSingleObject
msvcrt.dll	46	__argv
msvcrt.dll	55	__dllonexit
msvcrt.dll	58	__getmainargs
msvcrt.dll	59	__initenv
msvcrt.dll	68	__lconv_init
msvcrt.dll	104	__set_app_type
msvcrt.dll	107	__setusermatherr
msvcrt.dll	121	_acmdln
msvcrt.dll	142	_amsg_exit
msvcrt.dll	155	_beginthreadex
msvcrt.dll	159	_cexit
msvcrt.dll	205	_endthreadex
msvcrt.dll	208	_errno
msvcrt.dll	219	_exit
msvcrt.dll	243	_fmode
msvcrt.dll	256	_fstati64
msvcrt.dll	257	_ftime
msvcrt.dll	305	_initterm
msvcrt.dll	309	_iob
msvcrt.dll	406	_lock
msvcrt.dll	414	_lseeki64
msvcrt.dll	563	_onexit
msvcrt.dll	615	_setjmp3
msvcrt.dll	631	_snwprintf
msvcrt.dll	677	time
msvcrt.dll	680	gmtime
msvcrt.dll	686	_stati64
msvcrt.dll	694	_stricmp
msvcrt.dll	704	_strnicmp
msvcrt.dll	731	_sys_nerr
msvcrt.dll	843	calloc
msvcrt.dll	853	exit
msvcrt.dll	856	fclose
msvcrt.dll	857	feof
msvcrt.dll	859	fflush
msvcrt.dll	860	fgetc
msvcrt.dll	862	fgets
msvcrt.dll	867	fopen
msvcrt.dll	869	fprintf
msvcrt.dll	871	fputc
msvcrt.dll	875	fread
msvcrt.dll	876	free
msvcrt.dll	882	fseek
msvcrt.dll	885	fwprintf
msvcrt.dll	887	fwrite
msvcrt.dll	892	getenv
msvcrt.dll	897	gmtime
msvcrt.dll	899	isalnum
msvcrt.dll	900	isalpha
msvcrt.dll	903	isgraph
msvcrt.dll	905	islower
msvcrt.dll	906	isprint
msvcrt.dll	908	isspace
msvcrt.dll	909	isupper
msvcrt.dll	923	isxdigit
msvcrt.dll	927	localeconv
msvcrt.dll	928	localtime
msvcrt.dll	931	malloc
msvcrt.dll	934	mbstowcs
msvcrt.dll	937	memchr
msvcrt.dll	938	memcmp
msvcrt.dll	939	memcpy
msvcrt.dll	940	memmove
msvcrt.dll	942	memset
msvcrt.dll	946	printf
msvcrt.dll	950	puts
msvcrt.dll	953	qsort
msvcrt.dll	955	raise
msvcrt.dll	956	rand
msvcrt.dll	957	realloc
msvcrt.dll	964	setlocale
msvcrt.dll	966	signal
msvcrt.dll	969	sprintf
msvcrt.dll	971	srand
msvcrt.dll	972	sscanf
msvcrt.dll	974	strcat
msvcrt.dll	976	strchr
msvcrt.dll	977	strcmp
msvcrt.dll	979	strcpy
msvcrt.dll	982	strerror
msvcrt.dll	984	strlen
msvcrt.dll	987	strncmp
msvcrt.dll	988	strncpy
msvcrt.dll	991	strrchr
msvcrt.dll	993	strstr
msvcrt.dll	995	strtok
msvcrt.dll	997	strtol
msvcrt.dll	998	strtoul
msvcrt.dll	1007	_unlock
msvcrt.dll	1088	abort
msvcrt.dll	1097	atoi
msvcrt.dll	1105	time
msvcrt.dll	1110	tolower
msvcrt.dll	1116	vfprintf
msvcrt.dll	1133	wcscpy
msvcrt.dll	1153	wcstombs
msvcrt.dll	1176	_vsnprintf
msvcrt.dll	1183	longjmp
msvcrt.dll	1199	_write
msvcrt.dll	1226	_strdup
msvcrt.dll	1241	_read
msvcrt.dll	1247	_open
msvcrt.dll	1261	_getpid
msvcrt.dll	1288	_close
USER32.dll	443	MessageBoxW
wldap32.dll	10	ber_free
wldap32.dll	94	ldap_err2string
wldap32.dll	108	ldap_first_attribute
wldap32.dll	111	ldap_first_entry
wldap32.dll	116	ldap_get_dn
wldap32.dll	128	ldap_get_values_len
wldap32.dll	131	ldap_init
wldap32.dll	134	ldap_memfree
wldap32.dll	161	ldap_msgfree
wldap32.dll	162	ldap_next_attribute
wldap32.dll	165	ldap_next_entry
wldap32.dll	212	ldap_search_s
wldap32.dll	220	ldap_set_option
wldap32.dll	226	ldap_simple_bind_s
wldap32.dll	229	ldap_sslinit
wldap32.dll	240	ldap_unbind_s
wldap32.dll	244	ldap_value_free_len
WS2_32.dll	26	WSACleanup
WS2_32.dll	43	WSAGetLastError
WS2_32.dll	54	WSAIoctl
WS2_32.dll	79	WSASetLastError
WS2_32.dll	84	WSAStartup
WS2_32.dll	131	__WSAFDIsSet
WS2_32.dll	132	accept
WS2_32.dll	133	bind
WS2_32.dll	134	closesocket
WS2_32.dll	135	connect
WS2_32.dll	136	freeaddrinfo
WS2_32.dll	137	getaddrinfo
WS2_32.dll	140	gethostname
WS2_32.dll	142	getpeername
WS2_32.dll	147	getsockname
WS2_32.dll	148	getsockopt
WS2_32.dll	150	htons
WS2_32.dll	155	ioctlsocket
WS2_32.dll	156	listen
WS2_32.dll	158	ntohs
WS2_32.dll	159	recv
WS2_32.dll	160	recvfrom
WS2_32.dll	161	select
WS2_32.dll	162	send
WS2_32.dll	163	sendto
WS2_32.dll	164	setsockopt
WS2_32.dll	166	socket

show previews

offset	size	type	comment
0	1522688	EXE	01/01/1970 00:00:00	#
15c1	15	HTM		#
173c00	166773	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x13c650