filenameawsActivity.dll
size327680 (0x50000)
md5410ec12076686bcdb682967a8a68b8b6
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1255072728
10950727142
9540354
93403513
10194
1105072777
122507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4ee46325
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion8.0
SizeOfCode0x37000
SizeOfInitializedData0x18000
SizeOfUninitializedData0
AddressOfEntryPoint0x242b3
BaseOfCode0x1000
BaseOfData0x38000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x5a000
SizeOfHeaders0x1000
CheckSum0x5eb9b
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x36ad00x37000R-X CODE
.rdata0x380000xbe180xc000R-- IDATA
.data0x440000xc0280x3000RW- IDATA
.rsrc0x510000x34bc0x4000R-- IDATA
.reloc0x550000x49620x5000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x43d700xa8
IMPORT0x42fa00x8c
RESOURCE0x510000x34bc
EXCEPTION00
SECURITY00
BASERELOC0x550000x34dc
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3cc400x40
Bound_IAT00
IAT0x380000x2c8
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#1025181252
REGISTRY#1045111252
REGISTRY#1065251252
REGISTRY#1076901252
TYPELIB#197961252
STRING#71381252
VERSION#16681252
MANIFEST#2861252
idlangstring
1001033awsActivity
1011033Activity Class
1031033Contact Class
1051033Signature Class
module_namehintordfunction_name
KERNEL32.dll972lstrlenA
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll344GetEnvironmentVariableA
KERNEL32.dll131DeleteFileA
KERNEL32.dll52CloseHandle
KERNEL32.dll355GetFileSize
KERNEL32.dll83CreateFileA
KERNEL32.dll679RaiseException
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll139DisableThreadLibraryCalls
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll567IsDBCSLeadByte
KERNEL32.dll248FreeLibrary
KERNEL32.dll853SizeofResource
KERNEL32.dll599LoadResource
KERNEL32.dll227FindResourceA
KERNEL32.dll595LoadLibraryExA
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll253GetACP
KERNEL32.dll693ReadFile
KERNEL32.dll795SetFilePointer
KERNEL32.dll932WriteFile
KERNEL32.dll206FindClose
KERNEL32.dll210FindFirstFileA
KERNEL32.dll613LockResource
KERNEL32.dll228FindResourceExA
KERNEL32.dll482GetTimeZoneInformation
KERNEL32.dll371GetLocalTime
KERNEL32.dll912WaitForSingleObject
KERNEL32.dll963lstrcmpiA
KERNEL32.dll910WaitForMultipleObjects
KERNEL32.dll79CreateEventA
KERNEL32.dll604LocalFree
KERNEL32.dll243FormatMessageA
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll790SetEvent
KERNEL32.dll75CreateDirectoryA
KERNEL32.dll67CopyFileA
KERNEL32.dll416GetProcAddress
KERNEL32.dll594LoadLibraryA
KERNEL32.dll102CreateProcessA
KERNEL32.dll854Sleep
KERNEL32.dll722ResumeThread
KERNEL32.dll111CreateThread
KERNEL32.dll581LCMapStringW
KERNEL32.dll787SetEnvironmentVariableA
KERNEL32.dll784SetEndOfFile
KERNEL32.dll931WriteConsoleW
KERNEL32.dll309GetConsoleOutputCP
KERNEL32.dll921WriteConsoleA
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll823SetStdHandle
KERNEL32.dll307GetConsoleMode
KERNEL32.dll290GetConsoleCP
KERNEL32.dll445GetStringTypeW
KERNEL32.dll442GetStringTypeA
KERNEL32.dll59CompareStringW
KERNEL32.dll553InterlockedExchange
KERNEL32.dll58CompareStringA
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll369GetLastError
KERNEL32.dll973lstrlenW
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll479GetTickCount
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll343GetEnvironmentStringsW
KERNEL32.dll247FreeEnvironmentStringsW
KERNEL32.dll341GetEnvironmentStrings
KERNEL32.dll246FreeEnvironmentStringsA
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll580LCMapStringA
KERNEL32.dll358GetFileType
KERNEL32.dll804SetHandleCount
KERNEL32.dll441GetStdHandle
KERNEL32.dll185ExitProcess
KERNEL32.dll530HeapCreate
KERNEL32.dll899VirtualFree
KERNEL32.dll808SetLastError
KERNEL32.dll868TlsFree
KERNEL32.dll870TlsSetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll869TlsGetValue
KERNEL32.dll575IsValidCodePage
KERNEL32.dll403GetOEMCP
KERNEL32.dll260GetCPInfo
KERNEL32.dll272GetCommandLineA
KERNEL32.dll327GetDateFormatA
KERNEL32.dll480GetTimeFormatA
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll727RtlUnwind
KERNEL32.dll904VirtualQuery
KERNEL32.dll453GetSystemInfo
KERNEL32.dll897VirtualAlloc
KERNEL32.dll902VirtualProtect
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll862TerminateProcess
KERNEL32.dll419GetProcessHeap
KERNEL32.dll540HeapSize
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll474GetThreadLocale
KERNEL32.dll489GetVersionExA
KERNEL32.dll532HeapDestroy
KERNEL32.dll528HeapAlloc
KERNEL32.dll534HeapFree
KERNEL32.dll538HeapReAlloc
USER32.dll42CharNextA
USER32.dll727wsprintfA
USER32.dll53CharUpperBuffA
USER32.dll121DdeInitializeA
USER32.dll691UnregisterClassA
USER32.dll459LoadStringA
USER32.dll112DdeDisconnect
USER32.dll105DdeClientTransaction
USER32.dll107DdeConnect
USER32.dll116DdeFreeStringHandle
USER32.dll110DdeCreateStringHandleA
USER32.dll118DdeGetLastError
ADVAPI32.dll472RegDeleteValueA
ADVAPI32.dll503RegQueryValueExA
ADVAPI32.dll478RegEnumKeyExA
ADVAPI32.dll497RegQueryInfoKeyA
ADVAPI32.dll516RegSetValueExA
ADVAPI32.dll492RegOpenKeyExA
ADVAPI32.dll465RegCreateKeyExA
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll468RegDeleteKeyA
SHELL32.dll175SHGetFolderPathA
SHELL32.dll263ShellExecuteA
ole32.dll309StringFromGUID2
ole32.dll15CoCreateGuid
ole32.dll100CoTaskMemAlloc
ole32.dll102CoTaskMemRealloc
ole32.dll101CoTaskMemFree
ole32.dll263ProgIDFromCLSID
ole32.dll253OleRun
ole32.dll308StringFromCLSID
ole32.dll6CLSIDFromProgID
ole32.dll141GetClassFile
ole32.dll16CoCreateInstance
OLEAUT32.dll331
OLEAUT32.dll15
OLEAUT32.dll23
OLEAUT32.dll24
OLEAUT32.dll94
OLEAUT32.dll314
OLEAUT32.dll184
OLEAUT32.dll185
OLEAUT32.dll162
OLEAUT32.dll277
OLEAUT32.dll202
OLEAUT32.dll201
OLEAUT32.dll163
OLEAUT32.dll186
OLEAUT32.dll161
OLEAUT32.dll150
OLEAUT32.dll2
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll4
OLEAUT32.dll313
OLEAUT32.dll6
OLEAUT32.dll149
OLEAUT32.dll7
OLEAUT32.dll200
ordentry_vafunction_name
10x87d2DllCanUnloadNow
20xad15DllGetClassObject
30xc29aDllRegisterServer
40xc2a9DllUnregisterServer
module_nameawsActivity.DLL
flags0
timestamp2011-12-11 08:00:36
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x43da8
Functions(4)0x43d98
NameOrdinals(4)0x43db8

StringTable 040904B0

FileDescriptionawsActivity Module
FileVersion3.11.00
InternalNameawsActivity
LegalCopyrightCopyright 2003
OriginalFilenameawsActivity.DLL
ProductNameawsActivity Module
ProductVersion3.11.00

VS_FIXEDFILEINFO

FileVersion3.11.0.0
ProductVersion3.11.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0327680DLL12/11/2011 08:00:37#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK