filename_socket.pyd
size46080 (0xb400)
md541436ee314005647a638d4ddce811512
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
131210229
132210222
147210224
123507275
10120
137210221
146210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections5
TimeDateStamp0x4df4b010
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion9.0
SizeOfCode0x4e00
SizeOfInitializedData0x6400
SizeOfUninitializedData0
AddressOfEntryPoint0x5858
BaseOfCode0x1000
ImageBase0x1e1d0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000x4ca10x4e00R-X CODE
.rdata0x60000x2b940x2c00R-- IDATA
.data0x90000x2c280x2c00RW- IDATA
.pdata0xc0000x6540x800R-- IDATA
.reloc0xd0000x1a40x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x8b300x64
IMPORT0x80780x64
RESOURCE00
EXCEPTION0xc0000x654
SECURITY00
BASERELOC0xd0000x148
DEBUG0x64100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x60000x3e0
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
WS2_32.dll17
WS2_32.dll115
WS2_32.dll12
WS2_32.dll4
WS2_32.dll14
WS2_32.dll54WSAIoctl
WS2_32.dll10
WS2_32.dll5
WS2_32.dll11
WS2_32.dll8
WS2_32.dll152getaddrinfo
WS2_32.dll18
WS2_32.dll111
WS2_32.dll9
WS2_32.dll15
WS2_32.dll6
WS2_32.dll22
WS2_32.dll53
WS2_32.dll21
WS2_32.dll56
WS2_32.dll20
WS2_32.dll116
WS2_32.dll16
WS2_32.dll2
WS2_32.dll23
WS2_32.dll151freeaddrinfo
WS2_32.dll55
WS2_32.dll151
WS2_32.dll112
WS2_32.dll3
WS2_32.dll51
WS2_32.dll1
WS2_32.dll52
WS2_32.dll19
WS2_32.dll7
WS2_32.dll13
WS2_32.dll156getnameinfo
WS2_32.dll57
python27.dll515PyObject_Free
python27.dll422PyModule_AddIntConstant
python27.dll173PyErr_SetString
python27.dll503PyObject_CallMethod
python27.dll707PyType_GenericAlloc
python27.dll1021_Py_TrueStruct
python27.dll150PyErr_NewException
python27.dll371PyLong_AsUnsignedLong
python27.dll8PyArg_ParseTupleAndKeywords
python27.dll702PyTuple_Pack
python27.dll966_PyString_Resize
python27.dll712PyType_Type
python27.dll144PyErr_Clear
python27.dll272PyFloat_AsDouble
python27.dll358PyList_New
python27.dll708PyType_GenericNew
python27.dll820Py_AtExit
python27.dll159PyErr_SetExcFromWindowsErr
python27.dll148PyErr_Format
python27.dll423PyModule_AddObject
python27.dll246PyExc_TypeError
python27.dll221PyExc_ImportError
python27.dll687PyThread_release_lock
python27.dll352PyList_Append
python27.dll154PyErr_Occurred
python27.dll254PyExc_ValueError
python27.dll491PyOS_snprintf
python27.dll853Py_InitModule4_64
python27.dll704PyTuple_Size
python27.dll7PyArg_ParseTuple
python27.dll403PyMem_Free
python27.dll1014_Py_NoneStruct
python27.dll233PyExc_OverflowError
python27.dll378PyLong_FromLongLong
python27.dll201PyEval_RestoreThread
python27.dll172PyErr_SetObject
python27.dll64PyCapsule_New
python27.dll677PyThread_allocate_lock
python27.dll383PyLong_FromUnsignedLong
python27.dll676PyThread_acquire_lock
python27.dll163PyErr_SetFromErrno
python27.dll630PyString_AsString
python27.dll519PyObject_GenericGetAttr
python27.dll332PyInt_AsLong
python27.dll642PyString_FromStringAndSize
python27.dll821Py_BuildValue
python27.dll26PyBuffer_Release
python27.dll338PyInt_FromLong
python27.dll220PyExc_IOError
python27.dll277PyFloat_FromDouble
python27.dll340PyInt_FromSsize_t
python27.dll143PyErr_CheckSignals
python27.dll641PyString_FromString
python27.dll202PyEval_SaveThread
MSVCR90.dll1196free
MSVCR90.dll312_encoded_null
MSVCR90.dll301_decode_pointer
MSVCR90.dll226_amsg_exit
MSVCR90.dll89__C_specific_handler
MSVCR90.dll463_initterm_e
MSVCR90.dll123__clean_type_info_names_internal
MSVCR90.dll932_unlock
MSVCR90.dll133__dllonexit
MSVCR90.dll573_lock
MSVCR90.dll740_onexit
MSVCR90.dll462_initterm
MSVCR90.dll590_malloc_crt
MSVCR90.dll311_encode_pointer
MSVCR90.dll1323strncpy
MSVCR90.dll317_errno
MSVCR90.dll1316strerror
MSVCR90.dll90__CppXcptFilter
MSVCR90.dll1268memset
MSVCR90.dll1264memcpy
MSVCR90.dll1306sscanf
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll614GetTickCount
KERNEL32.dll846QueryPerformanceCounter
KERNEL32.dll204DisableThreadLibraryCalls
KERNEL32.dll1061Sleep
KERNEL32.dll591GetSystemTimeAsFileTime
ordentry_vafunction_name
10x45b0init_socket
20x1200init_sockobject
module_name_socket.pyd
flags0
timestamp2011-06-12 12:24:48
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x8b60
Functions(2)0x8b58
NameOrdinals(2)0x8b68
offsetsizetypecomment
15c115HTM#
15d040496BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK