filename_socket.pyd
size46080 (0xb400)
md5637aabdff24be92e33f3e71367e6e6a5
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
149307293
1313072915
132307292
10140
147307299
137307291
146307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x5560ad84
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x5a00
SizeOfInitializedData0x5a00
SizeOfUninitializedData0
AddressOfEntryPoint0x6138
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x1e1d0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x58270x5a00R-X CODE
.rdata0x70000x20440x2200R-- IDATA
.data0xa0000x2a780x2800RW- IDATA
.reloc0xd0000xa100xc00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x8fe00x64
IMPORT0x855c0x64
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC0xd0000x9ec
DEBUG0x72600x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x84380x40
Bound_IAT00
IAT0x70000x240
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
WS2_32.dll5
WS2_32.dll10
WS2_32.dll54WSAIoctl
WS2_32.dll57
WS2_32.dll4
WS2_32.dll12
WS2_32.dll115
WS2_32.dll17
WS2_32.dll14
WS2_32.dll11
WS2_32.dll8
WS2_32.dll18
WS2_32.dll111
WS2_32.dll9
WS2_32.dll15
WS2_32.dll6
WS2_32.dll22
WS2_32.dll53
WS2_32.dll21
WS2_32.dll56
WS2_32.dll20
WS2_32.dll116
WS2_32.dll1
WS2_32.dll16
WS2_32.dll2
WS2_32.dll23
WS2_32.dll55
WS2_32.dll151
WS2_32.dll112
WS2_32.dll3
WS2_32.dll51
WS2_32.dll52
WS2_32.dll19
WS2_32.dll7
WS2_32.dll13
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll222DisableThreadLibraryCalls
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll659GetTickCount
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll828LoadLibraryA
KERNEL32.dll581GetProcAddress
KERNEL32.dll623GetSystemDirectoryA
KERNEL32.dll354FreeLibrary
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll1202Sleep
KERNEL32.dll748InterlockedExchange
KERNEL32.dll768IsDebuggerPresent
python27.dll271PyFloat_AsDouble
python27.dll357PyList_New
python27.dll708PyType_GenericNew
python27.dll820Py_AtExit
python27.dll159PyErr_SetExcFromWindowsErr
python27.dll148PyErr_Format
python27.dll422PyModule_AddObject
python27.dll245PyExc_TypeError
python27.dll854Py_InitModule4
python27.dll220PyExc_ImportError
python27.dll687PyThread_release_lock
python27.dll351PyList_Append
python27.dll144PyErr_Clear
python27.dll712PyType_Type
python27.dll973_PyString_Resize
python27.dll702PyTuple_Pack
python27.dll8PyArg_ParseTupleAndKeywords
python27.dll365PyLong_AsLong
python27.dll370PyLong_AsUnsignedLong
python27.dll150PyErr_NewException
python27.dll1033_Py_TrueStruct
python27.dll707PyType_GenericAlloc
python27.dll503PyObject_CallMethod
python27.dll173PyErr_SetString
python27.dll421PyModule_AddIntConstant
python27.dll154PyErr_Occurred
python27.dll253PyExc_ValueError
python27.dll491PyOS_snprintf
python27.dll704PyTuple_Size
python27.dll7PyArg_ParseTuple
python27.dll202PyEval_SaveThread
python27.dll402PyMem_Free
python27.dll1026_Py_NoneStruct
python27.dll232PyExc_OverflowError
python27.dll201PyEval_RestoreThread
python27.dll172PyErr_SetObject
python27.dll64PyCapsule_New
python27.dll677PyThread_allocate_lock
python27.dll920_PyInt_AsInt
python27.dll982_PyTime_FloatTime
python27.dll382PyLong_FromUnsignedLong
python27.dll676PyThread_acquire_lock
python27.dll163PyErr_SetFromErrno
python27.dll630PyString_AsString
python27.dll519PyObject_GenericGetAttr
python27.dll331PyInt_AsLong
python27.dll507PyObject_ClearWeakRefs
python27.dll642PyString_FromStringAndSize
python27.dll821Py_BuildValue
python27.dll26PyBuffer_Release
python27.dll337PyInt_FromLong
python27.dll219PyExc_IOError
python27.dll276PyFloat_FromDouble
python27.dll339PyInt_FromSsize_t
python27.dll143PyErr_CheckSignals
python27.dll641PyString_FromString
python27.dll515PyObject_Free
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll106__CppXcptFilter
MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll140__clean_type_info_names_internal
MSVCR90.dll277_amsg_exit
MSVCR90.dll150__dllonexit
MSVCR90.dll630_lock
MSVCR90.dll796_onexit
MSVCR90.dll371_except_handler4_common
MSVCR90.dll517_initterm_e
MSVCR90.dll516_initterm
MSVCR90.dll352_decode_pointer
MSVCR90.dll363_encoded_null
MSVCR90.dll647_malloc_crt
MSVCR90.dll362_encode_pointer
MSVCR90.dll1372strncpy_s
MSVCR90.dll1357strcat_s
MSVCR90.dll1382strtoul
MSVCR90.dll1362strcpy_s
MSVCR90.dll1371strncpy
MSVCR90.dll368_errno
MSVCR90.dll1322memset
MSVCR90.dll1358strchr
MSVCR90.dll1318memcpy
MSVCR90.dll1364strerror
MSVCR90.dll1220calloc
MSVCR90.dll1252free
MSVCR90.dll1354sscanf
MSVCR90.dll998_unlock
MSVCR90.dll1351sprintf_s
ordentry_vafunction_name
10x53f0init_socket
20x1e60init_sockobject
module_name_socket.pyd
flags0
timestamp2015-05-23 16:40:36
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x9010
Functions(2)0x9008
NameOrdinals(2)0x9018
offsetsizetypecomment
046080DLL05/23/2015 16:40:36#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK