filenameComTest.dll
size158720 (0x26c00)
md56907eec75de398c82435e71b83c9283a
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
150204131
147210224
109507272
1235072713
10156
1312102213
1322102224
146210221
148210221
15101
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x50cf1d1c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x1ae00
SizeOfInitializedData0xc000
SizeOfUninitializedData0
AddressOfEntryPoint0x11735
BaseOfCode0x1000
BaseOfData0x1000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x3b000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.textbss0x10000x100000RWX CODE UDATA
.text0x110000x19bd20x19c00R-X CODE
.orpc0x2b0000x10790x1200R-X CODE
.rdata0x2d0000x6a9e0x6c00R-- IDATA
.data0x340000xdc40x800RW- IDATA
.idata0x350000x15ae0x1600RW- IDATA
.rsrc0x370000x1c7c0x1e00R-- IDATA
.reloc0x390000x119c0x1200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x338c00x1de
IMPORT0x350000xb4
RESOURCE0x370000x1c7c
EXCEPTION00
SECURITY00
BASERELOC0x390000xe90
DEBUG0x2d8d00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x354f80x444
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#1011190
REGISTRY#1026030
TYPELIB#116560
STRING#7460
VERSION#17040
MANIFEST#29150
idlangstring
1002052ComTest
module_namehintordfunction_name
KERNEL32.dll501GetModuleFileNameW
KERNEL32.dll332FreeLibrary
KERNEL32.dll1116VirtualQuery
KERNEL32.dll547GetProcessHeap
KERNEL32.dll1206lstrlenW
KERNEL32.dll673HeapFree
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll614GetTickCount
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll1069TerminateProcess
KERNEL32.dll753LoadLibraryA
KERNEL32.dll1146WideCharToMultiByte
KERNEL32.dll692InitializeCriticalSection
KERNEL32.dll700InterlockedDecrement
KERNEL32.dll704InterlockedIncrement
KERNEL32.dll607GetThreadLocale
KERNEL32.dll1033SetThreadLocale
KERNEL32.dll751LeaveCriticalSection
KERNEL32.dll217EnterCriticalSection
KERNEL32.dll858RaiseException
KERNEL32.dll505GetModuleHandleW
KERNEL32.dll544GetProcAddress
KERNEL32.dll669HeapAlloc
KERNEL32.dll190DeleteCriticalSection
KERNEL32.dll1205lstrlenA
KERNEL32.dll794MultiByteToWideChar
KERNEL32.dll486GetLastError
KERNEL32.dll827OutputDebugStringW
KERNEL32.dll826OutputDebugStringA
KERNEL32.dll807OpenEventA
KERNEL32.dll979SetEvent
KERNEL32.dll67CloseHandle
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll1089UnmapViewOfFile
KERNEL32.dll585GetSystemInfo
KERNEL32.dll778MapViewOfFile
KERNEL32.dll121CreateFileMappingA
KERNEL32.dll428GetCurrentThread
KERNEL32.dll811OpenFileMappingA
KERNEL32.dll1108VirtualAlloc
KERNEL32.dll1124WaitForSingleObject
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll701InterlockedExchange
KERNEL32.dll1057Sleep
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll180DebugBreak
USER32.dll735UnregisterClassW
USER32.dll47CharNextW
USER32.dll469LoadCursorW
USER32.dll262GetClassInfoExW
USER32.dll466LoadCursorA
USER32.dll261GetClassInfoExA
USER32.dll734UnregisterClassA
USER32.dll168DispatchMessageA
USER32.dll169DispatchMessageW
USER32.dll725TranslateMessage
USER32.dll330GetMessageA
USER32.dll334GetMessageW
USER32.dll457IsWindowUnicode
USER32.dll539PeekMessageA
USER32.dll518MsgWaitForMultipleObjects
USER32.dll565RegisterClassExW
USER32.dll564RegisterClassExA
ole32.dll89CoReleaseMarshalData
ole32.dll73CoMarshalInterface
ole32.dll133CreateStreamOnHGlobal
ole32.dll110CoUnmarshalInterface
ole32.dll94CoRevokeClassObject
ole32.dll82CoRegisterClassObject
ole32.dll16CoCreateInstance
OLEAUT32.dll186
OLEAUT32.dll163
OLEAUT32.dll7
OLEAUT32.dll162
OLEAUT32.dll161
OLEAUT32.dll6
ATL90.DLL61
ATL90.DLL23
ATL90.DLL15
ATL90.DLL64
ATL90.DLL49
ATL90.DLL56
ATL90.DLL68
ATL90.DLL31
ATL90.DLL32
ATL90.DLL58
ATL90.DLL67
MSVCR90D.dll1487wcscpy_s
MSVCR90D.dll1430strcpy_s
MSVCR90D.dll1288calloc
MSVCR90D.dll1389memmove_s
MSVCR90D.dll1136_wcsicmp
MSVCR90D.dll1490wcslen
MSVCR90D.dll92_CRT_RTC_INITW
MSVCR90D.dll71void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90D.dll1060_unlock
MSVCR90D.dll186__dllonexit
MSVCR90D.dll415_encode_pointer
MSVCR90D.dll688_lock
MSVCR90D.dll856_onexit
MSVCR90D.dll404_decode_pointer
MSVCR90D.dll424_except_handler4_common
MSVCR90D.dll706_malloc_dbg
MSVCR90D.dll475_free_dbg
MSVCR90D.dll416_encoded_null
MSVCR90D.dll114_CrtSetCheckCount
MSVCR90D.dll575_initterm
MSVCR90D.dll576_initterm_e
MSVCR90D.dll324_amsg_exit
MSVCR90D.dll306_adjust_fdiv
MSVCR90D.dll142__CppXcptFilter
MSVCR90D.dll383_crt_debugger_hook
MSVCR90D.dll57public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR90D.dll176__clean_type_info_names_internal
MSVCR90D.dll945_snwprintf_s
MSVCR90D.dll1104_vsnwprintf_s
MSVCR90D.dll1100_vsnprintf_s
MSVCR90D.dll1486wcscpy
MSVCR90D.dll1429strcpy
MSVCR90D.dll96_CrtDbgReport
MSVCR90D.dll421_errno
MSVCR90D.dll33void * __cdecl operator new[](unsigned int)

??_U@YAPAXI@Z

MSVCR90D.dll17void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR90D.dll1390memset
MSVCR90D.dll1146_wcsnicmp
MSVCR90D.dll1452swprintf_s
MSVCR90D.dll1419sprintf_s
MSVCR90D.dll151__CxxFrameHandler3
MSVCR90D.dll1320free
MSVCR90D.dll883_recalloc
MSVCR90D.dll35void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR90D.dll1385memcmp
MSVCR90D.dll97_CrtDbgReportW
MSVCR90D.dll124_CxxThrowException
MSVCR90D.dll1495wcsncpy_s
MSVCR90D.dll19void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR90D.dll937_snprintf_s
RPCRT4.dll16IUnknown_QueryInterface_Proxy
RPCRT4.dll15IUnknown_AddRef_Proxy
RPCRT4.dll191NdrDllGetClassObject
RPCRT4.dll248NdrOleAllocate
RPCRT4.dll249NdrOleFree
RPCRT4.dll296NdrStubForwardingFunction
RPCRT4.dll190NdrDllCanUnloadNow
RPCRT4.dll138NdrCStdStubBuffer_Release
RPCRT4.dll137NdrCStdStubBuffer2_Release
RPCRT4.dll192NdrDllRegisterProxy
RPCRT4.dll193NdrDllUnregisterProxy
RPCRT4.dll17IUnknown_Release_Proxy
ADVAPI32.dll502OpenThreadToken
ADVAPI32.dll650RevertToSelf
ADVAPI32.dll699SetThreadToken
ordentry_vafunction_name
10x11677DllCanUnloadNow
20x11c53DllGetClassObject
30x11a78DllInstall
40x11c08DllRegisterServer
50x1101eDllUnregisterServer
module_nameComTest.DLL
flags0
timestamp2012-12-17 13:24:43
version0.0
ordinal_base1
nFunctions5
nNames5
Names(5)0x338fc
Functions(5)0x338e8
NameOrdinals(5)0x33910

StringTable 080403a8

CompanyNameTODO: <公司名>
FileDescriptionTODO: <文件说明>
FileVersion1.0.0.1
LegalCopyrightTODO: (C) <公司名>。保留所有权利。
InternalNameComTest.dll
OriginalFilenameComTest.dll
ProductNameTODO: <产品名>
ProductVersion1.0.0.1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags1
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0158720DLL12/17/2012 13:24:44#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK