filenamevbscript.dll
size420864 (0x66c00)
md56e83376494410f324a9698863127c4db
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
10266
1235072715
1095072773
122507271
1105072782
126507271
1255072711
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x52c77c41
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion8.0
SizeOfCode0x56600
SizeOfInitializedData0x10200
SizeOfUninitializedData0
AddressOfEntryPoint0x184b
BaseOfCode0x1000
BaseOfData0x56000
ImageBase0x73300000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion6.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x6a000
SizeOfHeaders0x400
CheckSum0x75145
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x565090x56600R-X CODE
.data0x580000x43840x4400RW- IDATA
.rsrc0x5d0000x88780x8a00R-- IDATA
.reloc0x660000x33580x3400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x53440xa5
IMPORT0x564000xa0
RESOURCE0x5d0000x8878
EXCEPTION00
SECURITY00
BASERELOC0x660000x3358
DEBUG0x574a80x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x2f4100x40
Bound_IAT00
IAT0x10000x3c8
Delay_IAT00
CLR_Header00
typenamesizecp
MUI#12320
TYPELIB#1157000
TYPELIB#235040
TYPELIB#355040
DIALOG#1022380
STRING#13640
STRING#21340
STRING#3860
STRING#43660
STRING#52960
STRING#61640
STRING#211060
STRING#272000
STRING#285120
STRING#297540
STRING#31620
STRING#324280
STRING#631780
STRING#644620
STRING#656780
STRING#6611460
STRING#673700
STRING#2572100
STRING#3144060
STRING#1876360
STRING#2048500
STRING#2049560
STRING#20512020
VERSION#18520
idlangstring
51033Invalid procedure call or argument
61033Overflow
71033Out of memory
91033Subscript out of range
101033This array is fixed or temporarily locked
111033Division by zero
131033Type mismatch
141033Out of string space
171033Can't perform requested operation
281033Out of stack space
351033Sub or Function not defined
481033Error in loading DLL
511033Internal error
521033Bad file name or number
531033File not found
541033Bad file mode
551033File already open
571033Device I/O error
581033File already exists
611033Disk full
621033Input past end of file
671033Too many files
681033Device unavailable
701033Permission denied
711033Disk not ready
741033Can't rename with different drive
751033Path/File access error
761033Path not found
911033Object variable not set
921033For loop not initialized
941033Invalid use of Null
3221033Can't create necessary temporary file
4241033Object required
4291033ActiveX component can't create object
4301033Class doesn't support Automation
4321033File name or class name not found during Automation operation
4381033Object doesn't support this property or method
4401033Automation error
4451033Object doesn't support this action
4461033Object doesn't support named arguments
4471033Object doesn't support current locale setting
4481033Named argument not found
4491033Argument not optional
4501033Wrong number of arguments or invalid property assignment
4511033Object not a collection
4531033Specified DLL function not found
4551033Code resource lock error
4571033This key is already associated with an element of this collection
4581033Variable uses an Automation type not supported in VBScript
4621033The remote server machine does not exist or is unavailable
4811033Invalid picture
5001033Variable is undefined
5011033Illegal assignment
5021033Object not safe for scripting
5031033Object not safe for initializing
5041033Object not safe for creating
5051033Invalid or unqualified reference
5061033Class not defined
5071033An exception occurred
10011033Out of memory
10021033Syntax error
10031033Expected ':'
10051033Expected '('
10061033Expected ')'
10071033Expected ']'
10101033Expected identifier
10111033Expected '='
10121033Expected 'If'
10131033Expected 'To'
10141033Expected 'End'
10151033Expected 'Function'
10161033Expected 'Sub'
10171033Expected 'Then'
10181033Expected 'Wend'
10191033Expected 'Loop'
10201033Expected 'Next'
10211033Expected 'Case'
10221033Expected 'Select'
10231033Expected expression
10241033Expected statement
10251033Expected end of statement
10261033Expected integer constant
10271033Expected 'While' or 'Until'
10281033Expected 'While', 'Until' or end of statement
10291033Expected 'With'
10301033Identifier too long
10311033Invalid number
10321033Invalid character
10331033Unterminated string constant
10341033Unterminated comment
10371033Invalid use of 'Me' keyword
10381033'loop' without 'do'
10391033Invalid 'exit' statement
10401033Invalid 'for' loop control variable
10411033Name redefined
10421033Must be first statement on the line
10431033Cannot assign to non-ByVal argument
10441033Cannot use parentheses when calling a Sub
10451033Expected literal constant
10461033Expected 'In'
10471033Expected 'Class'
10481033Must be defined inside a Class
10491033Expected Let or Set or Get in property declaration
10501033Expected 'Property'
10511033Number of arguments must be consistent across properties specification
10521033Cannot have multiple default property/method in a Class
10531033Class initialize or terminate do not have arguments
10541033Property set or let must have at least one argument
10551033Unexpected 'Next'
10561033'Default' can be specified only on 'Property' or 'Function' or 'Sub'
10571033'Default' specification must also specify 'Public'
10581033'Default' specification can only be on Property Get
40961033Microsoft VBScript compilation error
40971033Microsoft VBScript runtime error
40981033Unknown runtime error
50161033Regular Expression object expected
50171033Syntax error in regular expression
50181033Unexpected quantifier
50191033Expected ']' in regular expression
50201033Expected ')' in regular expression
50211033Invalid range in character set
300001033EN
327661033True
327671033False
327681033OK
327691033Cancel
327701033Help
328111033Element not found
328121033The specified date is not available in the current locale's calendar
module_namehintordfunction_name
msvcrt.dll141__dllonexit
msvcrt.dll934_unlock
msvcrt.dll245_adjust_fdiv
msvcrt.dll257_amsg_exit
msvcrt.dll469_initterm
msvcrt.dll106_XcptFilter
msvcrt.dll475_iob
msvcrt.dll176__mb_cur_max
msvcrt.dll974_vsnwprintf
msvcrt.dll1246malloc
msvcrt.dll1256memchr
msvcrt.dll500_ismbblead
msvcrt.dll71_CIsqrt
msvcrt.dll64_CIexp
msvcrt.dll60_CIatan
msvcrt.dll62_CIcos
msvcrt.dll578_lock
msvcrt.dll1240ldiv
msvcrt.dll1166div
msvcrt.dll1129_wtoi
msvcrt.dll1234iswspace
msvcrt.dll1154bsearch
msvcrt.dll1264modf
msvcrt.dll1384wcstol
msvcrt.dll590_ltow
msvcrt.dll68_CIpow
msvcrt.dll342_errno
msvcrt.dll1179floor
msvcrt.dll66_CIlog
msvcrt.dll926_ultow
msvcrt.dll1339towlower
msvcrt.dll1152atoi
msvcrt.dll1366wcscspn
msvcrt.dll1338toupper
msvcrt.dll853_statusfp
msvcrt.dll290_clearfp
msvcrt.dll1316strrchr
msvcrt.dll1323strtoul
msvcrt.dll294_control87
msvcrt.dll1245longjmp
msvcrt.dll764_purecall
msvcrt.dll809_setjmp3
msvcrt.dll1361wcschr
msvcrt.dll1260memmove
msvcrt.dll18void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll1262memset
msvcrt.dll41void * __cdecl operator new[](unsigned int)

??_U@YAPAXI@Z

msvcrt.dll43void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

msvcrt.dll1002_wcsdup
msvcrt.dll1017_wcsnicmp
msvcrt.dll747_onexit
msvcrt.dll1255mbtowc
msvcrt.dll1218isleadbyte
msvcrt.dll815_snprintf
msvcrt.dll561_itoa
msvcrt.dll1390wctomb
msvcrt.dll1172ferror
msvcrt.dll133__badioinfo
msvcrt.dll207__pioinfo
msvcrt.dll367_fileno
msvcrt.dll587_lseeki64
msvcrt.dll1096_write
msvcrt.dll478_isatty
msvcrt.dll69_CIsin
msvcrt.dll1007_wcsicmp
msvcrt.dll1279realloc
msvcrt.dll20void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll1258memcpy
msvcrt.dll1190free
msvcrt.dll1371wcsncmp
OLEAUT32.dll2
OLEAUT32.dll9
OLEAUT32.dll6
OLEAUT32.dll180
OLEAUT32.dll162
OLEAUT32.dll3
OLEAUT32.dll7
OLEAUT32.dll150
OLEAUT32.dll149
OLEAUT32.dll8
OLEAUT32.dll231
OLEAUT32.dll110
OLEAUT32.dll114
OLEAUT32.dll112
OLEAUT32.dll111
OLEAUT32.dll11
OLEAUT32.dll163
OLEAUT32.dll161
OLEAUT32.dll94
OLEAUT32.dll84
OLEAUT32.dll200
OLEAUT32.dll35
OLEAUT32.dll183
OLEAUT32.dll10
OLEAUT32.dll16
OLEAUT32.dll15
OLEAUT32.dll40
OLEAUT32.dll160
OLEAUT32.dll21
OLEAUT32.dll22
OLEAUT32.dll147
OLEAUT32.dll330
OLEAUT32.dll4
OLEAUT32.dll12
OLEAUT32.dll38
OLEAUT32.dll39
OLEAUT32.dll418
OLEAUT32.dll331
ole32.dll304StgIsStorageFile
ole32.dll297StgCreateDocfile
ole32.dll308StgOpenStorage
ole32.dll120CreateBindCtx
ole32.dll211MkParseDisplayName
ole32.dllBindMoniker
ole32.dll8CLSIDFromString
ole32.dll314StringFromCLSID
ole32.dll6CLSIDFromProgID
ole32.dll37CoGetClassObject
ole32.dll103CoTaskMemFree
ole32.dll16CoCreateInstance
ADVAPI32.dll616RegQueryValueExW
ADVAPI32.dll554RegCloseKey
ADVAPI32.dll601RegOpenKeyA
ADVAPI32.dll561RegCreateKeyA
ADVAPI32.dll567RegDeleteKeyA
ADVAPI32.dll631RegSetValueExA
ADVAPI32.dll602RegOpenKeyExA
ADVAPI32.dll630RegSetValueA
ADVAPI32.dll615RegQueryValueExA
ADVAPI32.dll603RegOpenKeyExW
KERNEL32.dll589GetSystemInfo
KERNEL32.dll506GetModuleHandleW
KERNEL32.dll1118VirtualAlloc
KERNEL32.dll1124VirtualProtect
KERNEL32.dll798MulDiv
KERNEL32.dll433GetDateFormatW
KERNEL32.dll431GetDateFormatA
KERNEL32.dll491GetLocaleInfoW
KERNEL32.dll86CompareStringW
KERNEL32.dll83CompareStringA
KERNEL32.dll744LCMapStringW
KERNEL32.dll742LCMapStringA
KERNEL32.dll1012SetLastError
KERNEL32.dll633GetVersion
KERNEL32.dll488GetLocalTime
KERNEL32.dll1126VirtualQuery
KERNEL32.dll758LoadLibraryA
KERNEL32.dll627GetUserDefaultLangID
KERNEL32.dll857QueryPerformanceCounter
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll618GetTickCount
KERNEL32.dll546GetProcAddress
KERNEL32.dll374GetComputerNameA
KERNEL32.dll1079TerminateProcess
KERNEL32.dll333FreeLibrary
KERNEL32.dll1085TlsFree
KERNEL32.dll1084TlsAlloc
KERNEL32.dll1067Sleep
KERNEL32.dll759LoadLibraryExA
KERNEL32.dll311FindResourceA
KERNEL32.dll763LoadResource
KERNEL32.dll780LockResource
KERNEL32.dll1066SizeofResource
KERNEL32.dll336FreeResource
KERNEL32.dll502GetModuleFileNameW
KERNEL32.dll487GetLastError
KERNEL32.dll799MultiByteToWideChar
KERNEL32.dll1156WideCharToMultiByte
KERNEL32.dll1215lstrlenA
KERNEL32.dll339GetACP
KERNEL32.dll581GetSystemDefaultLCID
KERNEL32.dll489GetLocaleInfoA
KERNEL32.dll736IsValidCodePage
KERNEL32.dll738IsValidLocale
KERNEL32.dll626GetUserDefaultLCID
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll706InterlockedExchange
KERNEL32.dll1086TlsGetValue
KERNEL32.dll756LeaveCriticalSection
KERNEL32.dll218EnterCriticalSection
KERNEL32.dll191DeleteCriticalSection
KERNEL32.dll697InitializeCriticalSection
KERNEL32.dll503GetModuleHandleA
KERNEL32.dll501GetModuleFileNameA
KERNEL32.dll705InterlockedDecrement
KERNEL32.dll709InterlockedIncrement
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll1096UnhandledExceptionFilter
KERNEL32.dll1055SetUnhandledExceptionFilter
KERNEL32.dll703InterlockedCompareExchange
KERNEL32.dll831OutputDebugStringA
KERNEL32.dll922RtlUnwind
KERNEL32.dll634GetVersionExA
KERNEL32.dll595GetSystemTimeAsFileTime
KERNEL32.dll1087TlsSetValue
KERNEL32.dll313FindResourceExW
KERNEL32.dll760LoadLibraryExW
KERNEL32.dll783MapViewOfFile
KERNEL32.dll68CloseHandle
KERNEL32.dll125CreateFileMappingW
KERNEL32.dll128CreateFileW
KERNEL32.dll635GetVersionExW
KERNEL32.dll1099UnmapViewOfFile
KERNEL32.dll584GetSystemDefaultUILanguage
KERNEL32.dll629GetUserDefaultUILanguage
KERNEL32.dll314FindResourceW
KERNEL32.dll927SearchPathW
USER32.dll385GetWindowLongA
USER32.dll290GetDlgItemTextW
USER32.dll211EndDialog
USER32.dll676SetWindowLongA
USER32.dll508MessageBoxIndirectW
USER32.dll696ShowWindow
USER32.dll209EnableWindow
USER32.dll392GetWindowRect
USER32.dll284GetDesktopWindow
USER32.dll269GetClientRect
USER32.dll399GetWindowTextW
USER32.dll200DrawTextW
USER32.dll679SetWindowPos
USER32.dll499MapWindowPoints
USER32.dll517MoveWindow
USER32.dll634SetForegroundWindow
USER32.dll282GetDC
USER32.dll588ReleaseDC
USER32.dll601SendDlgItemMessageA
USER32.dll287GetDlgItem
USER32.dll768WinHelpW
USER32.dll684SetWindowTextW
USER32.dll606SendMessageA
USER32.dll166DialogBoxParamW
GDI32.dll606SelectObject
GDI32.dll437GetDeviceCaps
GDI32.dll58CreateFontA
GDI32.dll208DeleteObject
ordentry_vafunction_name
10x1efe2DllCanUnloadNow
20xc0beDllGetClassObject
30x39e8bDllRegisterServer
40x39df0DllUnregisterServer
module_nameVBSCRIPT.dll
flags0
timestamp2013-12-23 08:27:51
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x537c
Functions(4)0x536c
NameOrdinals(4)0x538c

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft (R) VBScript
FileVersion5.8.6001.23552
InternalNamevbscript.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamevbscript.dll
ProductNameMicrosoft (R) VBScript
ProductVersion5.8.6001.23552

VS_FIXEDFILEINFO

FileVersion5.8.6001.23552
ProductVersion5.8.6001.23552
StrucVersion0x10000
FileFlagsMask3
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0420864DLL01/04/2014 03:13:05#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK