| filename | MB.vmp.dll | |
|---|---|---|
| size | 2695168 (0x292000) | |
| md5 | 748e5965a18754b69480d9e9d5ccde7c | |
| type | PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0xebea2 |
| reserved6 | 0xfff1415d |
| lfanew | 0x80 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x69634001 | 0x6963401c | 0x69628ecc | 0x69784870 | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.dll | 111 | CreateThread | |
| KERNEL32.dll | 522 | GlobalUnlock | |
| KERNEL32.dll | 515 | GlobalLock | |
| KERNEL32.dll | 504 | GlobalAlloc | |
| KERNEL32.dll | 479 | GetTickCount | |
| KERNEL32.dll | 916 | WideCharToMultiByte | |
| KERNEL32.dll | 563 | IsBadReadPtr | |
| KERNEL32.dll | 502 | GlobalAddAtomA | |
| KERNEL32.dll | 503 | GlobalAddAtomW | |
| KERNEL32.dll | 383 | GetModuleHandleA | |
| KERNEL32.dll | 511 | GlobalFree | |
| KERNEL32.dll | 512 | GlobalGetAtomNameA | |
| KERNEL32.dll | 506 | GlobalDeleteAtom | |
| KERNEL32.dll | 513 | GlobalGetAtomNameW | |
| KERNEL32.dll | 787 | SetEnvironmentVariableA | |
| KERNEL32.dll | 344 | GetEnvironmentVariableA | |
| KERNEL32.dll | 245 | FreeConsole | |
| KERNEL32.dll | 902 | VirtualProtect | |
| KERNEL32.dll | 897 | VirtualAlloc | |
| KERNEL32.dll | 416 | GetProcAddress | |
| KERNEL32.dll | 369 | GetLastError | |
| KERNEL32.dll | 594 | LoadLibraryA | |
| KERNEL32.dll | 808 | SetLastError | |
| KERNEL32.dll | 836 | SetThreadPriority | |
| KERNEL32.dll | 325 | GetCurrentThread | |
| KERNEL32.dll | 706 | ReleaseMutex | |
| KERNEL32.dll | 912 | WaitForSingleObject | |
| KERNEL32.dll | 96 | CreateMutexA | |
| KERNEL32.dll | 644 | OpenMutexA | |
| KERNEL32.dll | 789 | SetErrorMode | |
| KERNEL32.dll | 326 | GetCurrentThreadId | |
| KERNEL32.dll | 693 | ReadFile | |
| KERNEL32.dll | 355 | GetFileSize | |
| KERNEL32.dll | 206 | FindClose | |
| KERNEL32.dll | 213 | FindFirstFileW | |
| KERNEL32.dll | 905 | VirtualQueryEx | |
| KERNEL32.dll | 346 | GetExitCodeProcess | |
| KERNEL32.dll | 696 | ReadProcessMemory | |
| KERNEL32.dll | 903 | VirtualProtectEx | |
| KERNEL32.dll | 62 | ContinueDebugEvent | |
| KERNEL32.dll | 722 | ResumeThread | |
| KERNEL32.dll | 653 | OutputDebugStringA | |
| KERNEL32.dll | 654 | OutputDebugStringW | |
| KERNEL32.dll | 832 | SetThreadContext | |
| KERNEL32.dll | 471 | GetThreadContext | |
| KERNEL32.dll | 909 | WaitForDebugEvent | |
| KERNEL32.dll | 941 | WriteProcessMemory | |
| KERNEL32.dll | 881 | UnmapViewOfFile | |
| KERNEL32.dll | 856 | SuspendThread | |
| KERNEL32.dll | 118 | DebugActiveProcess | |
| KERNEL32.dll | 616 | MapViewOfFile | |
| KERNEL32.dll | 147 | DuplicateHandle | |
| KERNEL32.dll | 322 | GetCurrentProcess | |
| KERNEL32.dll | 84 | CreateFileMappingA | |
| KERNEL32.dll | 629 | MultiByteToWideChar | |
| KERNEL32.dll | 731 | SearchPathA | |
| KERNEL32.dll | 469 | GetTempPathA | |
| KERNEL32.dll | 470 | GetTempPathW | |
| KERNEL32.dll | 467 | GetTempFileNameA | |
| KERNEL32.dll | 468 | GetTempFileNameW | |
| KERNEL32.dll | 499 | GetWindowsDirectoryA | |
| KERNEL32.dll | 83 | CreateFileA | |
| KERNEL32.dll | 412 | GetPrivateProfileStringA | |
| KERNEL32.dll | 52 | CloseHandle | |
| KERNEL32.dll | 131 | DeleteFileA | |
| KERNEL32.dll | 622 | MoveFileA | |
| KERNEL32.dll | 102 | CreateProcessA | |
| KERNEL32.dll | 439 | GetStartupInfoA | |
| KERNEL32.dll | 272 | GetCommandLineA | |
| KERNEL32.dll | 790 | SetEvent | |
| KERNEL32.dll | 79 | CreateEventA | |
| KERNEL32.dll | 458 | GetSystemTimeAsFileTime | |
| KERNEL32.dll | 185 | ExitProcess | |
| KERNEL32.dll | 371 | GetLocalTime | |
| KERNEL32.dll | 243 | FormatMessageA | |
| KERNEL32.dll | 604 | LocalFree | |
| KERNEL32.dll | 361 | GetFullPathNameA | |
| KERNEL32.dll | 362 | GetFullPathNameW | |
| KERNEL32.dll | 351 | GetFileAttributesExA | |
| KERNEL32.dll | 352 | GetFileAttributesExW | |
| KERNEL32.dll | 353 | GetFileAttributesW | |
| KERNEL32.dll | 350 | GetFileAttributesA | |
| KERNEL32.dll | 59 | CompareStringW | |
| KERNEL32.dll | 58 | CompareStringA | |
| KERNEL32.dll | 784 | SetEndOfFile | |
| KERNEL32.dll | 238 | FlushFileBuffers | |
| KERNEL32.dll | 931 | WriteConsoleW | |
| KERNEL32.dll | 309 | GetConsoleOutputCP | |
| KERNEL32.dll | 921 | WriteConsoleA | |
| KERNEL32.dll | 823 | SetStdHandle | |
| KERNEL32.dll | 86 | CreateFileW | |
| KERNEL32.dll | 373 | GetLocaleInfoW | |
| KERNEL32.dll | 307 | GetConsoleMode | |
| KERNEL32.dll | 290 | GetConsoleCP | |
| KERNEL32.dll | 795 | SetFilePointer | |
| KERNEL32.dll | 445 | GetStringTypeW | |
| KERNEL32.dll | 442 | GetStringTypeA | |
| KERNEL32.dll | 577 | IsValidLocale | |
| KERNEL32.dll | 854 | Sleep | |
| KERNEL32.dll | 152 | EnterCriticalSection | |
| KERNEL32.dll | 593 | LeaveCriticalSection | |
| KERNEL32.dll | 489 | GetVersionExA | |
| KERNEL32.dll | 547 | InitializeCriticalSection | |
| KERNEL32.dll | 323 | GetCurrentProcessId | |
| KERNEL32.dll | 382 | GetModuleFileNameW | |
| KERNEL32.dll | 438 | GetShortPathNameW | |
| KERNEL32.dll | 381 | GetModuleFileNameA | |
| KERNEL32.dll | 937 | WritePrivateProfileStringA | |
| KERNEL32.dll | 437 | GetShortPathNameA | |
| KERNEL32.dll | 175 | EnumSystemLocalesA | |
| KERNEL32.dll | 372 | GetLocaleInfoA | |
| KERNEL32.dll | 483 | GetUserDefaultLCID | |
| KERNEL32.dll | 556 | InterlockedIncrement | |
| KERNEL32.dll | 552 | InterlockedDecrement | |
| KERNEL32.dll | 553 | InterlockedExchange | |
| KERNEL32.dll | 129 | DeleteCriticalSection | |
| KERNEL32.dll | 727 | RtlUnwind | |
| KERNEL32.dll | 679 | RaiseException | |
| KERNEL32.dll | 534 | HeapFree | |
| KERNEL32.dll | 862 | TerminateProcess | |
| KERNEL32.dll | 878 | UnhandledExceptionFilter | |
| KERNEL32.dll | 842 | SetUnhandledExceptionFilter | |
| KERNEL32.dll | 569 | IsDebuggerPresent | |
| KERNEL32.dll | 480 | GetTimeFormatA | |
| KERNEL32.dll | 327 | GetDateFormatA | |
| KERNEL32.dll | 528 | HeapAlloc | |
| KERNEL32.dll | 419 | GetProcessHeap | |
| KERNEL32.dll | 580 | LCMapStringA | |
| KERNEL32.dll | 581 | LCMapStringW | |
| KERNEL32.dll | 260 | GetCPInfo | |
| KERNEL32.dll | 869 | TlsGetValue | |
| KERNEL32.dll | 867 | TlsAlloc | |
| KERNEL32.dll | 870 | TlsSetValue | |
| KERNEL32.dll | 868 | TlsFree | |
| KERNEL32.dll | 932 | WriteFile | |
| KERNEL32.dll | 441 | GetStdHandle | |
| KERNEL32.dll | 532 | HeapDestroy | |
| KERNEL32.dll | 530 | HeapCreate | |
| KERNEL32.dll | 899 | VirtualFree | |
| KERNEL32.dll | 538 | HeapReAlloc | |
| KERNEL32.dll | 253 | GetACP | |
| KERNEL32.dll | 403 | GetOEMCP | |
| KERNEL32.dll | 575 | IsValidCodePage | |
| KERNEL32.dll | 540 | HeapSize | |
| KERNEL32.dll | 482 | GetTimeZoneInformation | |
| KERNEL32.dll | 804 | SetHandleCount | |
| KERNEL32.dll | 358 | GetFileType | |
| KERNEL32.dll | 246 | FreeEnvironmentStringsA | |
| KERNEL32.dll | 341 | GetEnvironmentStrings | |
| KERNEL32.dll | 247 | FreeEnvironmentStringsW | |
| KERNEL32.dll | 343 | GetEnvironmentStringsW | |
| KERNEL32.dll | 675 | QueryPerformanceCounter | |
| USER32.dll | 460 | LoadStringW | |
| USER32.dll | 429 | IsWindow | |
| USER32.dll | 514 | PostMessageA | |
| USER32.dll | 135 | DefDlgProcA | |
| USER32.dll | 188 | DrawTextA | |
| USER32.dll | 85 | CreateDialogParamA | |
| USER32.dll | 535 | RegisterClassExA | |
| USER32.dll | 158 | DialogBoxParamA | |
| USER32.dll | 376 | GetWindowTextLengthA | |
| USER32.dll | 375 | GetWindowTextA | |
| USER32.dll | 270 | GetDesktopWindow | |
| USER32.dll | 492 | MoveWindow | |
| USER32.dll | 618 | SetPropA | |
| USER32.dll | 219 | EnumThreadWindows | |
| USER32.dll | 314 | GetMessageA | |
| USER32.dll | 13 | BeginPaint | |
| USER32.dll | 200 | EndPaint | |
| USER32.dll | 437 | KillTimer | |
| USER32.dll | 242 | GetAsyncKeyState | |
| USER32.dll | 349 | GetSystemMetrics | |
| USER32.dll | 634 | SetTimer | |
| USER32.dll | 646 | SetWindowTextA | |
| USER32.dll | 273 | GetDlgItem | |
| USER32.dll | 82 | CreateDialogIndirectParamA | |
| USER32.dll | 658 | ShowWindow | |
| USER32.dll | 700 | UpdateWindow | |
| USER32.dll | 459 | LoadStringA | |
| USER32.dll | 330 | GetPropA | |
| USER32.dll | 227 | FindWindowA | |
| USER32.dll | 718 | WaitForInputIdle | |
| USER32.dll | 153 | DestroyWindow | |
| USER32.dll | 479 | MessageBoxA | |
| USER32.dll | 392 | InSendMessage | |
| USER32.dll | 690 | UnpackDDElParam | |
| USER32.dll | 234 | FreeDDElParam | |
| USER32.dll | 143 | DefWindowProcW | |
| USER32.dll | 142 | DefWindowProcA | |
| USER32.dll | 442 | LoadCursorA | |
| USER32.dll | 537 | RegisterClassW | |
| USER32.dll | 97 | CreateWindowExW | |
| USER32.dll | 534 | RegisterClassA | |
| USER32.dll | 96 | CreateWindowExA | |
| USER32.dll | 379 | GetWindowThreadProcessId | |
| USER32.dll | 576 | SendMessageW | |
| USER32.dll | 571 | SendMessageA | |
| USER32.dll | 512 | PeekMessageA | |
| USER32.dll | 682 | TranslateMessage | |
| USER32.dll | 161 | DispatchMessageA | |
| USER32.dll | 222 | EnumWindows | |
| USER32.dll | 432 | IsWindowUnicode | |
| USER32.dll | 509 | PackDDElParam | |
| USER32.dll | 515 | PostMessageW | |
| GDI32.dll | 526 | SelectObject | |
| GDI32.dll | 18 | BitBlt | |
| GDI32.dll | 143 | DeleteObject | |
| GDI32.dll | 69 | CreatePalette | |
| GDI32.dll | 46 | CreateDCA | |
| GDI32.dll | 527 | SelectPalette | |
| GDI32.dll | 499 | RealizePalette | |
| GDI32.dll | 51 | CreateDIBitmap | |
| GDI32.dll | 140 | DeleteDC | |
| GDI32.dll | 45 | CreateCompatibleDC | |
| comdlg32.dll | 11 | GetSaveFileNameA | |
| comdlg32.dll | 9 | GetOpenFileNameA | |
| msvcrt.dll | wcscoll | ||
| SHELL32.DLL | ShellExecuteA | ||
| WINMM.DLL | timeGetTime | ||
| OPENGL32.DLL | glDepthRange |
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0xa8ecc