ncrypt.dll - Windows cryptographic library

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	ncrypt.dll
size	223232 (0x36800)
md5	86cfcbe4754a0258e676005006cbe80d

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
149	30729	12
132	30729	9
147	30729	13
1	0	264
146	30729	1
131	30729	77
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x5831cd38
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x32400
SizeOfInitializedData	0x4000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1489
BaseOfCode	0x1000
BaseOfData	0x35000
ImageBase	0x6c800000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x39000
SizeOfHeaders	0x400
CheckSum	0x43474
Subsystem	3
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3234f	0x32400	R-X CODE
.data	0x34000	0x1f00	0x2000	RW- IDATA
.rsrc	0x36000	0x520	0x600	R-- IDATA
.reloc	0x37000	0x183c	0x1a00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1db4	0x14d2
IMPORT	0x32170	0x8c
RESOURCE	0x36000	0x520
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x37000	0x183c
DEBUG	0x332f0	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x12700	0x40
Bound_IAT	0	0
IAT	0x1000	0x2cc
Delay_IAT	0x31800	0x140
CLR_Header	0	0

show previews

type	name	size	cp
MUI	#1	200	0
VERSION	#1	936	0

module_name	hint	function_name
bcrypt.dll	45	BCryptResolveProviders
bcrypt.dll	30	BCryptGenerateSymmetricKey
bcrypt.dll	28	BCryptGenRandom
bcrypt.dll	34	BCryptImportKey
bcrypt.dll	15	BCryptDuplicateHash
bcrypt.dll	6	BCryptCreateHash
bcrypt.dll	33	BCryptHashData
bcrypt.dll	26	BCryptFinishHash
bcrypt.dll	12	BCryptDestroyHash
bcrypt.dll	49	BCryptSetProperty
bcrypt.dll	53	BCryptVerifySignature
bcrypt.dll	50	BCryptSignHash
bcrypt.dll	32	BCryptGetProperty
bcrypt.dll	29	BCryptGenerateKeyPair
bcrypt.dll	25	BCryptFinalizeKeyPair
bcrypt.dll	35	BCryptImportKeyPair
bcrypt.dll	9	BCryptDeriveKey
bcrypt.dll	46	BCryptSecretAgreement
bcrypt.dll	24	BCryptExportKey
bcrypt.dll	7	BCryptDecrypt
bcrypt.dll	17	BCryptEncrypt
bcrypt.dll	14	BCryptDestroySecret
bcrypt.dll	13	BCryptDestroyKey
bcrypt.dll	36	BCryptOpenAlgorithmProvider
bcrypt.dll	2	BCryptCloseAlgorithmProvider
bcrypt.dll	27	BCryptFreeBuffer
msvcrt.dll	345	_except_handler4_common
msvcrt.dll	257	_amsg_exit
msvcrt.dll	1190	free
msvcrt.dll	1246	malloc
msvcrt.dll	106	_XcptFilter
msvcrt.dll	1260	memmove
msvcrt.dll	1011	_wcslwr
msvcrt.dll	866	_strlwr
msvcrt.dll	1258	memcpy
msvcrt.dll	1262	memset
msvcrt.dll	974	_vsnwprintf
msvcrt.dll	1360	wcscat_s
msvcrt.dll	588	_ltoa
msvcrt.dll	1153	atol
msvcrt.dll	1007	_wcsicmp
msvcrt.dll	469	_initterm
ntdll.dll	846	RtlFreeSid
ntdll.dll	1047	RtlNtStatusToDosError
ntdll.dll	611	RtlAllocateAndInitializeSid
ntdll.dll	927	RtlInitUnicodeString
ntdll.dll	848	RtlFreeUnicodeString
ntdll.dll	618	RtlAnsiStringToUnicodeString
ntdll.dll	918	RtlInitAnsiString
ntdll.dll	841	RtlFreeAnsiString
ntdll.dll	1221	RtlUnicodeStringToAnsiString
ntdll.dll	843	RtlFreeHeap
ntdll.dll	1111	RtlReleaseRelativeName
ntdll.dll	230	NtCreateFile
ntdll.dll	582	RtlAcquireSRWLockExclusive
ntdll.dll	576	RtlAbsoluteToSelfRelativeSD
ntdll.dll	856	RtlGetControlSecurityDescriptor
ntdll.dll	1113	RtlReleaseSRWLockExclusive
ntdll.dll	946	RtlInitializeSRWLock
ntdll.dll	739	RtlDeleteResource
ntdll.dll	944	RtlInitializeResource
ntdll.dll	613	RtlAllocateHeap
ntdll.dll	1185	RtlSizeHeap
ntdll.dll	348	NtOpenKey
ntdll.dll	623	RtlAppendUnicodeToString
ntdll.dll	432	NtQueryValueKey
ntdll.dll	656	RtlCompareUnicodeString
ntdll.dll	400	NtQueryInformationProcess
ntdll.dll	345	NtOpenFile
ntdll.dll	912	RtlImageNtHeader
ntdll.dll	1048	RtlNtStatusToDosErrorNoTeb
ntdll.dll	356	NtOpenProcess
ntdll.dll	934	RtlInitializeCriticalSection
ntdll.dll	733	RtlDeleteCriticalSection
ntdll.dll	1007	RtlLeaveCriticalSection
ntdll.dll	214	NtClose
ntdll.dll	1112	RtlReleaseResource
ntdll.dll	580	RtlAcquireResourceExclusive
ntdll.dll	581	RtlAcquireResourceShared
ntdll.dll	102	LdrDisableThreadCalloutsForDll
ntdll.dll	782	RtlEnterCriticalSection
ntdll.dll	764	RtlDosPathNameToRelativeNtPathName_U
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	18	LoadStringW
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	14	LoadLibraryExA
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	13	GetProcAddress
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	4	FreeLibrary
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	9	GetModuleHandleA
MSASN1.dll	27	ASN1BERDecSXVal
MSASN1.dll	25	ASN1BERDecS32Val
MSASN1.dll	10	ASN1BERDecExplicitTag
MSASN1.dll	131	ASN1intx_free
MSASN1.dll	84	ASN1DEREncBitString
MSASN1.dll	56	ASN1BEREncObjectIdentifier2
MSASN1.dll	93	ASN1DEREncOctetString
MSASN1.dll	64	ASN1BEREncU32
MSASN1.dll	1	ASN1BERDecBitString2
MSASN1.dll	18	ASN1BERDecObjectIdentifier2
MSASN1.dll	23	ASN1BERDecPeekTag
MSASN1.dll	20	ASN1BERDecOctetString2
MSASN1.dll	30	ASN1BERDecU16Val
MSASN1.dll	8	ASN1BERDecEndOfContents
MSASN1.dll	49	ASN1BEREncExplicitTag
MSASN1.dll	61	ASN1BEREncS32
MSASN1.dll	62	ASN1BEREncSX
MSASN1.dll	47	ASN1BEREncEndOfContents
MSASN1.dll	105	ASN1_CloseModule
MSASN1.dll	109	ASN1_CreateModule
MSASN1.dll	106	ASN1_CreateDecoder
MSASN1.dll	102	ASN1_CloseDecoder
MSASN1.dll	108	ASN1_CreateEncoder
MSASN1.dll	103	ASN1_CloseEncoder
MSASN1.dll	112	ASN1_FreeDecoded
MSASN1.dll	110	ASN1_Decode
MSASN1.dll	117	ASN1_SetEncoderOption
MSASN1.dll	113	ASN1_FreeEncoded
MSASN1.dll	111	ASN1_Encode
KERNEL32.dll	673	GetVersion
KERNEL32.dll	1267	VirtualQuery
KERNEL32.dll	626	GetSystemInfo
KERNEL32.dll	534	GetModuleHandleW
KERNEL32.dll	1259	VirtualAlloc
KERNEL32.dll	1265	VirtualProtect
KERNEL32.dll	221	DeviceIoControl
KERNEL32.dll	715	HeapAlloc
KERNEL32.dll	584	GetProcessHeap
KERNEL32.dll	719	HeapFree
KERNEL32.dll	836	LocalAlloc
KERNEL32.dll	637	GetSystemWow64DirectoryW
KERNEL32.dll	825	LeaveCriticalSection
KERNEL32.dll	238	EnterCriticalSection
KERNEL32.dll	209	DeleteCriticalSection
KERNEL32.dll	739	InitializeCriticalSection
KERNEL32.dll	1188	SetUnhandledExceptionFilter
KERNEL32.dll	1237	UnhandledExceptionFilter
KERNEL32.dll	1217	TerminateProcess
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	658	GetTickCount
KERNEL32.dll	932	QueryPerformanceCounter
KERNEL32.dll	748	InterlockedExchange
KERNEL32.dll	232	DuplicateHandle
KERNEL32.dll	623	GetSystemDirectoryW
KERNEL32.dll	840	LocalFree
KERNEL32.dll	325	FindNextFileW
KERNEL32.dll	957	ReadFile
KERNEL32.dll	831	LoadLibraryW
KERNEL32.dll	308	FindFirstFileExW
KERNEL32.dll	302	FindClose
KERNEL32.dll	1360	lstrlenW
KERNEL32.dll	214	DeleteFileW
KERNEL32.dll	644	GetTempPathW
KERNEL32.dll	642	GetTempFileNameW
KERNEL32.dll	863	MoveFileExW
KERNEL32.dll	494	GetFileSize
KERNEL32.dll	1319	WriteFile
KERNEL32.dll	144	CreateFileW
KERNEL32.dll	828	LoadLibraryA
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	83	CloseHandle
KERNEL32.dll	305	FindFirstChangeNotificationW
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	452	GetCurrentThread
KERNEL32.dll	303	FindCloseChangeNotification
KERNEL32.dll	322	FindNextChangeNotification
KERNEL32.dll	1202	Sleep
KERNEL32.dll	97	CompareFileTime
KERNEL32.dll	632	GetSystemTimeAsFileTime
KERNEL32.dll	206	DelayLoadFailureHook
KERNEL32.dll	870	MultiByteToWideChar
KERNEL32.dll	512	GetLastError
KERNEL32.dll	747	InterlockedDecrement
KERNEL32.dll	751	InterlockedIncrement
KERNEL32.dll	1138	SetLastError
KERNEL32.dll	745	InterlockedCompareExchange

ord	entry_va	function_name
1	0x2c16	BCryptAddContextFunction
2	0x2c36	BCryptAddContextFunctionProvider
3	0x2c5e	BCryptCloseAlgorithmProvider
4	0x2c82	BCryptConfigureContext
5	0x2ca0	BCryptConfigureContextFunction
6	0x2cc6	BCryptCreateContext
7	0x2ce1	BCryptCreateHash
8	0x2cf9	BCryptDecrypt
9	0x2d0e	BCryptDeleteContext
10	0x2d29	BCryptDeriveKey
11	0x2d40	BCryptDeriveKeyCapi
12	0x2d5b	BCryptDeriveKeyPBKDF2
13	0x2d78	BCryptDestroyHash
14	0x2d91	BCryptDestroyKey
15	0x2da9	BCryptDestroySecret
16	0x2dc4	BCryptDuplicateHash
17	0x2ddf	BCryptDuplicateKey
18	0x2df9	BCryptEncrypt
19	0x2e0e	BCryptEnumAlgorithms
20	0x2e2a	BCryptEnumContextFunctionProviders
21	0x2e54	BCryptEnumContextFunctions
22	0x2e76	BCryptEnumContexts
23	0x2e90	BCryptEnumProviders
24	0x2eab	BCryptEnumRegisteredProviders
25	0x2ed0	BCryptExportKey
26	0x2ee7	BCryptFinalizeKeyPair
27	0x2f04	BCryptFinishHash
28	0x2f1c	BCryptFreeBuffer
29	0x2f34	BCryptGenRandom
30	0x2f4b	BCryptGenerateKeyPair
31	0x2f68	BCryptGenerateSymmetricKey
32	0x2f8a	BCryptGetFipsAlgorithmMode
33	0x2fac	BCryptGetProperty
34	0x2fc5	BCryptHashData
35	0x2fdb	BCryptImportKey
36	0x2ff2	BCryptImportKeyPair
37	0x300d	BCryptOpenAlgorithmProvider
38	0x3030	BCryptQueryContextConfiguration
39	0x3057	BCryptQueryContextFunctionConfiguration
40	0x3086	BCryptQueryContextFunctionProperty
41	0x30b0	BCryptQueryProviderRegistration
42	0x30d7	BCryptRegisterConfigChangeNotify
43	0x30ff	BCryptRegisterProvider
44	0x311d	BCryptRemoveContextFunction
45	0x3140	BCryptRemoveContextFunctionProvider
46	0x316b	BCryptResolveProviders
47	0x3189	BCryptSecretAgreement
48	0x31a6	BCryptSetAuditingInterface
49	0x31c8	BCryptSetContextFunctionProperty
50	0x31f0	BCryptSetProperty
51	0x3209	BCryptSignHash
52	0x321f	BCryptUnregisterConfigChangeNotify
53	0x3249	BCryptUnregisterProvider
54	0x3269	BCryptVerifySignature
55	0xadbf	GetIsolationServerInterface
56	0xaf4c	GetKeyStorageInterface
57	0xa47d	GetSChannelInterface
58	0x12b61	NCryptCreatePersistedKey
59	0x1339c	NCryptDecrypt
60	0x132a1	NCryptDeleteKey
61	0x13ae5	NCryptDeriveKey
62	0x8a25	NCryptEncrypt
63	0x134e7	NCryptEnumAlgorithms
64	0x135ef	NCryptEnumKeys
65	0x1291d	NCryptEnumStorageProviders
66	0x1379b	NCryptExportKey
67	0x13205	NCryptFinalizeKey
68	0x13355	NCryptFreeBuffer
69	0x9bb7	NCryptFreeObject
70	0x12c0e	NCryptGetProperty
71	0x985b	NCryptImportKey
72	0x13441	NCryptIsAlgSupported
73	0x61a3	NCryptIsKeyHandle
74	0x13eb6	NCryptNotifyChangeKey
75	0x12a65	NCryptOpenKey
76	0xb917	NCryptOpenStorageProvider
77	0x139d1	NCryptSecretAgreement
78	0xadf7	NCryptSetAuditingInterface
79	0x12ec5	NCryptSetProperty
80	0x13879	NCryptSignHash
81	0x13b2f	NCryptTranslateHandle
82	0x1391f	NCryptVerifySignature
83	0x13f00	SslChangeNotify
84	0x13f0d	SslComputeClientAuthHash
85	0x13f76	SslComputeEapKeyBlock
86	0x61bf	SslComputeFinishedHash
87	0x145be	SslComputeSessionHash
88	0x1408a	SslCreateClientAuthHash
89	0x13fd1	SslCreateEphemeralKey
90	0x8a88	SslCreateHandshakeHash
91	0x6170	SslDecrementProviderReferenceCount
92	0x3671	SslDecryptPacket
93	0x385b	SslEncryptPacket
94	0xb77e	SslEnumCipherSuites
95	0xb57c	SslEnumProtocolProviders
96	0x86c3	SslExportKey
97	0xb88d	SslFreeBuffer
98	0x3a82	SslFreeObject
99	0xe620	SslGenerateMasterKey
100	0x14623	SslGeneratePreMasterKey
101	0x8be1	SslGenerateSessionKeys
102	0x1414d	SslGetCipherSuitePRFHashAlgorithm
103	0x14211	SslGetKeyProperty
104	0x14289	SslGetProviderProperty
105	0x8ce0	SslHashHandshake
106	0x5d25	SslImportKey
107	0x1439e	SslImportMasterKey
108	0x5dc7	SslIncrementProviderReferenceCount
109	0x141b4	SslLookupCipherLengths
110	0x5b3b	SslLookupCipherSuiteInfo
111	0x14469	SslOpenPrivateKey
112	0xa861	SslOpenProvider
113	0x1450b	SslSignHash
114	0x14566	SslVerifySignature

module_name	ncrypt.dll
flags	0
timestamp	2016-11-20 15:56:43
version	0.0
ordinal_base	1
nFunctions	114
nNames	114
Names(114)	0x1fa4
Functions(114)	0x1ddc
NameOrdinals(114)	0x216c

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Windows cryptographic library
FileVersion	6.1.7601.23601 (win7sp1_ldr.161120-0600)
InternalName	ncrypt.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	ncrypt.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.23601

VS_FIXEDFILEINFO

FileVersion	6.1.7601.23601
ProductVersion	6.1.7601.23601
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	223232	DLL	11/20/2016 16:20:08	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

ncrypt.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

ncrypt.dll
-