filenamejscript.dll
size610304 (0x95000)
md593368a8366024fbb0cc1dd315d1beb38
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
2066550125
205655016
10207
2036550113
202655011
2166550164
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x52158806
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x81600
SizeOfInitializedData0x13600
SizeOfUninitializedData0
AddressOfEntryPoint0x6002
BaseOfCode0x1000
BaseOfData0x82000
ImageBase0x63380000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion6.1
Reserved10
SizeOfImage0x98000
SizeOfHeaders0x400
CheckSum0xa44e5
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x8156c0x81600R-X CODE
.data0x830000x49680x4a00RW- IDATA
.idata0x880000x10f00x1200R-- IDATA
.rsrc0x8a0000x7e700x8000R-- IDATA
.reloc0x920000x58700x5a00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xdd840xa4
IMPORT0x883140x8c
RESOURCE0x8a0000x7e70
EXCEPTION00
SECURITY00
BASERELOC0x920000x5870
DEBUG0x825080x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x45d600x40
Bound_IAT00
IAT0x880000x314
Delay_IAT0x823ac0x40
CLR_Header00
typenamesizecp
MUI#12160
TYPELIB#1201080
STRING#13640
STRING#21340
STRING#3860
STRING#43660
STRING#52960
STRING#62100
STRING#211060
STRING#272000
STRING#285120
STRING#295740
STRING#323020
STRING#632020
STRING#645940
STRING#657580
STRING#2572060
STRING#3133480
STRING#3149200
STRING#31510840
STRING#376660
STRING#626320
STRING#627320
STRING#628320
STRING#629320
STRING#630320
STRING#631320
STRING#646320
STRING#652320
STRING#6531220
STRING#654320
STRING#657320
STRING#9383140
STRING#9394100
STRING#9404720
STRING#20511680
STRING#2676320
VERSION#18280
idlangstring
51033Invalid procedure call or argument
61033Overflow
71033Out of memory
91033Subscript out of range
101033This array is fixed or temporarily locked
111033Division by zero
131033Type mismatch
141033Out of string space
171033Can't perform requested operation
281033Out of stack space
351033Sub or Function not defined
481033Error in loading DLL
511033Internal error
521033Bad file name or number
531033File not found
541033Bad file mode
551033File already open
571033Device I/O error
581033File already exists
611033Disk full
621033Input past end of file
671033Too many files
681033Device unavailable
701033Permission denied
711033Disk not ready
741033Can't rename with different drive
751033Path/File access error
761033Path not found
911033Object variable or With block variable not set
921033For loop not initialized
941033Invalid use of Null
3221033Can't create necessary temporary file
4241033Object required
4291033Automation server can't create object
4301033Class doesn't support Automation
4321033File name or class name not found during Automation operation
4381033Object doesn't support this property or method
4401033Automation error
4451033Object doesn't support this action
4461033Object doesn't support named arguments
4471033Object doesn't support current locale setting
4481033Named argument not found
4491033Argument not optional
4501033Wrong number of arguments or invalid property assignment
4511033Object not a collection
4531033Specified DLL function not found
4581033Variable uses an Automation type not supported in JScript
4621033The remote server machine does not exist or is unavailable
5011033Cannot assign to variable
5021033Object not safe for scripting
5031033Object not safe for initializing
5041033Object not safe for creating
5071033An exception occurred
10011033Out of memory
10021033Syntax error
10031033Expected ':'
10041033Expected ';'
10051033Expected '('
10061033Expected ')'
10071033Expected ']'
10081033Expected '{'
10091033Expected '}'
10101033Expected identifier
10111033Expected '='
10121033Expected '/'
10131033Invalid number
10141033Invalid character
10151033Unterminated string constant
10161033Unterminated comment
10181033'return' statement outside of function
10191033Can't have 'break' outside of loop
10201033Can't have 'continue' outside of loop
10231033Expected hexadecimal digit
10241033Expected 'while'
10251033Label redefined
10261033Label not found
10271033'default' can only appear once in a 'switch' statement
10281033Expected identifier, string or number
10291033Expected '@end'
10301033Conditional compilation is turned off
10311033Expected constant
10321033Expected '@'
10331033Expected 'catch'
10341033Expected 'var'
10351033throw must be followed by an expression on the same source line
10361033'with' not available in the ECMA 327 Compact Profile
40961033Microsoft JScript compilation error
40971033Microsoft JScript runtime error
40981033Unknown runtime error
50001033Cannot assign to 'this'
50011033Number expected
50021033Function expected
50031033Cannot assign to a function result
50041033Cannot index object
50051033String expected
50061033Date object expected
50071033Object expected
50081033Illegal assignment
50091033Undefined identifier
50101033Boolean expected
50111033Can't execute code from a freed script
50121033Object member expected
50131033VBArray expected
50141033JScript object expected
50151033Enumerator object expected
50161033Regular Expression object expected
50171033Syntax error in regular expression
50181033Unexpected quantifier
50191033Expected ']' in regular expression
50201033Expected ')' in regular expression
50211033Invalid range in character set
50221033Exception thrown and not caught
50231033Function does not have a valid prototype object
50241033The URI to be encoded contains an invalid character
50251033The URI to be decoded is not a valid encoding
50261033The number of fractional digits is out of range
50271033The precision is out of range
50281033Array or arguments object expected
50291033Array length must be a finite positive integer
50301033Array length must be assigned a finite positive number
50311033Array object expected
50321033'eval' is not available in the ECMA 327 Compact Profile
50331033Function constructor is not available in the ECMA 327 Compact Profile
50341033Circular reference in value argument not supported
50351033Invalid replacer argument
60001033Infinity
60011033-Infinity
104381033Object doesn't support property or method '|'
150011033'|' is not a number
150021033'|' is not a function
150041033'|' is not an indexable object
150051033'|' is not a string
150061033'|' is not a date object
150071033'|' is null or not an object
150081033Cannot assign to '|'
150091033'|' is undefined
150101033'|' is not a boolean
150121033Cannot delete '|'
150131033'|' is not a VBArray
150141033'|' is not a JScript object
150151033'|' is not an enumerator object
150161033'|' is not a regular expression object
150281033| is not an Array or arguments object
150311033| is not an Array object
150361033'|' attribute on the property descriptor cannot be set to 'true' on this object
150371033'|' attribute on the property descriptor cannot be set to 'false' on this object
328121033The specified date is not available in the current locale's calendar
module_namehintordfunction_name
msvcrt.dll1356strtoul
msvcrt.dll1406wcsncpy_s
msvcrt.dll1325sprintf_s
msvcrt.dll876_splitpath_s
msvcrt.dll1278longjmp
msvcrt.dll1336strcpy_s
msvcrt.dll1349strrchr
msvcrt.dll1331strcat_s
msvcrt.dll1372towlower
msvcrt.dll958_ultow
msvcrt.dll1185atoi
msvcrt.dll1049_wcsnicmp
msvcrt.dll736_mbsrchr
msvcrt.dll672_mbsicmp
msvcrt.dll1394wcschr
msvcrt.dll1399wcscspn
msvcrt.dll859_snwprintf_s
msvcrt.dll1039_wcsicmp
msvcrt.dll806_resetstkoflw
msvcrt.dll113_XcptFilter
msvcrt.dll275_amsg_exit
msvcrt.dll490_initterm
msvcrt.dll1322sin
msvcrt.dll1180asin
msvcrt.dll1201exp
msvcrt.dll1181atan
msvcrt.dll1177acos
msvcrt.dll1213fmod
msvcrt.dll1363tan
msvcrt.dll418_ftime
msvcrt.dll1276log
msvcrt.dll1299pow
msvcrt.dll1195cos
msvcrt.dll1326sqrt
msvcrt.dll1182atan2
msvcrt.dll1393wcscat_s
msvcrt.dll1187bsearch
msvcrt.dll1398wcscpy_s
msvcrt.dll521_ismbblead
msvcrt.dll43void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

msvcrt.dll41void * __cdecl operator new[](unsigned int)

??_U@YAPAXI@Z

msvcrt.dll1404wcsncmp
msvcrt.dll312_control87
msvcrt.dll308_clearfp
msvcrt.dll885_statusfp
msvcrt.dll796_purecall
msvcrt.dll1034_wcsdup
msvcrt.dll1026_wasctime
msvcrt.dll951_tzset
msvcrt.dll1249isdigit
msvcrt.dll610_lock
msvcrt.dll966_unlock
msvcrt.dll159__dllonexit
msvcrt.dll779_onexit
msvcrt.dll1258iswalpha
msvcrt.dll1275localtime
msvcrt.dll1006_vsnwprintf
msvcrt.dll1247isalpha
msvcrt.dll1043_wcslwr
msvcrt.dll1223free
msvcrt.dll1191ceil
msvcrt.dll1293memmove
msvcrt.dll622_ltow
msvcrt.dll1312realloc
msvcrt.dll1279malloc
msvcrt.dll1361swscanf_s
msvcrt.dll1269iswxdigit
msvcrt.dll1413wcsstr
msvcrt.dll1359swprintf_s
msvcrt.dll18void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll20void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll364_except_handler4_common
msvcrt.dll565_isnan
msvcrt.dll65_CIfmod
msvcrt.dll66_CIlog
msvcrt.dll424_ftol2
msvcrt.dll425_ftol2_sse
msvcrt.dll605_local_unwind4
msvcrt.dll841_setjmp3
msvcrt.dll1212floor
msvcrt.dll1290memcmp
msvcrt.dll1291memcpy
msvcrt.dll1295memset
OLEAUT32.dll147
OLEAUT32.dll8
OLEAUT32.dll11
OLEAUT32.dll27
OLEAUT32.dll25
OLEAUT32.dll16
OLEAUT32.dll10
OLEAUT32.dll9
OLEAUT32.dll4
OLEAUT32.dll6
OLEAUT32.dll7
OLEAUT32.dll2
OLEAUT32.dll150
OLEAUT32.dll162
OLEAUT32.dll35
OLEAUT32.dll200
OLEAUT32.dll149
OLEAUT32.dll15
OLEAUT32.dll180
OLEAUT32.dll40
OLEAUT32.dll160
OLEAUT32.dll183
ADVAPI32.dll657RegQueryValueExA
ADVAPI32.dll644RegOpenKeyExA
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll673RegSetValueExA
ADVAPI32.dll604RegCreateKeyExA
ADVAPI32.dll610RegDeleteKeyExA
ADVAPI32.dll291EventWrite
ADVAPI32.dll658RegQueryValueExW
ADVAPI32.dll645RegOpenKeyExW
KERNEL32.dll715GetSystemDefaultUILanguage
KERNEL32.dll1411UnmapViewOfFile
KERNEL32.dll960MapViewOfFile
KERNEL32.dll1201SearchPathW
KERNEL32.dll392FindResourceExW
KERNEL32.dll935LoadLibraryExW
KERNEL32.dll258DelayLoadFailureHook
KERNEL32.dll669GetProcAddress
KERNEL32.dll592GetLastError
KERNEL32.dll772GetVersionExA
KERNEL32.dll934LoadLibraryExA
KERNEL32.dll957LockResource
KERNEL32.dll611GetModuleFileNameW
KERNEL32.dll1359SizeofResource
KERNEL32.dll939LoadResource
KERNEL32.dll417FreeResource
KERNEL32.dll390FindResourceA
KERNEL32.dll612GetModuleHandleA
KERNEL32.dll1394TlsFree
KERNEL32.dll1393TlsAlloc
KERNEL32.dll414FreeLibrary
KERNEL32.dll553GetEnvironmentVariableW
KERNEL32.dll706GetStringTypeA
KERNEL32.dll610GetModuleFileNameA
KERNEL32.dll882IsValidCodePage
KERNEL32.dll773GetVersionExW
KERNEL32.dll884IsValidLocale
KERNEL32.dll712GetSystemDefaultLCID
KERNEL32.dll462GetComputerNameA
KERNEL32.dll1396TlsSetValue
KERNEL32.dll194CreateFileW
KERNEL32.dll191CreateFileMappingW
KERNEL32.dll767GetUserDefaultUILanguage
KERNEL32.dll127CloseHandle
KERNEL32.dll942LocalAlloc
KERNEL32.dll946LocalFree
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll1375TerminateProcess
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll1408UnhandledExceptionFilter
KERNEL32.dll1360Sleep
KERNEL32.dll764GetUserDefaultLCID
KERNEL32.dll918LCMapStringW
KERNEL32.dll771GetVersion
KERNEL32.dll144CompareStringA
KERNEL32.dll709GetStringTypeW
KERNEL32.dll642GetNumberFormatW
KERNEL32.dll1290SetLastError
KERNEL32.dll916LCMapStringA
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll147CompareStringW
KERNEL32.dll759GetTimeFormatW
KERNEL32.dll596GetLocaleInfoW
KERNEL32.dll1483WideCharToMultiByte
KERNEL32.dll528GetDateFormatA
KERNEL32.dll640GetNumberFormatA
KERNEL32.dll420GetACP
KERNEL32.dll1345SetUnhandledExceptionFilter
KERNEL32.dll1395TlsGetValue
KERNEL32.dll761GetTimeZoneInformation
KERNEL32.dll724GetSystemTime
KERNEL32.dll754GetTickCount
KERNEL32.dll839InitializeCriticalSection
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll976MulDiv
KERNEL32.dll293EnterCriticalSection
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll531GetDateFormatW
KERNEL32.dll594GetLocaleInfoA
KERNEL32.dll756GetTimeFormatA
SHLWAPI.dll143PathRemoveFileSpecW
VERSION.dll16VerQueryValueW
VERSION.dll3GetFileVersionInfoExW
VERSION.dll6GetFileVersionInfoSizeExW
ordentry_vafunction_name
10x162eeDllCanUnloadNow
20x126afDllGetClassObject
30x6987cDllRegisterServer
40x69910DllUnregisterServer
module_nameJSCRIPT.dll
flags0
timestamp2013-08-22 03:39:50
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0xddbc
Functions(4)0xddac
NameOrdinals(4)0xddcc

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft ® JScript
FileVersion5.8.9600.16384
InternalNamejscript.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamejscript.dll
ProductNameMicrosoft ® JScript
ProductVersion5.8.9600.16384

VS_FIXEDFILEINFO

FileVersion5.8.9600.16384
ProductVersion5.8.9600.16384
StrucVersion0x10000
FileFlagsMask3
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0610304DLL08/22/2013 03:39:50#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK