perl.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	perl.exe
size	7168 (0x1c00)
md5	b83e05b46c0e8be43bd8b099a62d23ad

type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x51ab1eaa
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30f
Magic	0x10b
LinkerVersion	2.56
SizeOfCode	0x1000
SizeOfInitializedData	0x800
SizeOfUninitializedData	0x200
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x5000
SizeOfHeaders	0x400
CheckSum	0x770a
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xf90	0x1000	R-X CODE
.data	0x2000	0x18	0x200	RW- IDATA
.bss	0x3000	0x2c	0	RW- UDATA
.idata	0x4000	0x5f0	0x600	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x4000	0x5f0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
msys-perl5_8.dll	1	MallocCfg_ptr
msys-perl5_8.dll	55	PL_curpad
msys-perl5_8.dll	74	PL_do_undump
msys-perl5_8.dll	93	PL_exit_flags
msys-perl5_8.dll	173	PL_markstack_ptr
msys-perl5_8.dll	227	PL_op
msys-perl5_8.dll	247	PL_perl_destruct_level
msys-perl5_8.dll	346	PL_sigfpe_saved
msys-perl5_8.dll	356	PL_stack_base
msys-perl5_8.dll	358	PL_stack_sp
msys-perl5_8.dll	381	PL_sv_yes
msys-perl5_8.dll	773	Perl_croak
msys-perl5_8.dll	830	Perl_doing_taint
msys-perl5_8.dll	852	Perl_form
msys-perl5_8.dll	868	Perl_get_sv
msys-perl5_8.dll	1068	Perl_mg_set
msys-perl5_8.dll	1126	Perl_newRV
msys-perl5_8.dll	1139	Perl_newSVpvn
msys-perl5_8.dll	1146	Perl_newXS
msys-perl5_8.dll	1661	Perl_sv_2iv
msys-perl5_8.dll	1662	Perl_sv_2mortal
msys-perl5_8.dll	1665	Perl_sv_2pv_flags
msys-perl5_8.dll	1715	Perl_sv_newmortal
msys-perl5_8.dll	1741	Perl_sv_setiv
msys-perl5_8.dll	1745	Perl_sv_setpv
msys-perl5_8.dll	1751	Perl_sv_setpvn
msys-perl5_8.dll	1829	Perl_vmess
msys-perl5_8.dll	1878	perl_alloc
msys-perl5_8.dll	1879	perl_construct
msys-perl5_8.dll	1880	perl_destruct
msys-perl5_8.dll	1881	perl_free
msys-perl5_8.dll	1882	perl_parse
msys-perl5_8.dll	1883	perl_run
KERNEL32.dll	296	GetModuleHandleA
msys-1.0.dll	27	__main
msys-1.0.dll	566	atoi
msys-1.0.dll	575	calloc
msys-1.0.dll	625	cygwin_internal
msys-1.0.dll	640	dlclose
msys-1.0.dll	641	dlerror
msys-1.0.dll	643	dll_crt0__FP11per_process
msys-1.0.dll	647	dlopen
msys-1.0.dll	648	dlsym
msys-1.0.dll	672	exit
msys-1.0.dll	711	free
msys-1.0.dll	739	getenv
msys-1.0.dll	862	malloc
msys-1.0.dll	990	realloc
msys-1.0.dll	1078	signal

show previews

offset	size	type	comment
0	7168	EXE	06/02/2013 10:30:02	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK