ldapexop.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	ldapexop.exe
size	184320 (0x2d000)
md5	c40b994d162279d2a99319db2ca61673

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
110	50727	2
125	50727	5
126	50327	3
93	6030	2
93	4035	4
123	50727	9
1	0	273
109	50727	81
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4f70a563
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x21000
SizeOfInitializedData	0xb000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x218e7
BaseOfCode	0x1000
BaseOfData	0x22000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2f000
SizeOfHeaders	0x1000
CheckSum	0x37c61
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x20f0c	0x21000	R-X CODE
.rdata	0x22000	0x83ca	0x9000	R-- IDATA
.data	0x2b000	0x2da8	0x1000	RW- IDATA
.rsrc	0x2e000	0x1b0	0x1000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x29834	0xa0
RESOURCE	0x2e000	0x1b0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x29770	0x40
Bound_IAT	0	0
IAT	0x22000	0x3f0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	341	1252

module_name	hint	ord	function_name
libsasl.dll	43		sasl_global_listmech
libsasl.dll	30		sasl_client_start
libsasl.dll	31		sasl_client_step
libsasl.dll	40		sasl_errdetail
libsasl.dll	28		sasl_client_new
libsasl.dll	59		sasl_set_mutex
libsasl.dll	27		sasl_client_init
libsasl.dll	63		sasl_setprop
libsasl.dll	34		sasl_dispose
libsasl.dll	32		sasl_decode
libsasl.dll	36		sasl_encode
libsasl.dll	41		sasl_errstring
libsasl.dll	42		sasl_getprop
libsasl.dll	35		sasl_done
WS2_32.dll		115
WS2_32.dll		9
WS2_32.dll		11
WS2_32.dll		4
WS2_32.dll		18
WS2_32.dll		151
WS2_32.dll		7
WS2_32.dll		21
WS2_32.dll		22
WS2_32.dll		3
WS2_32.dll		12
WS2_32.dll		52
WS2_32.dll		57
WS2_32.dll		23
WS2_32.dll		116
WS2_32.dll		112
WS2_32.dll		111
WS2_32.dll		19
WS2_32.dll		16
WS2_32.dll		10
WS2_32.dll		51
WS2_32.dll		5
WS2_32.dll		8
SSLEAY32.dll		231
SSLEAY32.dll		75
SSLEAY32.dll		43
SSLEAY32.dll		35
SSLEAY32.dll		58
SSLEAY32.dll		157
SSLEAY32.dll		49
SSLEAY32.dll		61
SSLEAY32.dll		128
SSLEAY32.dll		83
SSLEAY32.dll		48
SSLEAY32.dll		96
SSLEAY32.dll		77
SSLEAY32.dll		78
SSLEAY32.dll		108
SSLEAY32.dll		38
SSLEAY32.dll		40
SSLEAY32.dll		98
SSLEAY32.dll		183
SSLEAY32.dll		74
SSLEAY32.dll		176
SSLEAY32.dll		177
SSLEAY32.dll		21
SSLEAY32.dll		286
SSLEAY32.dll		24
SSLEAY32.dll		30
SSLEAY32.dll		16
SSLEAY32.dll		142
SSLEAY32.dll		141
SSLEAY32.dll		15
SSLEAY32.dll		6
SSLEAY32.dll		8
SSLEAY32.dll		111
SSLEAY32.dll		12
SSLEAY32.dll		73
SSLEAY32.dll		127
LIBEAY32.dll		3846
LIBEAY32.dll		82
LIBEAY32.dll		196
LIBEAY32.dll		197
LIBEAY32.dll		224
LIBEAY32.dll		254
LIBEAY32.dll		298
LIBEAY32.dll		176
LIBEAY32.dll		680
LIBEAY32.dll		2291
LIBEAY32.dll		248
LIBEAY32.dll		866
LIBEAY32.dll		657
LIBEAY32.dll		641
LIBEAY32.dll		566
LIBEAY32.dll		356
LIBEAY32.dll		578
LIBEAY32.dll		576
LIBEAY32.dll		362
LIBEAY32.dll		1216
LIBEAY32.dll		2023
LIBEAY32.dll		2075
LIBEAY32.dll		1653
LIBEAY32.dll		1654
LIBEAY32.dll		1238
LIBEAY32.dll		648
LIBEAY32.dll		649
LIBEAY32.dll		3823
LIBEAY32.dll		78
LIBEAY32.dll		181
LIBEAY32.dll		585
LIBEAY32.dll		653
LIBEAY32.dll		1017
LIBEAY32.dll		1016
LIBEAY32.dll		1015
LIBEAY32.dll		228
LIBEAY32.dll		129
LIBEAY32.dll		484
LIBEAY32.dll		3686
LIBEAY32.dll		486
LIBEAY32.dll		161
LIBEAY32.dll		150
LIBEAY32.dll		470
LIBEAY32.dll		2254
LIBEAY32.dll		467
LIBEAY32.dll		2253
LIBEAY32.dll		466
LIBEAY32.dll		204
LIBEAY32.dll		66
LIBEAY32.dll		395
LIBEAY32.dll		1882
LIBEAY32.dll		1182
LIBEAY32.dll		510
LIBEAY32.dll		206
gssapi32.dll		67
gssapi32.dll		19
gssapi32.dll		53
gssapi32.dll		66
gssapi32.dll		63
gssapi32.dll		24
gssapi32.dll		17
gssapi32.dll		55
gssapi32.dll		27
gssapi32.dll		57
gssapi32.dll		61
gssapi32.dll		26
gssapi32.dll		28
KERNEL32.dll	323		GetCurrentProcessId
KERNEL32.dll	479		GetTickCount
KERNEL32.dll	569		IsDebuggerPresent
KERNEL32.dll	842		SetUnhandledExceptionFilter
KERNEL32.dll	878		UnhandledExceptionFilter
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	862		TerminateProcess
KERNEL32.dll	550		InterlockedCompareExchange
KERNEL32.dll	553		InterlockedExchange
KERNEL32.dll	458		GetSystemTimeAsFileTime
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	326		GetCurrentThreadId
KERNEL32.dll	706		ReleaseMutex
KERNEL32.dll	97		CreateMutexW
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	854		Sleep
KERNEL32.dll	912		WaitForSingleObject
KERNEL32.dll	675		QueryPerformanceCounter
KERNEL32.dll	307		GetConsoleMode
KERNEL32.dll	765		SetConsoleMode
KERNEL32.dll	931		WriteConsoleW
KERNEL32.dll	441		GetStdHandle
KERNEL32.dll	691		ReadConsoleW
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	748		SetConsoleCP
KERNEL32.dll	770		SetConsoleOutputCP
MSVCR80.dll	1338		memset
MSVCR80.dll	324		_configthreadlocale
MSVCR80.dll	529		_initterm_e
MSVCR80.dll	528		_initterm
MSVCR80.dll	256		__winitenv
MSVCR80.dll	105		_XcptFilter
MSVCR80.dll	327		_controlfp_s
MSVCR80.dll	535		_invoke_watson
MSVCR80.dll	67		void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR80.dll	379		_except_handler4_common
MSVCR80.dll	339		_crt_debugger_hook
MSVCR80.dll	232		__set_app_type
MSVCR80.dll	210		__p__fmode
MSVCR80.dll	206		__p__commode
MSVCR80.dll	275		_adjust_fdiv
MSVCR80.dll	388		_exit
MSVCR80.dll	308		_cexit
MSVCR80.dll	255		__wgetmainargs
MSVCR80.dll	285		_amsg_exit
MSVCR80.dll	360		_decode_pointer
MSVCR80.dll	808		_onexit
MSVCR80.dll	642		_lock
MSVCR80.dll	370		_encode_pointer
MSVCR80.dll	153		__dllonexit
MSVCR80.dll	1011		_unlock
MSVCR80.dll	321		_close
MSVCR80.dll	1176		_write
MSVCR80.dll	835		_read
MSVCR80.dll	915		_splitpath
MSVCR80.dll	1221		abort
MSVCR80.dll	1393		strstr
MSVCR80.dll	1340		perror
MSVCR80.dll	1248		feof
MSVCR80.dll	1266		fread
MSVCR80.dll	235		__setusermatherr
MSVCR80.dll	1274		fseek
MSVCR80.dll	1249		ferror
MSVCR80.dll	1298		isprint
MSVCR80.dll	239		__sys_nerr
MSVCR80.dll	238		__sys_errlist
MSVCR80.dll	1354		realloc
MSVCR80.dll	1236		calloc
MSVCR80.dll	1260		fprintf
MSVCR80.dll	164		__iob_func
MSVCR80.dll	1336		memmove
MSVCR80.dll	1374		strchr
MSVCR80.dll	1263		fputs
MSVCR80.dll	887		_snprintf
MSVCR80.dll	1323		malloc
MSVCR80.dll	1244		exit
MSVCR80.dll	1363		signal
MSVCR80.dll	1366		sprintf
MSVCR80.dll	1076		_wassert
MSVCR80.dll	1268		free
MSVCR80.dll	1334		memcpy
MSVCR80.dll	1294		isdigit
MSVCR80.dll	936		_stricmp
MSVCR80.dll	1397		strtol
MSVCR80.dll	932		_strdup
MSVCR80.dll	1276		ftell
MSVCR80.dll	1253		fgets
MSVCR80.dll	1387		strncpy
MSVCR80.dll	1342		printf
MSVCR80.dll	1231		atoi
MSVCR80.dll	376		_errno
MSVCR80.dll	1250		fflush
MSVCR80.dll	983		_time64
MSVCR80.dll	946		_strnicmp
MSVCR80.dll	1291		isalnum
MSVCR80.dll	1386		strncmp
MSVCR80.dll	1391		strrchr
MSVCR80.dll	1247		fclose
MSVCR80.dll	1300		isspace
MSVCR80.dll	1258		fopen
MSVCR80.dll	1284		getenv
MSVCR80.dll	1047		_vsnprintf
MSVCR80.dll	1332		memchr
MSVCR80.dll	1398		strtoul
MSVCR80.dll	346		_ctime64

show previews

offset	size	type	comment
0	184320	EXE	03/26/2012 17:20:35	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK