filenamemozalloc.dll
size29920 (0x74e0)
md5dd0d7cfed97b650f4a0bbb253950a019
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
156303194
158303191
1703031910
1048
185307163
171303195
155303191
154303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x538e663e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion10.0
SizeOfCode0x1800
SizeOfInitializedData0x2800
SizeOfUninitializedData0
AddressOfEntryPoint0x205c
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x9000
SizeOfHeaders0x400
CheckSum0xf10c
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000x16120x1800R-X CODE
.rdata0x30000x16960x1800R-- IDATA
.data0x50000x5f80x200RW- IDATA
.pdata0x60000x2280x400R-- IDATA
.rsrc0x70000x3700x400R-- IDATA
.reloc0x80000x300x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x3df00x8a6
IMPORT0x38b00x50
RESOURCE0x70000x4e0
EXCEPTION0x60000x228
SECURITY00
BASERELOC0x80000x1c
DEBUG0x31c00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x198
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#17800
module_namehintordfunction_name
KERNEL32.dll1465VerifyVersionInfoA
KERNEL32.dll1462VerSetConditionMask
KERNEL32.dll1468VirtualAllocEx
KERNEL32.dll1406TerminateProcess
KERNEL32.dll553GetCurrentProcess
KERNEL32.dll1471VirtualFreeEx
KERNEL32.dll554GetCurrentProcessId
KERNEL32.dll558GetCurrentThreadId
KERNEL32.dll791GetTickCount
KERNEL32.dll1087QueryPerformanceCounter
KERNEL32.dll306DisableThreadLibraryCalls
KERNEL32.dll1211RtlCaptureContext
KERNEL32.dll1218RtlLookupFunctionEntry
KERNEL32.dll1225RtlVirtualUnwind
KERNEL32.dll902IsDebuggerPresent
KERNEL32.dll1375SetUnhandledExceptionFilter
KERNEL32.dll1440UnhandledExceptionFilter
KERNEL32.dll1390Sleep
KERNEL32.dll280DecodePointer
KERNEL32.dll320EncodePointer
KERNEL32.dll763GetSystemTimeAsFileTime
MSVCR100.dll647_initterm_e
MSVCR100.dll1371fprintf
MSVCR100.dll498_encoded_null
MSVCR100.dll646_initterm
MSVCR100.dll286__C_specific_handler
MSVCR100.dll287__CppXcptFilter
MSVCR100.dll326__crt_debugger_hook
MSVCR100.dll340__iob_func
MSVCR100.dll320__clean_type_info_names_internal
MSVCR100.dll1115_unlock
MSVCR100.dll328__dllonexit
MSVCR100.dll758_lock
MSVCR100.dll925_onexit
MSVCR100.dll775_malloc_crt
MSVCR100.dll1374fputs
MSVCR100.dll1359fflush
MSVCR100.dll1449memcpy
MSVCR100.dll1453memset
MSVCR100.dll414_amsg_exit
mozglue.dll151malloc
mozglue.dll143free
mozglue.dll155posix_memalign
mozglue.dll156realloc
mozglue.dll157strdup
mozglue.dll153malloc_usable_size
mozglue.dll144frex
mozglue.dll142calloc
ordentry_vafunction_name
10x15f0??0?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@IEAA@XZ
20x1768??0?$RefCounted@VVolatileBuffer@mozilla@@@mozilla@@QEAA@XZ
30x1a08??0VolatileBuffer@mozilla@@QEAA@XZ
40x15f8??1?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@IEAA@XZ
50x19f8??1?$RefCounted@VVolatileBuffer@mozilla@@@mozilla@@QEAA@XZ
60x1a24??1VolatileBuffer@mozilla@@QEAA@XZ
70x1168??4?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@QEAAAEAV012@AEBV012@@Z
80x1174??4?$RefCounted@VVolatileBuffer@mozilla@@@mozilla@@QEAAAEAV01@AEBV01@@Z
90x1180??4VolatileBuffer@mozilla@@QEAAAEAV01@AEBV01@@Z
100x166c?AddRef@?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@QEBAXXZ
110x145c?HeapSizeOfExcludingThis@VolatileBuffer@mozilla@@QEBA_KP6A_KPEBX@Z@Z
120x12bc?Init@VolatileBuffer@mozilla@@QEAA_N_K0@Z
130x1770?Lock@VolatileBuffer@mozilla@@IEAA_NPEAPEAX@Z
140x146c?NonHeapSizeOfExcludingThis@VolatileBuffer@mozilla@@QEBA_KXZ
150x1458?OnHeap@VolatileBuffer@mozilla@@IEBA_NXZ
160x1a98?Release@?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@QEBAXXZ
170x183c?Unlock@VolatileBuffer@mozilla@@IEAAXXZ
180x1b28?deref@?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@QEAAXXZ
190x16e8?hasOneRef@?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@QEBA_NXZ
200x1034?moz_Xinvalid_argument@std@@YAXPEBD@Z
210x1048?moz_Xlength_error@std@@YAXPEBD@Z
220x105c?moz_Xout_of_range@std@@YAXPEBD@Z
230x1070?moz_Xoverflow_error@std@@YAXPEBD@Z
240x1084?moz_Xruntime_error@std@@YAXPEBD@Z
250x14d8?mozalloc_abort@@YAXQEBD@Z
260x156c?mozalloc_handle_oom@@YAX_K@Z
270x15e8?mozalloc_set_oom_abort_handler@@YAXP6AX_K@Z@Z
280x1098?mozilla_Throw@std@@YAXAEBVexception@stdext@@@Z
290x16dc?ref@?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@QEAAXXZ
300x16e4?refCount@?$RefCounted@VVolatileBuffer@mozilla@@$00@detail@mozilla@@QEBA_KXZ
310x1498moz_calloc
320x1488moz_free
330x1490moz_malloc
340x14c0moz_malloc_size_of
350x14b0moz_malloc_usable_size
360x14a0moz_realloc
370x14a8moz_strdup
380x1978moz_xcalloc
390x1950moz_xmalloc
400x19b4moz_xrealloc
410x19dcmoz_xstrdup
module_namemozalloc.dll
flags0
timestamp2014-06-04 00:20:14
version0.0
ordinal_base1
nFunctions41
nNames41
Names(41)0x3ebc
Functions(41)0x3e18
NameOrdinals(41)0x3f60

StringTable 000004b0

Comments
LegalCopyrightLicense: MPL 2
CompanyNameMozilla Foundation
FileDescription
FileVersion32.0a1 Debug
ProductVersion32.0a1 Debug
InternalName
LegalTrademarksMozilla
OriginalFilename
ProductNameNightly
BuildID20140603162923

VS_FIXEDFILEINFO

FileVersion32.0.0.5267
ProductVersion32.0.0.5267
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags3
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d024336BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 29920 bytes (30 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK