filenameopenssl.exe
size1802436 (0x1b80c4)
md5f604c26ddaa13680a3278620c485212c
typePE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x48af1937
PointerToSymbolTable0x167600
NumberOfSymbols0x31c7
SizeOfOptionalHeader0xe0
Characteristics0x307
Magic0x10b
LinkerVersion2.56
SizeOfCode0x112c00
SizeOfInitializedData0x167200
SizeOfUninitializedData0x8200
AddressOfEntryPoint0x1280
BaseOfCode0x1000
BaseOfData0x114000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x173000
SizeOfHeaders0x400
CheckSum0x1c0c24
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MingWin32 - Dev C++ v4.x

Sections

namevavsizeraw sizeflags
.text0x10000x112b580x112c00R-X CODE IDATA
.data0x1140000x123f00x12400RW- IDATA
.rdata0x1270000x410880x41200R-- IDATA
.bss0x1690000x82000RW- UDATA
.idata0x1720000x10000x1000RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1720000x1000
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
ADVAPI32.DLL136DeregisterEventSource
ADVAPI32.DLL439RegisterEventSourceA
ADVAPI32.DLL449ReportEventA
GDI32.dll12BitBlt
GDI32.dll33CreateCompatibleBitmap
GDI32.dll34CreateCompatibleDC
GDI32.dll35CreateDCA
GDI32.dll70DeleteDC
GDI32.dll73DeleteObject
GDI32.dll119GetBitmapBits
GDI32.dll146GetDeviceCaps
GDI32.dll183GetObjectA
GDI32.dll279SelectObject
KERNEL32.dll1AddAtomA
KERNEL32.dll38CloseHandle
KERNEL32.dll156ExitProcess
KERNEL32.dll176FindAtomA
KERNEL32.dll178FindClose
KERNEL32.dll182FindFirstFileA
KERNEL32.dll191FindNextFileA
KERNEL32.dll214FreeLibrary
KERNEL32.dll221GetAtomNameA
KERNEL32.dll284GetCurrentProcessId
KERNEL32.dll286GetCurrentThreadId
KERNEL32.dll316GetFileType
KERNEL32.dll325GetLastError
KERNEL32.dll364GetProcAddress
KERNEL32.dll388GetStdHandle
KERNEL32.dll423GetTickCount
KERNEL32.dll432GetVersion
KERNEL32.dll433GetVersionExA
KERNEL32.dll460GlobalMemoryStatus
KERNEL32.dll524LoadLibraryA
KERNEL32.dll597QueryPerformanceCounter
KERNEL32.dll713SetLastError
KERNEL32.dll739SetUnhandledExceptionFilter
msvcrt.dll_access
msvcrt.dll4_chmod
msvcrt.dll6_close
msvcrt.dll33_ftime
msvcrt.dll35_getch
msvcrt.dll38_getpid
msvcrt.dll47_kbhit
msvcrt.dll51_lseek
msvcrt.dll64_read
msvcrt.dll79_stat
msvcrt.dll110_write
msvcrt.dll39__getmainargs
msvcrt.dll48__mb_cur_max
msvcrt.dll60__p__environ
msvcrt.dll62__p__fmode
msvcrt.dll80__set_app_type
msvcrt.dll111_assert
msvcrt.dll121_cexit
msvcrt.dll152_errno
msvcrt.dll185_fmode
msvcrt.dll233_iob
msvcrt.dll235_isctype
msvcrt.dll350_onexit
msvcrt.dll359_pctype
msvcrt.dll388_setmode
msvcrt.dll411_stricmp
msvcrt.dll445_vsnprintf
msvcrt.dll533abort
msvcrt.dll540atexit
msvcrt.dll542atoi
msvcrt.dll543atol
msvcrt.dll554exit
msvcrt.dll557fclose
msvcrt.dll560fflush
msvcrt.dll563fgets
msvcrt.dll568fopen
msvcrt.dll569fprintf
msvcrt.dll570fputc
msvcrt.dll571fputs
msvcrt.dll574fread
msvcrt.dll575free
msvcrt.dll579fseek
msvcrt.dll581ftell
msvcrt.dll583fwrite
msvcrt.dll587getenv
msvcrt.dll591gmtime
msvcrt.dll622localtime
msvcrt.dll626malloc
msvcrt.dll630memchr
msvcrt.dll632memcpy
msvcrt.dll633memmove
msvcrt.dll634memset
msvcrt.dll637perror
msvcrt.dll639printf
msvcrt.dll641putchar
msvcrt.dll642puts
msvcrt.dll645qsort
msvcrt.dll648realloc
msvcrt.dll649remove
msvcrt.dll650rename
msvcrt.dll655setvbuf
msvcrt.dll656signal
msvcrt.dll659sprintf
msvcrt.dll662sscanf
msvcrt.dll663strcat
msvcrt.dll664strchr
msvcrt.dll665strcmp
msvcrt.dll667strcpy
msvcrt.dll669strerror
msvcrt.dll671strlen
msvcrt.dll672strncat
msvcrt.dll673strncmp
msvcrt.dll674strncpy
msvcrt.dll676strrchr
msvcrt.dll677strspn
msvcrt.dll678strstr
msvcrt.dll681strtol
msvcrt.dll682strtoul
msvcrt.dll689time
msvcrt.dll692tolower
msvcrt.dll693toupper
msvcrt.dll698vfprintf
msvcrt.dll718wcsstr
USER32.dll249GetDesktopWindow
USER32.dll306GetProcessWindowStation
USER32.dll334GetUserObjectInformationW
USER32.dll431MessageBoxA
WSOCK32.DLL24WSACancelBlockingCall
WSOCK32.DLL25WSACleanup
WSOCK32.DLL26WSAGetLastError
WSOCK32.DLL30WSASetLastError
WSOCK32.DLL31WSAStartup
WSOCK32.DLL34__WSAFDIsSet
WSOCK32.DLL35accept
WSOCK32.DLL36bind
WSOCK32.DLL37closesocket
WSOCK32.DLL38connect
WSOCK32.DLL40gethostbyaddr
WSOCK32.DLL41gethostbyname
WSOCK32.DLL47getservbyname
WSOCK32.DLL49getsockname
WSOCK32.DLL50getsockopt
WSOCK32.DLL51htonl
WSOCK32.DLL52htons
WSOCK32.DLL56ioctlsocket
WSOCK32.DLL57listen
WSOCK32.DLL58ntohl
WSOCK32.DLL59ntohs
WSOCK32.DLL61recv
WSOCK32.DLL62recvfrom
WSOCK32.DLL66select
WSOCK32.DLL67send
WSOCK32.DLL68sendto
WSOCK32.DLL70setsockopt
WSOCK32.DLL71shutdown
WSOCK32.DLL72socket
offsetsizetypecomment
01472000EXE08/22/2008 19:53:27#
15c115HTM#
1308e4180HTM#
167600330436BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK