By using Saferwall you consent to our Terms of Service and Privacy Policy and allow us to share your submission with the security community. Learn more

PE (Portable Executable)

File header

Characteristics 0x2022 File is executable, Large Address Aware, File is a DLL
Machine 0x14c Intel 386 or later processors and compatible processors
Number of sections 0x3 3
Number of symbols 0x0 0
Pointer to symbol table 0x0 0
Size of optional header 0xe0 224B
Time date stamp 0xd1e80666 2081-08-05 18:28:54.000Z
Signature 0x4550 PE

Optional header

Address of entrypoint 0xd026 53286
Base of code 0x2000 8192
Base of data 0xe000 57344
Checksum 0x1d96e 121198
Dll characteristics 0x8560 34144
File alignment 0x200 512
Image base 0x10000000 268435456
Loader flags 0x0 0
Magic 0x10b PE32
Major image version 0x0 0
Major linker version 0x30 48
Major os version 0x4 4
Major subsystem version 0x4 ?
Minor image version 0x0 0
Minor linker version 0x0 0
Minor os version 0x0 0
Minor subsystem version 0x0 Unknown
Number of rva and sizes 0x10 16B
Section alignment 0x2000 8192
Size of code 0xb200 44.50KB
Size of headers 0x200 512B
Size of heap commit 0x1000 4.00KB
Size of heap reserve 0x100000 1.00MB
Size of image 0x12000 72.00KB
Size of initialized data 0x800 2.00KB
Size of stack commit 0x1000 4.00KB
Size of stack reserve 0x100000 1.00MB
Size of uninitialized data 0x0 0B
Subsystem 0x3 Windows CUI
Win32 version value 0x0 0

Data Directory

SizeVirtual Address
Export Directory 0x0 0x0
Import Directory 0x4f 0xcfd4
Resource Directory 0x424 0xe000
Exception Directory 0x0 0x0
Security Directory 0x2380 0xbc00
Base Relocation Table 0xc 0x10000
Debug Directory 0x54 0xcf04
Architecture specific 0x0 0x0
RVA of GlobalPointer 0x0 0x0
TLS Directory 0x0 0x0
Load Config Directory 0x0 0x0
Bound Import Directory 0x0 0x0
Import Address Table 0x8 0x2000
Delay Import Descriptors 0x0 0x0
COM Runtime Descriptor 0x48 0x2008
Reserved 0x0 0x0