- DOS Header
- NT Header
- Rich Header
- Sections
- Export
- Imports
- Resource
- Exceptions
- Relocations
- Debugs
- Load config
- IAT
File header
Characteristics | 0x2022 | File is executable, Large Address Aware, File is a DLL |
Machine | 0x8664 | x64 |
Number of sections | 0x6 | 6 |
Number of symbols | 0x0 | 0 |
Pointer to symbol table | 0x0 | 0 |
Size of optional header | 0xf0 | 240B |
Time date stamp | 0x65b70b3d | 2024-01-29 02:19:41.000Z |
Signature | 0x4550 | PE |
Optional header
Address of entrypoint | 0x2ab40 | 174912 |
Base of code | 0x1000 | 4096 |
Checksum | 0x0 | 0 |
Dll characteristics | 0x160 | 352 |
File alignment | 0x200 | 512 |
Image base | 0x180000000 | 6442450944 |
Loader flags | 0x0 | 0 |
Magic | 0x20b | PE32+ |
Major image version | 0x0 | 0 |
Major linker version | 0xe | 14 |
Major os version | 0x6 | 6 |
Major subsystem version | 0x6 | ? |
Minor image version | 0x0 | 0 |
Minor linker version | 0x26 | 38 |
Minor os version | 0x0 | 0 |
Minor subsystem version | 0x0 | Unknown |
Number of rva and sizes | 0x10 | 16B |
Section alignment | 0x1000 | 4096 |
Size of code | 0x2a400 | 169.00KB |
Size of headers | 0x400 | 1.00KB |
Size of heap commit | 0x1000 | 4.00KB |
Size of heap reserve | 0x100000 | 1.00MB |
Size of image | 0x77000 | 476.00KB |
Size of initialized data | 0x48a00 | 290.50KB |
Size of stack commit | 0x1000 | 4.00KB |
Size of stack reserve | 0x100000 | 1.00MB |
Size of uninitialized data | 0x0 | 0B |
Subsystem | 0x3 | Windows CUI |
Win32 version value | 0x0 | 0 |
Data Directory
Size | Virtual Address | |
---|---|---|
Export Directory | 0x207e8 | 0x4b640 |
Import Directory | 0xdc | 0x6be28 |
Resource Directory | 0x1e0 | 0x75000 |
Exception Directory | 0x960 | 0x74000 |
Security Directory | 0x0 | 0x0 |
Base Relocation Table | 0xd00 | 0x76000 |
Debug Directory | 0x70 | 0x4a6c0 |
Architecture specific | 0x0 | 0x0 |
RVA of GlobalPointer | 0x0 | 0x0 |
TLS Directory | 0x0 | 0x0 |
Load Config Directory | 0x140 | 0x4a580 |
Bound Import Directory | 0x0 | 0x0 |
Import Address Table | 0x2e8 | 0x2c000 |
Delay Import Descriptors | 0x0 | 0x0 |
COM Runtime Descriptor | 0x0 | 0x0 |
Reserved | 0x0 | 0x0 |