- DOS Header
- NT Header
- Rich Header
- Sections
- Imports
- Resource
- Exceptions
- Certificate
- Relocations
- Debugs
- Load config
- IAT
- Delay import
.text
Entropy | 0x6.1a8cac7335c3c | 6.103709009292074 |
Characteristics | 0x60000020 | 1610612768 |
Number of line numbers | 0x0 | 0 |
Number of relocations | 0x0 | 0 |
Pointer to line numbers | 0x0 | 0 |
Pointer to raw data | 0x400 | 1024 |
Pointer to relocations | 0x0 | 0 |
Size of raw data | 0x18a200 | 1.54MB |
Virtual address | 0x1000 | 4096 |
Virtual size | 0x18a0e8 | 1.54MB |
.rdata
Entropy | 0x6.11034870555c | 6.066456344056277 |
Characteristics | 0x40000040 | 1073741888 |
Number of line numbers | 0x0 | 0 |
Number of relocations | 0x0 | 0 |
Pointer to line numbers | 0x0 | 0 |
Pointer to raw data | 0x18a600 | 1615360 |
Pointer to relocations | 0x0 | 0 |
Size of raw data | 0x4b400 | 301.00KB |
Virtual address | 0x18c000 | 1622016 |
Virtual size | 0x4b3a0 | 300.91KB |
.data
Entropy | 0x5.e70f964b9aae | 5.902581590135632 |
Characteristics | 0xc0000040 | 3221225536 |
Number of line numbers | 0x0 | 0 |
Number of relocations | 0x0 | 0 |
Pointer to line numbers | 0x0 | 0 |
Pointer to raw data | 0x1d5a00 | 1923584 |
Pointer to relocations | 0x0 | 0 |
Size of raw data | 0xa000 | 40.00KB |
Virtual address | 0x1d8000 | 1933312 |
Virtual size | 0x582b8 | 352.68KB |
.pdata
Entropy | 0x5.fd0849546cb0c | 5.988407691108196 |
Characteristics | 0x40000040 | 1073741888 |
Number of line numbers | 0x0 | 0 |
Number of relocations | 0x0 | 0 |
Pointer to line numbers | 0x0 | 0 |
Pointer to raw data | 0x1dfa00 | 1964544 |
Pointer to relocations | 0x0 | 0 |
Size of raw data | 0x7600 | 29.50KB |
Virtual address | 0x231000 | 2297856 |
Virtual size | 0x7490 | 29.14KB |
.rsrc
Entropy | 0x6.db5813ffa461c | 6.856812715447069 |
Characteristics | 0x40000040 | 1073741888 |
Number of line numbers | 0x0 | 0 |
Number of relocations | 0x0 | 0 |
Pointer to line numbers | 0x0 | 0 |
Pointer to raw data | 0x1e7000 | 1994752 |
Pointer to relocations | 0x0 | 0 |
Size of raw data | 0x2b0c00 | 2.69MB |
Virtual address | 0x239000 | 2330624 |
Virtual size | 0x2b0a38 | 2.69MB |
.reloc
Entropy | 0x5.5363544138f68 | 5.325734392093148 |
Characteristics | 0x42000040 | 1107296320 |
Number of line numbers | 0x0 | 0 |
Number of relocations | 0x0 | 0 |
Pointer to line numbers | 0x0 | 0 |
Pointer to raw data | 0x497c00 | 4815872 |
Pointer to relocations | 0x0 | 0 |
Size of raw data | 0x1800 | 6.00KB |
Virtual address | 0x4ea000 | 5152768 |
Virtual size | 0x1648 | 5.57KB |