Additional information
File size: 213376 bytes
MD5...: 2772446b1c9e97a6c5547a6e205643c2
SHA1..: 860865800c8ac252cf6cfad6219b5d1c968e099f
SHA256: 124dfbb114c1e1dd0a79ee46979623ba76f39e681db335ba1cfedff2ae09bd3d
SHA512: 5c03748113e5e65001dd7b411141ac63bdf6244c24d194671de35fb3ebe60c85
8655a2ee6e699df620f364d9b2bba6286ea999b8681973410b62587bf45ce3e8
ssdeep: 3072:dUPRp0JvUcoAwGydDXFgKHHJldqFV3zljJ1HF7WevjPlzx7Mtk70I9:hyDD
X1Hpl4vnZd7YW
PEiD..: -
TrID..: File type identification
Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x29205
timedatestamp.....: 0x41107ec3 (Wed Aug 04 06:14:27 2004)
machinetype.......: 0x14c (I386)
( 16 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x480 0x56f5 0x5700 6.39 b6004a8c408b0b21e9a1c536cb85d2fb
.rdata 0x5b80 0x504 0x580 5.22 efaf608cc1de7c48ceeb626a5ec8b2ca
.data 0x6100 0xa78 0xa80 0.86 ea828843870721d869d5e7c2d84b0657
PAGENPNP 0x6b80 0xebea 0xec00 6.45 a8f9836f5ef6c554ffe1fb8e25897b66
PAGENDSP 0x15780 0x362d 0x3680 6.34 75a532ac9d1ba34f90b6974b6c1f8097
PAGENDSM 0x18e00 0x5d38 0x5d80 6.45 f3f298c4e666be42c6a370b6b48aed7c
PAGENDCO 0x1eb80 0x2676 0x2680 6.34 a260fd98d0d457154a8dab4d5b2af428
PAGENDSF 0x21200 0x18dc 0x1900 6.34 5180eb7c032c602620c53f183c3e3278
PAGENDSE 0x22b00 0x12a4 0x1300 6.27 a3aeaa5c6c6eb6d0b08c83df610bcfad
PAGENDST 0x23e00 0xd7d 0xd80 6.49 630fe1c563b0501350a171c74ba16328
PAGENDSA 0x24b80 0x10c6 0x1100 6.35 3b356da77767b8b8c67a65fe1672dd16
.edata 0x25c80 0x2559 0x2580 5.53 7356411e31a166b5148cd2afd5c24cdf
PAGE 0x28200 0xf98 0x1000 5.35 56b98d3d77aa6b57e54eec9dd2bfe9f5
INIT 0x29200 0x1d14 0x1d80 6.02 8e6257471af10b6bbaad7ef277953a56
.rsrc 0x2af80 0x3f0 0x400 3.41 d57196926d32725f42e80548c8dca4b1
.reloc 0x2b380 0x16e8 0x1700 6.77 04e5ecb8b0ac760285385494f627f9da
( 2 imports )
> ntoskrnl.exe: IoWMIWriteEvent, ExNotifyCallback, RtlImageDirectoryEntryToData, KeReleaseMutex, KeInitializeEvent, KeWaitForSingleObject, RtlAppendUnicodeStringToString, RtlCopyUnicodeString, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, IofCompleteRequest, KeInitializeMutex, ZwPowerInformation, ExRegisterCallback, DbgPrint, ExCreateCallback, KeQuerySystemTime, KeInitializeQueue, ExInitializeResourceLite, KeQueryTimeIncrement, KeInitializeSpinLock, IoCreateSymbolicLink, IoCreateDevice, KeNumberProcessors, RtlWriteRegistryValue, ZwClose, ZwOpenKey, IoOpenDeviceRegistryKey, RtlCharToInteger, ZwEnumerateKey, RtlUnicodeStringToInteger, RtlEqualUnicodeString, RtlAppendUnicodeToString, IoGetDeviceProperty, IoSetDeviceInterfaceState, _alldiv, IoInvalidateDeviceState, MmUnlockPagableImageSection, MmLockPagableDataSection, MmLockPagableSectionByHandle, MmAllocateContiguousMemory, MmAllocateNonCachedMemory, MmFreeContiguousMemory, MmFreeNonCachedMemory, KeTickCount, InterlockedPushEntrySList, MmBuildMdlForNonPagedPool, IoAllocateMdl, IoBuildPartialMdl, MmMapLockedPages, MmMapIoSpace, MmUnmapIoSpace, ZwReadFile, ZwQueryInformationFile, ZwCreateFile, RtlExtendedIntegerMultiply, ExGetCurrentProcessorCpuUsage, ExGetCurrentProcessorCounts, KeResetEvent, _allmul, MmMapLockedPagesSpecifyCache, InterlockedPopEntrySList, RtlGetCallersAddress, ObfDereferenceObject, RtlFreeUnicodeString, IoUnregisterShutdownNotification, IoGetDriverObjectExtension, KeSetTimerEx, KeSetTimer, KeInitializeTimerEx, KeBugCheckEx, IoWMIRegistrationControl, KeInsertQueue, ExInterlockedAddLargeInteger, ExfInterlockedInsertHeadList, _except_handler3, memmove, KeSetEvent, RtlAnsiStringToUnicodeString, ExfInterlockedAddUlong, ExfInterlockedInsertTailList, ExfInterlockedRemoveHeadList, ExfInterlockedPushEntryList, ExfInterlockedPopEntryList, IoReleaseCancelSpinLock, IoAcquireCancelSpinLock, IoWriteErrorLogEntry, IoAllocateErrorLogEntry, KeInsertQueueDpc, IoDeleteSymbolicLink, IoRegisterDeviceInterface, KeInitializeDpc, KeSetImportanceDpc, KeInitializeTimer, KeCancelTimer, IoDeleteDevice, ExReleaseResourceLite, ExAcquireResourceExclusiveLite, IoGetDmaAdapter, KeRegisterBugCheckCallback, KeDeregisterBugCheckCallback, IofCallDriver, IoBuildSynchronousFsdRequest, IoCancelIrp, KeGetRecommendedSharedDataAlignment, ExDeleteNPagedLookasideList, IoDetachDevice, IoAttachDeviceToDeviceStack, MmIsDriverVerifying, IoAllocateDriverObjectExtension, IoFreeIrp, IoAllocateIrp, KeSynchronizeExecution, IoConnectInterrupt, KeSetTargetProcessorDpc, IoDisconnectInterrupt, ZwLoadDriver, PoRequestPowerIrp, PoStartNextPowerIrp, PoCallDriver, PoSetPowerState, SeSinglePrivilegeCheck, RtlInitAnsiString, MmAddVerifierThunks, MmIsVerifierEnabled, ExAllocatePoolWithTagPriority, ExInitializeNPagedLookasideList, RtlGetAce, RtlAddAccessAllowedAce, RtlCreateAcl, RtlLengthSid, RtlInitializeSid, RtlLengthRequiredSid, RtlMapGenericMask, IoGetFileObjectGenericMapping, ObReleaseObjectSecurity, ObSetSecurityObjectByPointer, RtlSetDaclSecurityDescriptor, RtlSelfRelativeToAbsoluteSD, RtlGetSaclSecurityDescriptor, RtlGetGroupSecurityDescriptor, RtlGetOwnerSecurityDescriptor, RtlGetDaclSecurityDescriptor, ObGetObjectSecurity, SeExports, SeSetSecurityDescriptorInfo, RtlLengthSecurityDescriptor, RtlCreateSecurityDescriptor, SeUnlockSubjectContext, SeFreePrivileges, SeAppendPrivileges, SeAccessCheck, SeLockSubjectContext, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlQueryRegistryValues, RtlInitUnicodeString, RtlUpcaseUnicodeString, KefAcquireSpinLockAtDpcLevel, KefReleaseSpinLockFromDpcLevel, PsGetCurrentThread, ObfReferenceObject, KeRemoveQueue, PsCreateSystemThread, NtClose, ExQueueWorkItem, ExAllocatePoolWithTag, IoFreeMdl, ExFreePoolWithTag
> HAL.dll: KeGetCurrentIrql, KfRaiseIrql, KfLowerIrql, READ_PORT_ULONG, READ_PORT_USHORT, READ_PORT_UCHAR, WRITE_PORT_ULONG, WRITE_PORT_USHORT, WRITE_PORT_UCHAR, HalTranslateBusAddress, KfAcquireSpinLock, KfReleaseSpinLock, KeRaiseIrqlToDpcLevel
( 276 exports )
ArcFilterDprIndicateReceive, ArcFilterDprIndicateReceiveComplete, EthFilterDprIndicateReceive, EthFilterDprIndicateReceiveComplete, FddiFilterDprIndicateReceive, FddiFilterDprIndicateReceiveComplete, NDIS_BUFFER_TO_SPAN_PAGES, NdisAcquireReadWriteLock, NdisAcquireSpinLock, NdisAdjustBufferLength, NdisAllocateBuffer, NdisAllocateBufferPool, NdisAllocateFromBlockPool, NdisAllocateMemory, NdisAllocateMemoryWithTag, NdisAllocatePacket, NdisAllocatePacketPool, NdisAllocatePacketPoolEx, NdisAllocateSpinLock, NdisAnsiStringToUnicodeString, NdisBufferLength, NdisBufferVirtualAddress, NdisCancelSendPackets, NdisCancelTimer, NdisClAddParty, NdisClCloseAddressFamily, NdisClCloseCall, NdisClDeregisterSap, NdisClDropParty, NdisClGetProtocolVcContextFromTapiCallId, NdisClIncomingCallComplete, NdisClMakeCall, NdisClModifyCallQoS, NdisClOpenAddressFamily, NdisClRegisterSap, NdisCloseAdapter, NdisCloseConfiguration, NdisCloseFile, NdisCmActivateVc, NdisCmAddPartyComplete, NdisCmCloseAddressFamilyComplete, NdisCmCloseCallComplete, NdisCmDeactivateVc, NdisCmDeregisterSapComplete, NdisCmDispatchCallConnected, NdisCmDispatchIncomingCall, NdisCmDispatchIncomingCallQoSChange, NdisCmDispatchIncomingCloseCall, NdisCmDispatchIncomingDropParty, NdisCmDropPartyComplete, NdisCmMakeCallComplete, NdisCmModifyCallQoSComplete, NdisCmOpenAddressFamilyComplete, NdisCmRegisterAddressFamily, NdisCmRegisterSapComplete, NdisCoAssignInstanceName, NdisCoCreateVc, NdisCoDeleteVc, NdisCoGetTapiCallId, NdisCoRequest, NdisCoRequestComplete, NdisCoSendPackets, NdisCompareAnsiString, NdisCompareUnicodeString, NdisCompleteBindAdapter, NdisCompleteDmaTransfer, NdisCompletePnPEvent, NdisCompleteUnbindAdapter, NdisConvertStringToAtmAddress, NdisCopyBuffer, NdisCopyFromPacketToPacket, NdisCopyFromPacketToPacketSafe, NdisCreateBlockPool, NdisDeregisterProtocol, NdisDeregisterTdiCallBack, NdisDestroyBlockPool, NdisDprAcquireSpinLock, NdisDprAllocatePacket, NdisDprAllocatePacketNonInterlocked, NdisDprFreePacket, NdisDprFreePacketNonInterlocked, NdisDprReleaseSpinLock, NdisEqualString, NdisFreeBuffer, NdisFreeBufferPool, NdisFreeMemory, NdisFreePacket, NdisFreePacketPool, NdisFreeSpinLock, NdisFreeToBlockPool, NdisGeneratePartialCancelId, NdisGetBufferPhysicalArraySize, NdisGetCurrentProcessorCounts, NdisGetCurrentProcessorCpuUsage, NdisGetCurrentSystemTime, NdisGetDriverHandle, NdisGetFirstBufferFromPacket, NdisGetFirstBufferFromPacketSafe, NdisGetPacketCancelId, NdisGetPoolFromPacket, NdisGetReceivedPacket, NdisGetRoutineAddress, NdisGetSharedDataAlignment, NdisGetSystemUpTime, NdisGetVersion, NdisIMAssociateMiniport, NdisIMCancelInitializeDeviceInstance, NdisIMCopySendCompletePerPacketInfo, NdisIMCopySendPerPacketInfo, NdisIMDeInitializeDeviceInstance, NdisIMDeregisterLayeredMiniport, NdisIMGetBindingContext, NdisIMGetCurrentPacketStack, NdisIMGetDeviceContext, NdisIMInitializeDeviceInstance, NdisIMInitializeDeviceInstanceEx, NdisIMNotifyPnPEvent, NdisIMQueueMiniportCallback, NdisIMRegisterLayeredMiniport, NdisIMRevertBack, NdisIMSwitchToMiniport, NdisImmediateReadPciSlotInformation, NdisImmediateReadPortUchar, NdisImmediateReadPortUlong, NdisImmediateReadPortUshort, NdisImmediateReadSharedMemory, NdisImmediateWritePciSlotInformation, NdisImmediateWritePortUchar, NdisImmediateWritePortUlong, NdisImmediateWritePortUshort, NdisImmediateWriteSharedMemory, NdisInitAnsiString, NdisInitUnicodeString, NdisInitializeEvent, NdisInitializeReadWriteLock, NdisInitializeString, NdisInitializeTimer, NdisInitializeWrapper, NdisInterlockedAddLargeInterger, NdisInterlockedAddUlong, NdisInterlockedDecrement, NdisInterlockedIncrement, NdisInterlockedInsertHeadList, NdisInterlockedInsertTailList, NdisInterlockedPopEntryList, NdisInterlockedPushEntryList, NdisInterlockedRemoveHeadList, NdisMAllocateMapRegisters, NdisMAllocateSharedMemory, NdisMAllocateSharedMemoryAsync, NdisMCancelTimer, NdisMCloseLog, NdisMCmActivateVc, NdisMCmCreateVc, NdisMCmDeactivateVc, NdisMCmDeleteVc, NdisMCmRegisterAddressFamily, NdisMCmRequest, NdisMCoActivateVcComplete, NdisMCoDeactivateVcComplete, NdisMCoIndicateReceivePacket, NdisMCoIndicateStatus, NdisMCoReceiveComplete, NdisMCoRequestComplete, NdisMCoSendComplete, NdisMCompleteBufferPhysicalMapping, NdisMCreateLog, NdisMDeregisterAdapterShutdownHandler, NdisMDeregisterDevice, NdisMDeregisterDmaChannel, NdisMDeregisterInterrupt, NdisMDeregisterIoPortRange, NdisMFlushLog, NdisMFreeMapRegisters, NdisMFreeSharedMemory, NdisMGetDeviceProperty, NdisMGetDmaAlignment, NdisMIndicateStatus, NdisMIndicateStatusComplete, NdisMInitializeScatterGatherDma, NdisMInitializeTimer, NdisMMapIoSpace, NdisMPciAssignResources, NdisMPromoteMiniport, NdisMQueryAdapterInstanceName, NdisMQueryAdapterResources, NdisMQueryInformationComplete, NdisMReadDmaCounter, NdisMRegisterAdapterShutdownHandler, NdisMRegisterDevice, NdisMRegisterDmaChannel, NdisMRegisterInterrupt, NdisMRegisterIoPortRange, NdisMRegisterMiniport, NdisMRegisterUnloadHandler, NdisMRemoveMiniport, NdisMResetComplete, NdisMSendComplete, NdisMSendResourcesAvailable, NdisMSetAttributes, NdisMSetAttributesEx, NdisMSetInformationComplete, NdisMSetMiniportSecondary, NdisMSetPeriodicTimer, NdisMSetTimer, NdisMSleep, NdisMStartBufferPhysicalMapping, NdisMSynchronizeWithInterrupt, NdisMTransferDataComplete, NdisMUnmapIoSpace, NdisMWanIndicateReceive, NdisMWanIndicateReceiveComplete, NdisMWanSendComplete, NdisMWriteLogData, NdisMapFile, NdisMatchPdoWithPacket, NdisOpenAdapter, NdisOpenConfiguration, NdisOpenConfigurationKeyByIndex, NdisOpenConfigurationKeyByName, NdisOpenFile, NdisOpenProtocolConfiguration, NdisOverrideBusNumber, NdisPacketPoolUsage, NdisPacketSize, NdisQueryAdapterInstanceName, NdisQueryBindInstanceName, NdisQueryBuffer, NdisQueryBufferOffset, NdisQueryBufferSafe, NdisQueryMapRegisterCount, NdisQueryPendingIOCount, NdisReEnumerateProtocolBindings, NdisReadConfiguration, NdisReadEisaSlotInformation, NdisReadEisaSlotInformationEx, NdisReadMcaPosInformation, NdisReadNetworkAddress, NdisReadPciSlotInformation, NdisReadPcmciaAttributeMemory, NdisRegisterProtocol, NdisRegisterTdiCallBack, NdisReleaseReadWriteLock, NdisReleaseSpinLock, NdisRequest, NdisReset, NdisResetEvent, NdisReturnPackets, NdisScheduleWorkItem, NdisSend, NdisSendPackets, NdisSetEvent, NdisSetPacketCancelId, NdisSetPacketPoolProtocolId, NdisSetPacketStatus, NdisSetProtocolFilter, NdisSetTimer, NdisSetTimerEx, NdisSetupDmaTransfer, NdisSystemProcessorCount, NdisTerminateWrapper, NdisTransferData, NdisUnchainBufferAtBack, NdisUnchainBufferAtFront, NdisUnicodeStringToAnsiString, NdisUnmapFile, NdisUpcaseUnicodeString, NdisUpdateSharedMemory, NdisWaitEvent, NdisWriteConfiguration, NdisWriteErrorLogEntry, NdisWriteEventLogEntry, NdisWritePciSlotInformation, NdisWritePcmciaAttributeMemory, TrFilterDprIndicateReceive, TrFilterDprIndicateReceiveComplete
PDFiD.: -
RDS...: NSRL Reference Data Set
