API tools faq
paste
Advertisement
Madmouse

hell yeah lol

Madmouse
Nov 30th, 2016
146
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.87 KB | None | 0 0
raw download clone embed print report
  1. PE File Detected
  2. Loading Information For Injection.
  3.  
  4. File Header
  5. Machine: 0000014c
  6. Number of sections: 3
  7. Characteristics: 0000010f
  8.  
  9. Optional Header
  10. Address Of Entry Point: 0x00012475
  11. Image Base: 0x01000000
  12. Section Alignment: 4096
  13. File Alignment: 512
  14. Major Subsystem Version: 4
  15. Size Of Image: 126976
  16.  
  17. Data Directory
  18. Import Directory Virtual Address: 0x00012b80
  19. Size: 140
  20.  
  21. Section Header
  22. .text
  23. Virtual Size: 75440
  24. Virtual Address: 0x00001000
  25. Size Of Raw Data: 75776
  26. Offset in file: 1024
  27. Pointer to relocations: 00000000
  28. Pointer to line numbers: 00000000
  29. Number of relocations: 0
  30. Number of line numbers: 0
  31. Characteristics: 0x60000020
  32. .data
  33. Virtual Size: 4124
  34. Virtual Address: 0x00014000
  35. Size Of Raw Data: 2560
  36. Offset in file: 76800
  37. Pointer to relocations: 00000000
  38. Pointer to line numbers: 00000000
  39. Number of relocations: 0
  40. Number of line numbers: 0
  41. Characteristics: 0xc0000040
  42. .rsrc
  43. Virtual Size: 35168
  44. Virtual Address: 0x00016000
  45. Size Of Raw Data: 35328
  46. Offset in file: 79360
  47. Pointer to relocations: 00000000
  48. Pointer to line numbers: 00000000
  49. Number of relocations: 0
  50. Number of line numbers: 0
  51. Characteristics: 0x40000040
  52. Performing implant.
  53.  
  54. Loader image
  55. Loader Size: 6
  56. Entry Point: 0x01012475
  57. Key: 0x3ec7ec45
  58. Flags: 0x00000000
  59. Size: 22
  60.  
  61.  
  62. File Header
  63. Machine: 0000014c
  64. Number of sections: 4
  65. Characteristics: 0000010f
  66.  
  67. Optional Header
  68. Address Of Entry Point: 0x0001f010
  69. Image Base: 0x01000000
  70. Section Alignment: 4096
  71. File Alignment: 512
  72. Major Subsystem Version: 4
  73. Size Of Image: 131072
  74.  
  75. Data Directory
  76. Import Directory Virtual Address: 0x00012b80
  77. Size: 140
  78.  
  79. Section Header
  80. .text
  81. Virtual Size: 75440
  82. Virtual Address: 0x00001000
  83. Size Of Raw Data: 75776
  84. Offset in file: 1024
  85. Pointer to relocations: 00000000
  86. Pointer to line numbers: 00000000
  87. Number of relocations: 0
  88. Number of line numbers: 0
  89. Characteristics: 0x60000020
  90. .data
  91. Virtual Size: 4124
  92. Virtual Address: 0x00014000
  93. Size Of Raw Data: 2560
  94. Offset in file: 76800
  95. Pointer to relocations: 00000000
  96. Pointer to line numbers: 00000000
  97. Number of relocations: 0
  98. Number of line numbers: 0
  99. Characteristics: 0xc0000040
  100. .rsrc
  101. Virtual Size: 35168
  102. Virtual Address: 0x00016000
  103. Size Of Raw Data: 35328
  104. Offset in file: 79360
  105. Pointer to relocations: 00000000
  106. Pointer to line numbers: 00000000
  107. Number of relocations: 0
  108. Number of line numbers: 0
  109. Characteristics: 0x40000040
  110. .edata
  111. Virtual Size: 4096
  112. Virtual Address: 0x0001f000
  113. Size Of Raw Data: 512
  114. Offset in file: 114688
  115. Pointer to relocations: 00000000
  116. Pointer to line numbers: 00000000
  117. Number of relocations: 0
  118. Number of line numbers: 0
  119. Characteristics: 0xe00000e0
  120. calc.exe_new: PE32 executable (GUI) Intel 80386, for MS Windows
  121. 115200 calc.exe_new
  122. 114688 calc.exe
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!