2013년 10월 7일 월요일

pe

C:\work>peoep Hack.dll

Valid Dos Exe File
------------------

Dumping DOS Header Info....
---------------------------
Magic number :                      MZ(Mark Zbikowski)
Bytes on last page of file :        0x90
Pages in file :                     0x3
Relocation :                        0
Size of header in paragraphs :      0x4
Minimum extra paragraphs needed :   0
Maximum extra paragraphs needed :   0xffff
Initial (relative) SS value :       0
Initial SP value :                  0xb8
Checksum :                          0
Initial IP value :                  0
Initial (relative) CS value :       0
File address of relocation table :  0x40
Overlay number :                    0
OEM identifier :                    0
OEM information(e_oemid specific) : 0
RVA address of PE header :          0xd0
===============================================================================

Valid PE file
-------------

Dumping COFF/PE Header Info....
--------------------------------
Signature :                         PE
Machine Architechture :             Intel i386,i486,i586
Characteristics :                   Executable Image ,Dll file ,
Time Stamp :                        Sun Oct 06 19:14:48 2013
No.sections(size) :                 5
No.entries in symbol table :        0
Size of optional header :           224

Dumping PE Optional Header Info....
-----------------------------------
Address of Entry Point :            0x12e0
Base Address of the Image :         0x10000000
SubSystem type :                    Windows GUI
Given file is a :                   PE32
Size of code segment(.text) :       163840
Base address of code segment(RVA) : 0x1000
Size of Initialized data :          36864
Base address of data segment(RVA) : 0x1000
Section Alignment :                 0x1000
Major Linker Version :              6
Minor Linker Version :              0

Dumping Sections Header Info....
--------------------------------

Section Info (1 of 5)
---------------------
Section Header name :               .text
ActualSize of code or data :        0x27590
Virtual Address(RVA) :              0x1000
Size of raw data (rounded to FA) :  0x28000
Pointer to Raw Data :               0x1000
Pointer to Relocations :            0
Pointer to Line numbers :           0
Number of relocations :             0
Number of line numbers :            0
Characteristics :                   Contains executable code, Readable,

Section Info (2 of 5)
---------------------
Section Header name :               .rdata
ActualSize of code or data :        0x1ee2
Virtual Address(RVA) :              0x29000
Size of raw data (rounded to FA) :  0x2000
Pointer to Raw Data :               0x29000
Pointer to Relocations :            0
Pointer to Line numbers :           0
Number of relocations :             0
Number of line numbers :            0
Characteristics :                   Contains initialized data, Readable,

Section Info (3 of 5)
---------------------
Section Header name :               .data
ActualSize of code or data :        0x3f64
Virtual Address(RVA) :              0x2b000
Size of raw data (rounded to FA) :  0x3000
Pointer to Raw Data :               0x2b000
Pointer to Relocations :            0
Pointer to Line numbers :           0
Number of relocations :             0
Number of line numbers :            0
Characteristics :                   Contains initialized data, Readable, Writabl
e,

Section Info (4 of 5)
---------------------
Section Header name :               .idata
ActualSize of code or data :        0x9ce
Virtual Address(RVA) :              0x2f000
Size of raw data (rounded to FA) :  0x1000
Pointer to Raw Data :               0x2e000
Pointer to Relocations :            0
Pointer to Line numbers :           0
Number of relocations :             0
Number of line numbers :            0
Characteristics :                   Contains initialized data, Readable, Writabl
e,

Section Info (5 of 5)
---------------------
Section Header name :               .reloc
ActualSize of code or data :        0x15cc
Virtual Address(RVA) :              0x30000
Size of raw data (rounded to FA) :  0x2000
Pointer to Raw Data :               0x2f000
Pointer to Relocations :            0
Pointer to Line numbers :           0
Number of relocations :             0
Number of line numbers :            0
Characteristics :                   Contains initialized data, Readable,
===============================================================================
                                                    This Program is written by
                          K.Vineel Kumar Reddy.
   III/IV IT                            Gayathri Vidya Parishad college of Eng.

C:\work>

댓글 없음:

댓글 쓰기