nocalcpoc.dll

No Calc PoC

Didier Stevens

Publisher:
Didier Stevens (https://DidierStevens.com)  (signed by Didier Stevens)

Product:
No Calc PoC

Version:
0.0.0.1

MD5:
b732da600c9f9e266d37d5f9662273da

SHA-1:
d461705f6d3e3220f4fdb473fb1b9609a323d460

SHA-256:
09ea68eff4b0bb93c31d44a3cc931d3b1c25d38bb9df4e0b04d707d63bc1e887

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/20/2024 10:42:51 AM UTC  (today)

File size:
54 KB (55,288 bytes)

Product version:
0.0.0.1

Copyright:
Public domain

Original file name:
nocalcpo.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Digital Signature
Signed by:

Authority:
GlobalSign nv-sa

Valid from:
10/25/2011 12:46:09 AM

Valid to:
10/25/2012 12:46:09 AM

Subject:
CN=Didier Stevens, C=BE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112192293FEEEB24FAF6553F2DBF6EBCC8CD

File PE Metadata
Compilation timestamp:
5/6/2012 8:37:58 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
768:FzpWe/i1dYKvhQoTTSbQpaDU3Kb87reh4zx2n2sEDXq1BdnLvVg4E:PZaOKpRTSuaDU6erSKQZ7nhA

Entry address:
0x1A41

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, B8, 2E, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, E0, CE, 00, 10, 89, 0D, DC, CE, 00, 10, 89, 15, D8, CE, 00, 10, 89, 1D, D4, CE, 00, 10, 89, 35, D0, CE, 00, 10, 89, 3D, CC, CE, 00, 10, 66, 8C, 15, F8, CE, 00, 10, 66, 8C, 0D, EC, CE, 00, 10, 66, 8C, 1D, C8, CE, 00, 10, 66, 8C, 05, C4, CE, 00, 10, 66, 8C, 25, C0, CE, 00, 10, 66, 8C, 2D, BC, CE, 00, 10, 9C, 8F, 05, F0, CE...
 
[+]

Entropy:
6.2180

Code size:
30 KB (30,720 bytes)

Scan nocalcpoc.dll - Powered by Reason Core Security