Topic created on: May 28, 2008 00:28 CDT by MasterCard.
Hi,
I would like to know the compilation date of a binary compiled with "Microsoft Visual C++ 6.0". Any help? How about in general, do compilers add this information by default?
The PE header does have a timestamp field.
E:\>dumpbin /headers t.exe
Microsoft (R) COFF/PE Dumper Version 8.00.50727.762
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file t.exe
PE signature found
File Type: EXECUTABLE IMAGE
FILE HEADER VALUES
14C machine (x86)
3 number of sections
483BC66F time date stamp Tue May 27 10:29:35 2008
0 file pointer to symbol table
0 number of symbols
E0 size of optional header
103 characteristics
Relocations stripped
Executable
32 bit word machine