Research ▪ Nakamoto Research

Early Bitcoin binary analysis notes

Bitcoin 0.1.1 about screen in its original native environment
Bitcoin 0.1.1 about screen in its original native environment

Binary analysis

These are details obtained from analyzing early Bitcoin binaries.

The Bitcoin source code is available, but analyzing the released binaries from a black box perspective can potentially provide extra details like metadata not present in the source code.

Version 0.1.0

Version 0.1.0 was the first Bitcoin release.

bitcoin.exe

In the wxWidgets part of bitcoin.exe version 0.1 with bitvis
In the wxWidgets part of bitcoin.exe version 0.1 with bitvis

bitcoin.exe

  • Creation time: 2009-01-10 23:16:00 UTC
  • Size: 6440960 bytes
  • MD5 307ad86c412c02abeb821afbb900355b
  • SHA-1 4360d8f13a4b2395805f01fc86f7bd4121bf572d
  • SHA-256 fbcac071d92e26d82ec917214e334bd43850c0691f113bab1d4741c9bdd30d2d
  • File type: Windows 32 bit EXE
  • File magic: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows TrID
  • Compiler: MinGW (gcc-3.4.5)
  • Library: wxWidgets
  • Linker: GNU linker ld (GNU Binutils) (2.56s)

PE details:

  • Target machine: Intel 386 or later processors and compatible processors
  • Compilation timestamp: 2009-01-10 23:16:00 UTC
  • Entry point: 4768
  • Sections: 6

Sections:

Name Virtual address Virtual size Raw size Entropy MD5
.text 4096 5761328 5761536 6 667e407d8e8f0d60007f07278f142d2b
.data 5767168 66976 67072 1.56 de2a697510dbc693d95925904a3a5f7d
.rdata 5836800 536936 537088 6.16 cfb0317d95c59d3c360fdcefdad7cfd7
.bss 6377472 129832 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 6508544 20476 20480 5.27 12d0282c0f4ebca56ad9615f45dc632d
.rsrc 6529024 53628 53760 5.44 0310b0664b6ba102a32ed8f4cad67053
Analyzing bitcoin.exe version 0.1 with Ghidra
Analyzing bitcoin.exe version 0.1 with Ghidra

Imports:

  • libeay32.dll
  • ADVAPI32.DLL
  • COMCTL32.DLL
  • COMDLG32.DLL
  • GDI32.dll
  • KERNEL32.dll
  • mingwm10.dll
  • msvcrt.dll
  • OLE32.dll
  • OLEAUT32.DLL
  • SHELL32.DLL
  • USER32.dll
  • WS2_32.DLL

Code details:
Code size 5763072 bytes
Functions 16757
X-Refs 226862
Calls 126028
Strings 12525
Symbols 686
Imports 686

Nakamoto Research ▪ personal Bitcoin research notes by obxium ▪CC BY-NC-ND 4.0. This content makes no claims about the identity of Satoshi Nakamoto.