Static | ZeroBOX

PE Compile Time

2021-08-19 16:39:45

PDB Path

C:\code\16\cal-2\Release\cal-2.pdb

PE Imphash

2a6a4e4bd5f8e05c24b3a4f78eb46b1e

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0000180b 0x00001a00 6.0403821483
.rdata 0x00003000 0x00001074 0x00001200 4.80357176222
.data 0x00005000 0x0006a1e8 0x0006a000 7.70087416063
.rsrc 0x00070000 0x00001338 0x00001400 5.72649002564
.reloc 0x00072000 0x00000a7e 0x00000c00 2.31735432731

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000700fc 0x000010a8 LANG_NEUTRAL SUBLANG_DEFAULT dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x000711a4 0x00000014 LANG_NEUTRAL SUBLANG_DEFAULT data
RT_MANIFEST 0x000711b8 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x403000 FreeConsole
0x403008 GetCurrentThreadId
0x403014 IsDebuggerPresent
0x403018 DecodePointer
0x40301c EncodePointer
0x403020 GetTickCount64
Library USER32.dll:
0x403110 PostQuitMessage
Library MSVCR110.dll:
0x403078 _unlock
0x40307c _calloc_crt
0x403080 ??2@YAPAXI@Z
0x403084 _onexit
0x40308c _XcptFilter
0x403090 _amsg_exit
0x403094 __getmainargs
0x403098 __set_app_type
0x40309c exit
0x4030a0 _exit
0x4030a4 _cexit
0x4030a8 _configthreadlocale
0x4030ac __setusermatherr
0x4030b0 _initterm_e
0x4030b4 _initterm
0x4030b8 __initenv
0x4030bc _fmode
0x4030c0 _commode
0x4030c4 _crt_debugger_hook
0x4030d4 ?terminate@@YAXXZ
0x4030dc _invoke_watson
0x4030e0 _controlfp_s
0x4030e4 ??3@YAXPAX@Z
0x4030e8 _purecall
0x4030ec printf
0x4030f0 memmove
0x4030f4 __dllonexit
0x4030f8 __CxxFrameHandler3
0x4030fc memcpy
0x403100 _lock
0x403104 _CxxThrowException
0x403108 memset

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
</tC<*tC
generic
unknown error
iostream
iostream stream error
system
This is a basic calculator program, enter the first number.
First number:
Enter second number:
Enter an operation to perform, choose one from this list: +,-,/,*
Enter your operation:
Invalid operation! Aborting!
Press Enter to exit.
Press Enter to exit.
Your answer is:
You can't divide by zero! Aborting!
invalid string position
string too long
C:\code\16\cal-2\Release\cal-2.pdb
FreeConsole
KERNEL32.dll
PostQuitMessage
USER32.dll
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP110.dll
memmove
printf
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
MSVCR110.dll
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_XcptFilter
_amsg_exit
__getmainargs
__set_app_type
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__initenv
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount64
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
.?AVtype_info@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
Z#6[d?
hF-`2z
&WF-]2z>
-TI"P*e35
a+hF*Q/
iII"`2
U]EG4dm
;@G2L0
A,%*5
[,%+5
u,E+5
g,%,5
\,E-5
}:,e-5
O^*KIh
~U,e'5
{,%(5
(,E)5
D+_O)#8
b.8?_Y
[LIRPh
\hh7im6
4@*Y_6
6{^-)e
n!v^$XSU>
BXn&;5
j$+RsA
+@uR/6
[8GRD2
6{^-ro./Y
Y4**G;
c48O|X
PIJ`2'
]FJ*a3
!Ff*ji
%Wy,t.
%Wy.|.
a.8/2Y
;$=R^A
!Q~*[a
%W}*t"
RSGE\'
aRSGEd
f^III[0
jRSGE\'
rRSGEd
RSGE`'
Pu[8
RSGE`'
nR H#Z'
ul(r^I
RSG%\'
!ul(r^I
j^I3I[0
Ox[N
PI,\23
m!7@&T
KlTr<Y
X*e;iW
!vv$XSU
4XG#d0
!vv$XRxI"`,j
uy"ZO
!NB(ci
6^4*"&
;,G2<0
G`L=0d
j#=SWA[x
*+@5W/6
;0F2 /
;aa+LG-p0
,XI+d2
OIJL4Ub
RG*L2t&
|vb`(
RG*L4UM
OG*Phc49
v$"STI
{!F^*G;
fHZK"L
PI"h*e;
6{^-"P
ZiXI&`
.XI*(0
+@e6/6
r$"ShK
W*eGiN
~Jl4.#4
bHPK"T
QE 5 zB
v$"R'IRp
6{^-+LJP
/iN6gk
aHPKjX
!vr" r[
h]gqj@
TlHiHp
}!VzXb^P
bHbKb0
!vr" J[
bHaK[H
+@eK/6
`i(c/6
X*e[i`0V
X*eGi`0V
~$"VmI
_~.8,X
PIJd*e;
I$*S6
(@5K.5
,@US/6
+`I*d2
bHPK*@
biHK$P*e3
&@uF/6
?X4.7/
~$"Sz?
(@uB/6
'Ww,|2
b48_mX
crHQKb
a.8?qX
y58/oX
%@e8/6
'@E8/6
&@%8/6
`P*eCq
hvnHP(
4nSy?X
EXn&[5
Z08_]X
#,I"P2
&@E)/6
!^r*u4
`H4&'3
tSvIc0
6{^-{SBw
JbbA/H
6{^-"`
'Vf$4R
n!FV*fv
NV$4R
~$"R{$ZN
oSnI"p2
ziVI2h'
nHRK!p
%.8O4X
#hI"l2
%SwIJp2
a#LGJP
~.8?$W
bSlI+`
BXn&[5
un$=SkI+|4.W5
OI"@*e;
&Wy,t2
dlCKfgm
bHUK*P
R.8o X
l#"R}I
7rmuWCbqq
'E/Q5Z
J(]Z?fW
|*eGqQ
O&(0&-
^-$-jS
j$"SjKh
PG"`4,?V
hiVK*d
~g_I%\0
bRSI"D2
sS\I+p0
A!,A=
#xI"|2
#xI"|2
#lI"p2
#hI"l2
z$XR[I
'@5E.5
6{^-Gn
6{^-&a=)
0Vuo""
#LI*`2
+iW0huw"
6{^-vEW
gU|ZlQ
,-)96`
!vv$XSU
!vv)h5
!^r$=R
vc$aS_
!~r$aR
!vz$XR
`*aCqO!
w[j>=d@s
DUpM,s
_mU)^"
&DGRw8
G(kE_R,
i WY.1
(bY7(u:
WY|G}'
Vkqg1c
?Tqx3_H7R
@eh.5Q
VNC;S7N
S)]Pbc
2$`30[$@5
PMP}_B
;]RRc5
~%D:z-
F$9Uh'nu
a+]ITiJ
KNO|Iu8<
NiJ\u@
z@_d:"
c8g~
{0@fBg
q orNPU
=zgvt)
tYCjwT5
Mi"Tu9
HD^g%$
Z1}Ll
%7{QeH
6Y :<G[
=ROGsU
|ws+oP
Bh@4<i
A<[@FK
Kt&Gh_[]X
CnqNPs
F}LR,
iD7W[D6
N)dOOJ
8O+ElT
M|(7_$
J,L]XW
X3Tg>=h't
Ji%CuL
TGTUaa=j
issY;z
4o@0vAH
QVmqeF{cx^
:,ko4x
=n/WB`
YI9qn\
})VtFm
,f#GgNn
m2<}z:
TGziaJ>
@UC5j+B
,]"Kb%
d&ZOn4uhH]
KK[i:g
E>LGT6
2qS,>4`V
aSQ.~]<k
\h>OWg-'
Rco&JT
u^wQqy1
Tlb}kY
gDhycYlu
vmxO=14
NwkYJ&
C3V:ZD
d!s?pF
_yRQ!.
Xn>%=G
I4+eM4
$/82ZKe
P[6pY=M
M1Tv[HQjW
?s&?1B
.wNOS6
)7"n%CF/
!c(hi-#
czhltf
qY//Sn
?dfhCUl
>K[F1ZN
~?b1 <J
!sBxRo
:5y[kb
0Y#K[w])b
RB`^Nu
\@OS\p
--{^\)N
=.8^f:
&B5|1^
U;dZ;!
e^[*c|
"iDA&]_
1:x5`$^n
t:w2@^
B^N_,_
lmf}44
~2Z(,O
S&UjWv
8N9d1
!s8xK>
1Arb@3
\Fi+*7
~L.#_!
Ky_!Y[
l&:rj!E
un":.y
?<VQg{\
jbL>I4
00Zk6-
+G8:j;
M\<v(C
DlK#./
q5i]<hb
5[XxCq
1Nm]P(NQ9
8_N3`4K
Ue(9jX
&NQD),>,
!a*!w0
Pb}%r.
v Zuo
4A,i%J
r*j&k_
TK hhQ
QF7g}4Y
QO!8}{
-g"h#xX
3Z?4U(|
Uv)}'jOBv
H1\XX-$
jY%gb!
a3^hZC}]
y2mwX)
>6445b
RMudVu
4j&OjFY
$T'8Z#
7IA|Ro
't6&"w
##MC6M
B##gE`
<:~j3!
eL?a:]
\Drhv(s
g~R;@!
Qs&6@fS
Z.n'z:D
nh{o{K
+./@G2^@
}H#L[}U
qZ3 ^?
Htz8;pD
X`10PHC
<^lR.
TZGu>ZK
fup8'1
G9h8\*F
Atl~D-6
*wuUY
qlfiz+
%ix%Ax_t
Oe <,
yh'4bH
""8't1?
5,0\^8
5=="7[
8^YQ>6
lsEL/So
}\<SU0
$33^Kk
R'{3dw>
{FfoBq
N(Dc_S
dx/b.L]
/.|$"5
y8"bY?]
Ftyq^D
=6nR.o
1&hq]4
NKnbX/
UBpuip
:W/Pfe
N$; (Y
*'?|$?*e
L>&h!$
OQ_%pn
lQU_tNci
*[XBb
2!}"xT
HaXc`A
!Vzy&Q
e@KH)o
H'$T}E
[OVM3K
8>f28W
sSx-L%+
>y2>&4
}z1r0c
pq_8qg
tnB.%@[v
1[9{Pv
<+=UR
9Gavy[
n50}Kr9^
jS[-gZ
M8s8<+
'Yb_NB
211-sc
kw?NWL.vE
^EMf8\Q
fUD4_\
{]Zcu)
2$;(_u
Rzgl[y
_6@blm
^18Qg1"
6,iA?&x\R
gEnZRc
Yx3kxc
>Ig}V(
x~"A/4
kcb$NqY
+TK@D?$$
oknvY)
>1HtV
CrNn$3%
Gf7*LcV
*;[r}Y
4e3Z!K
R>4OuQ
D5!QX.
W.Ns+}H
'+BFN,!C
g1SX99
dmSQ3.
Kwg14v
"U{y w
HSN:R"R
DB7;u*O
lX>{&qVG
W-8c)q}
lE('cy
"!Oub/
mNATA;~
$b:)h7
e)sIZ_
\mp5)vF"XI
ldx9)*f
{m(vzS
#ng`s1@
3aCLW1fp
gN4[Lvu
$YO^NR9][P
A$"gJ:
z=*r^{
)sahOU
mPVdH!
Rxh^^(
p~OZtl
&5d5S5
W^3b|+X
:;KS>elVJG
$qAYgm8
|uL175~
o\LD1`
<F*$1M
a&nAv
!oU&VH
S9vc[(
"Cb2(CiE
%FfmO7
2.3kZzA
;&f[S
+Zu [e
VVoB!p
Z.Hk R
zZ}~.:/
rugOPQ
W}J]$|[5
YG"RnC
y,N$%
?S.F3AE
qB@&E$
mV~Q%1&
_U,t@&
KU;l]mB
E?<3x^
hGm!@
F\4Q<(
Nd^+Eh
]A]e)w*
/Odw90
(Gwu@>
9Js)fE
L{5c8LI
0@xC~)
7],-N.
;e8yy^o
c[X!<|6
gI\h(3cM
;8s!'U
wdnPX$E
t1M/X#
bt_jT$
J1w'?s
H7HhDf
-krJf
7R,S,cg
N*|Blm S
(\<WA~
w8&v*Tw
v]O78>~sfE
Hlw9hZ7
u5@0\S
3vXa(\
eTDmv{
c"Rib'y
!Tdj$E
)_P.1E
^^XjgF
ejZ=ow
N(+[T8
.mMBT;`
&z$"bd
383Q6{
F|M3cZUr
"&%uM\
R-k5y6
t&gTm
U3gR1$L
kwVc-+
0Gb^+r
_,%G/C
' d<>K
/U#)6_
K{WlaU
o8%wcf
gS#j"E'
kpSEQub
#~9N2Q
XG)%6"x
BH)XG<
){4*Sk[
6~W,B1
i&5b<?rX
A^yE9E
0qWX(p
-t(gK
tRYQow
d5W"]LM
%d./A;rNc
OwXVm!
#r_<*~
:|5AhA:sH}4
([z(kj
t;d]Hs
Hbw9]g
_p]"ak
,BbIjw1
-(tGZj
9WnB-+
5h&[$|
5mQnm^
/j2d`$e
^PeU*,TAyI%
xAe-*f
(y8\yr
'2-V@@7
=X_4/?
=3B312
*y8)<
|7UxH!
u+W^V2
Y#TET/x={
>2 d H
"pHfLE
@7|Z++
F~{KtZ
G2@W9OGf
@7\~Y1
ulu}+AHGA
/{Z%}w
2b)>ri
51x_*;
^-y`x5
*rK 5*
IU{^$3
$T`VS0
:3`}iKc
;#sUoT
a*^If$
YaHE&'
N<^e~WO
8*N#Sh/
;,],O#
0bi03T
J4ghL
>T-@^n
i^p\b_
}U7B>dOf
KKtji5+*
(P`FF_9
kBLnys
,tsczr
5n7-K%j
E!!XCC
?b6v2wk
J'w@cs
FGy/Vz
f@Ctgky
Nfs:LNR
&?zdH`
y-}uCj5AFq/d
~Dc`F/
Y!>6S#
:pp~Z j
R;pr>W
(]T`WMJf
wqFiK4y
Y8h[+5U-/
hi<,O}
]M#!Q5^
yi^0r
_h2D_
"'ui*|v
uFZ|(Z
k b((cm
P[5h~[
@7}Z%P
f_[\hJ
IHfhAL
k;FcB04p
47eg*7
rB5e0m
IstiN?
KiRzI6
u=|,@IS
jP~Gj
63{KVqW1r
m><#7P
+#Q51vk
*eNw:g
HGZ A5A
291RA0
e7{rr2cq
`^t2h+
y7-)O~;
l-NnxLi
aZAK^D%
fLXjDw
hFm!:DQ
K#\bn[
#wP>:c@
IgH%}Z
XrO*x[
9&x#h:
;)_j6;_
+{Dkbk
._so?5
S<Z#J~X
_W3H<6|
,mRVv
MpQ~z)
cQX:`{
Dy>1AL
wQRU%\5
O-nIO&
E)#pK&C
Z,U+*UM-
F3=^+f>
Um(^9%
_"d1}/I
:x|$@$
ayW:K`
RzL#(+
a`b~o
{rZ*S}
3%0X2
6$FLfJ
x0z7b,
9qvLGR
uc_HaC
(UPHUE`
~+#$z$
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
1:2M2Y2
3"3'323<3B3G3R3\3b3g3r3w3
4 4+464;4F4L4
7C8S8o8
8$939F9X9
>%>?>I>
?!?'?0?6?;?@?E?M?R?d?l?r?~?
0+03080=0_0e0l0q0~0
1"1+101P1W1j1
2#2)232=2M2]2m2v2
324B4H4
6#61666Q6V6
1 1$1(14181<1
1X3\3`3d3h3l3p3t3x3|3
5$5(5@5P5T5d5h5l5t5
64686X6t6x6
7,747x7
l>p>t>
MAINICON
Antivirus Signature
Bkav W32.AIDetect.malware1
Lionic Trojan.Win32.Noon.l!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.35d246695f2bca9c
CAT-QuickHeal Clean
McAfee Artemis!35D246695F2B
Malwarebytes Malware.AI.1850730742
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Arcabit Clean
BitDefenderTheta Gen:NN.ZexaF.34088.BuW@amaxdHhO
Cyren W32/FakeDoc.BZ.gen!Eldorado
Symantec Clean
ESET-NOD32 Clean
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:Trojan-Spy.Win32.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Comodo TrojWare.Win32.Agent.ponco@0
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
Jiangmin Clean
MaxSecure Trojan.Malware.300983.susgen
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Microsoft Trojan:Win32/Wacatac.B!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
Cynet Clean
AhnLab-V3 Trojan/Win.FormBook.R437881
Acronis suspicious
VBA32 Clean
ALYac Clean
MAX Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Kryptik!1.D6EE (CLASSIC)
Yandex Clean
Ikarus Trojan.Inject
eGambit Clean
Fortinet Clean
Webroot W32.Trojan.Gen
AVG FileRepMetagen [Malware]
Avast FileRepMetagen [Malware]
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Clean
No IRMA results available.