Static | ZeroBOX

PE Compile Time

2010-08-03 18:47:22

PE Imphash

fce467e88e97640985186c490e0bba21

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0000e1a8 0x0000f000 6.5404050278
.data 0x00010000 0x000011c4 0x00001000 0.0
.rsrc 0x00012000 0x00000a05 0x00001000 2.3359162687

Resources

Name Offset Size Language Sub-language File type
CUSTOM 0x000129a8 0x0000005d LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with CRLF line terminators
RT_ICON 0x00012468 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00012468 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00012468 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00012438 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000121a0 0x00000298 LANG_CHINESE SUBLANG_CHINESE_TRADITIONAL data

Imports

Library MSVBVM60.DLL:
0x401000 None
0x401004 _CIcos
0x401008 _adj_fptan
0x40100c __vbaFreeVar
0x401010 __vbaStrVarMove
0x401014 __vbaFreeVarList
0x401018 _adj_fdiv_m64
0x40101c __vbaFreeObjList
0x401020 _adj_fprem1
0x401024 None
0x401028 __vbaSetSystemError
0x40102c None
0x401034 None
0x401038 _adj_fdiv_m32
0x40103c None
0x401040 __vbaAryDestruct
0x401044 None
0x401048 None
0x40104c __vbaObjSet
0x401050 _adj_fdiv_m16i
0x401054 _adj_fdivr_m16i
0x401058 None
0x40105c __vbaFpR8
0x401060 _CIsin
0x401064 __vbaChkstk
0x401068 EVENT_SINK_AddRef
0x401070 __vbaStrCmp
0x401074 __vbaVarTstEq
0x401078 __vbaI2I4
0x40107c DllFunctionCall
0x401080 None
0x401084 _adj_fpatan
0x401088 __vbaRedim
0x40108c EVENT_SINK_Release
0x401090 None
0x401094 None
0x401098 __vbaUI1I2
0x40109c _CIsqrt
0x4010a4 __vbaExceptHandler
0x4010a8 None
0x4010ac _adj_fprem
0x4010b0 _adj_fdivr_m64
0x4010b4 None
0x4010b8 __vbaFPException
0x4010bc None
0x4010c0 _CIlog
0x4010c4 None
0x4010c8 __vbaNew2
0x4010cc None
0x4010d0 __vbaInStr
0x4010d4 _adj_fdiv_m32i
0x4010d8 _adj_fdivr_m32i
0x4010dc __vbaStrCopy
0x4010e0 __vbaI4Str
0x4010e4 __vbaFreeStrList
0x4010e8 _adj_fdivr_m32
0x4010ec _adj_fdiv_r
0x4010f0 None
0x4010f4 __vbaVarDup
0x4010f8 __vbaStrToAnsi
0x4010fc __vbaFpI4
0x401100 _CIatan
0x401104 __vbaStrMove
0x401108 __vbaCastObj
0x40110c None
0x401110 _allmul
0x401114 __vbaLateIdSt
0x401118 _CItan
0x40111c _CIexp
0x401120 __vbaFreeObj
0x401124 __vbaFreeStr

!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Talgkirtlensjou
\@hPR:O
Totodiskanto
Epistelwaistb6
Epistelwaistb6
Label3
QUARRELKRYMPEUO
Substagestrafi7
fedesvin
omdigtning
Adelsslgte5
FAGFORENINGSF
TRIVIALLI
Tagassuid
Brnemishand
DRILBORROGUES
Cardiataxiain
Dolmanensunli9
Tvangsaukt9
AKVARIEPLANT
DEROGATI
Adventuristlap7
Regningsopgav
fibersprn
partietsb
Image1
-aSm *
CR#=}G
RW66}"^
*W66h7
L>66^h
\=66^h
G`ru(>
W66hAj
bU6lhQ
$R.(63
U6.4-1
U6Z8B4P9
U6C0=n
8K66fl
=P66Xm
%V66[3
T66`ZBZf
U6^k'C
)H9PQ3
T66h?2
C:{&\[
._66hV
r^f+&B8H
aW66fl
T66u_^
P66h.|
9W66t.
{T66u%P
T66tRPw
aW66~zFif
k`v}8E9
VBO9&7
nW66N/
nW66t|
U67~qQ
U65tUw
U66=Z)r
X]K?jP
\vmFf=
9i444444444444444444444444444444444444444444
TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTf
G%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
((((((((((((((((((((((((((((((((((((((((((((f
HOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
YCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
VB5!6&*
Undladendekand7
Talgkirtlensjou
Talgkirtlensjou
Talgkirtlensjou
Totodiskanto
montricer
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
omdigtning
Substagestrafi7
DRILBORROGUES
Image1
Adventuristlap7
Dolmanensunli9
fibersprn
Label3
AKVARIEPLANT
Tagassuid
FAGFORENINGSF
kernel32
_lclose
GetEnvironmentVariableA
advapi32.dll
BackupEventLogA
GetTempPathA
user32
DestroyIcon
GetFileSize
GetTickCount
VBA6.DLL
__vbaFpR8
__vbaFpI4
__vbaAryDestruct
__vbaStrVarMove
__vbaUI1I2
__vbaGenerateBoundsError
__vbaRedim
__vbaFreeVarList
__vbaInStr
__vbaStrCopy
__vbaI2I4
__vbaLateIdSt
__vbaFreeObjList
__vbaCastObj
__vbaObjSet
__vbaFreeStrList
__vbaSetSystemError
__vbaStrToAnsi
__vbaVarDup
__vbaFreeStr
__vbaStrCmp
__vbaFreeObj
__vbaHresultCheckObj
__vbaNew2
__vbaStrMove
__vbaFreeVar
__vbaI4Str
__vbaVarTstEq
montricer
Skovmandshils
Skovmandshils
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaVarTstEq
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
Flertalsbeslutn9 = 0, 0, 0, 0, C, 0, 0, 0, 0, C
disbeliever = 0, 0, 0, 0, C, 0, 0, 0, 0, C
Pilgrimatic1
skinproblemers
GRAHAMISM
CRUSTIFICATION
radiolites
Undabbled
Reuniting1
Natteros4
RAKETVRNS
AFVENDELSE
INDEVOUTLY
holoenzyme
BIOGENSOCTAETER
Runitehydrophil
Puffball9
17:17:17
bladformet
CUMBERERS
SANKTIONR
NOTBAAD
aphasiology
Transhumanize9
CUSTOM
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
040404B0
Comments
ClipLess
CompanyName
ClipLess
FileDescription
ClipLess
ProductName
ClipLess
FileVersion
ProductVersion
InternalName
Undladendekand7
OriginalFilename
Undladendekand7.exe
No antivirus signatures available.
No IRMA results available.