popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2018-11-14 08:48:15

PDB Path

z:\task_1542148442\build\src\obj-thunderbird\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb

PE Imphash

4d153c0cea0b76890c21127ac6dbd559

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0001b4cb 0x0001b600 6.405722404
.rdata 0x0001d000 0x0000440a 0x00004600 5.07917478387
.data 0x00022000 0x00000700 0x00000400 2.71403547691
.rsrc 0x00023000 0x00000378 0x00000400 2.89865414939
.reloc 0x00024000 0x00000e60 0x00001000 6.34490563845

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00023060 0x00000318 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library nss3.dll:
• 0x1001d0b0 SECITEM_HashCompare
• 0x1001d0b4 PR_SecondsToInterval
• 0x1001d0b8 PR_NewLock
• 0x1001d0bc PR_DestroyLock
• 0x1001d0c0 DER_SetUInteger
• 0x1001d0c4 PR_Sleep
• 0x1001d0c8 PR_smprintf_free
• 0x1001d0cc SECOID_Init
• 0x1001d0d0 SECOID_Shutdown
• 0x1001d0d4 UTIL_SetForkState
• 0x1001d0dc _NSSUTIL_GetSecmodName
• 0x1001d0ec DER_Encode_Util
• 0x1001d100 PL_strcasecmp
• 0x1001d104 PORT_Strdup_Util
• 0x1001d108 sqlite3_close
• 0x1001d10c sqlite3_exec
• 0x1001d110 sqlite3_busy_timeout
• 0x1001d114 sqlite3_mprintf
• 0x1001d118 sqlite3_free
• 0x1001d11c sqlite3_open
• 0x1001d120 sqlite3_prepare_v2
• 0x1001d124 PORT_FreeArena_Util
• 0x1001d128 sqlite3_bind_int
• 0x1001d12c PL_NewHashTable
• 0x1001d130 sqlite3_step
• 0x1001d134 sqlite3_column_blob
• 0x1001d138 sqlite3_column_bytes
• 0x1001d13c sqlite3_column_int
• 0x1001d140 sqlite3_finalize
• 0x1001d144 sqlite3_reset
• 0x1001d148 sqlite3_file_control
• 0x1001d14c PR_IntervalNow
• 0x1001d154 PR_GetCurrentThread
• 0x1001d158 PR_Now
• 0x1001d15c PL_CompareValues
• 0x1001d160 PR_NewMonitor
• 0x1001d164 PR_DestroyMonitor
• 0x1001d168 PR_EnterMonitor
• 0x1001d16c PR_ExitMonitor
• 0x1001d170 _NSSUTIL_UTF8ToWide
• 0x1001d174 _NSSUTIL_Access
• 0x1001d178 PR_smprintf
• 0x1001d180 PL_strncasecmp
• 0x1001d184 NSSUTIL_ArgFetchValue
• 0x1001d188 NSSUTIL_ArgStrip
• 0x1001d190 NSSUTIL_ArgGetLabel
• 0x1001d198 NSSUTIL_ArgIsBlank
• 0x1001d19c NSSUTIL_ArgHasFlag
• 0x1001d1a0 PORT_NewArena_Util
• 0x1001d1a4 PORT_GetError_Util
• 0x1001d1a8 PR_GetEnv
• 0x1001d1ac PORT_ArenaAlloc_Util
• 0x1001d1b0 PORT_ArenaGrow_Util
• 0x1001d1b4 PORT_Realloc_Util
• 0x1001d1c8 DER_GetInteger_Util
• 0x1001d1d0 PL_HashTableLookup
• 0x1001d1d4 PL_HashTableRemove
• 0x1001d1dc PL_HashTableAdd
• 0x1001d1e8 SECITEM_ZfreeItem_Util
• 0x1001d1ec SECITEM_FreeItem_Util
• 0x1001d1f0 SECITEM_DupItem_Util
• 0x1001d1f4 SECITEM_AllocItem_Util
• 0x1001d1f8 PORT_ZFree_Util
• 0x1001d1fc PORT_ZAlloc_Util
• 0x1001d200 SECITEM_CopyItem_Util
• 0x1001d204 PORT_ArenaZAlloc_Util
• 0x1001d218 PR_Unlock
• 0x1001d21c PR_Access
• 0x1001d220 PR_Lock
• 0x1001d224 PL_HashTableDestroy
• 0x1001d228 PORT_SetError_Util
• 0x1001d22c sqlite3_bind_text
• 0x1001d234 PR_snprintf
• 0x1001d23c PR_GetEnvSecure
• 0x1001d240 PR_CallOnce
• 0x1001d244 PR_SetError
• 0x1001d248 PR_Free
• 0x1001d24c PORT_Free_Util
• 0x1001d250 PORT_Alloc_Util
• 0x1001d258 PR_FindFunctionSymbol
• 0x1001d25c PR_UnloadLibrary
• 0x1001d260 sqlite3_bind_blob
Library KERNEL32.dll:
• 0x1001d000 InitializeSListHead
• 0x1001d00c GetCurrentThreadId
• 0x1001d010 GetCurrentProcessId
• 0x1001d01c TerminateProcess
• 0x1001d020 GetCurrentProcess
• 0x1001d02c WideCharToMultiByte
• 0x1001d030 GetTempPathA
• 0x1001d034 IsDebuggerPresent
Library VCRUNTIME140.dll:
• 0x1001d03c strrchr
• 0x1001d044 memcpy
• 0x1001d048 memset
• 0x1001d04c memcmp
Library api-ms-win-crt-string-l1-1-0.dll:
• 0x1001d0a0 islower
• 0x1001d0a4 isupper
• 0x1001d0a8 isdigit
Library api-ms-win-crt-convert-l1-1-0.dll:
• 0x1001d058 atoi
Library api-ms-win-crt-stdio-l1-1-0.dll:
Library api-ms-win-crt-heap-l1-1-0.dll:
• 0x1001d068 free
• 0x1001d06c malloc
Library api-ms-win-crt-filesystem-l1-1-0.dll:
• 0x1001d060 _wchmod
Library api-ms-win-crt-runtime-l1-1-0.dll:
• 0x1001d078 _initterm
• 0x1001d07c _configure_narrow_argv
• 0x1001d084 _execute_onexit_table
• 0x1001d088 _cexit
• 0x1001d08c _seh_filter_dll
• 0x1001d090 _initterm_e

Exports

Ordinal Address Name
1 0x10006246 C_GetFunctionList
2 0x10003218 FC_GetFunctionList
3 0x10006246 NSC_GetFunctionList
4 0x10007663 NSC_ModuleDBFunc
No antivirus signatures available.
No IRMA results available.