Static | ZeroBOX

PE Compile Time

1970-01-01 09:00:00

PE Imphash

27516fd8750f40bdecf52a1420a0296a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00000870 0x00000a00 5.04372701317
.rdata 0x00002000 0x0000ec87 0x0000ee00 7.96384405774
.bss 0x00011000 0x00000004 0x00000000 0.0
.pdata 0x00012000 0x00000060 0x00000200 0.821881317053
.rsrc 0x00013000 0x000c13f0 0x000273f0 7.96543946359

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00013100 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x000141a8 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000141c0 0x000002c8 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library msvcrt.dll:
0x4109a0 strlen
0x4109a8 malloc
0x4109b0 memset
0x4109b8 getenv
0x4109c0 sprintf
0x4109c8 printf
0x4109d0 __argc
0x4109d8 __argv
0x4109e0 _environ
0x4109e8 _XcptFilter
0x4109f0 __set_app_type
0x4109f8 _controlfp
0x410a00 __getmainargs
0x410a08 exit
Library kernel32.dll:
0x410a18 Sleep
0x410a20 GetModuleFileNameA
0x410a28 CreateProcessA
0x410a30 CloseHandle
Library ntdll.dll:
0x410a58 NtCreateThreadEx

!This program cannot be run in DOS mode.
`.rdata
.pdata
@.rsrc
8"_&CN
nc+9jkp/e20ip5um8p./g4&-c-&0uyb+
"%s" "%s"
[+]Got the address to write 0x%x
.zDYn9>6U
JS3:4&-c-&0uyb+nc+9jkp/e20ip5um8p./g4&-c-&0uyb+nc+9jkp/e20ip5um8p./g4&-c-&0uyb+nc+9jkp/e20ip5um8p./g5&-c.&0uyb+nc+9j
zpq}~=Ax&
`aO$>5
i$k4P(
X=6O[H
a& g_r
q]!?=up\
0.P'DX
l6N[AMCO
d\4,`
=TD6T:
]G/r4B_
S.u4=,
F*;]X3
}Bu"x
;-g\[;
U9J&=CS
V9.J9k_
kA]63
z[gr,0
\W:+zk
n6"u)I
oH`VKc
)]$t(l
,IM0,#Z
aM!J<:
$/3zQqL
wt.T`fK
f>(26{
ty7-i%Dd
$AqPwy
lod.VB
>E+2&.9
nh~?80L;
},PAvz
nn]0 Z
,"v|*d<V
>9y&kVW
ss5@<*
Z!+-~?
/fx'W]
Ht#dLf
M&T3Au<
`t]u_S
B7~I]%#)
}lz[}<m
Ue5Zw2
3BJiUh
?s{zdV
eD2bO0
Lx_*ma
tX]>E=i
Xg^+13
S@U%4)
,(-^n/
?.&Ko#
%YJ}y-
e*fShb
tNZt{g
Qd~%~9
PPJQ1:7
eYv5=^LZ
TB+iNl
-;wIKCk
>Z.'t|
9-tu26-
r "qnv
z1,uKi
W.|S)/
&xS=nw
~!wFND+
eJZ)H|
D|Jd%H
f*WMNL
[z1T@'
t9n(;x
{mN49(
0MX<YH
6+$qZT
CiBH*m
"DBz&0@
"<F+%h
r(,LThD
HZNLaXDv
}},]yZ
((#XC&_
'Hi\;0
n=N=XE'
kCT--s-
f+9"P2'
0u1Yif
b4&eX/S=<
kc+qQ)x[|{
3umpK,Zq}
+&0=B #
6Ohz3eq?1b=
1qn9kxp
)]z~84jo+<8
Pnn./+
n}-&q^
Eso(.j+0
nz4bql7lsq#85c
0r./g|
As5ump
*1ippF
-a-&4uybg
&/c-.0uy.
Q00is@H%
h*e2El1
/c-go4'#v/?tg16
72bql7lsq#85c
4rp5=^|T
O -e2x
%wm81qn9u{l?rxm
g>q/ez
Fc*9j#
Q-:p.f
f-&xN{
okpg^p8
b+&Xi1
6ip}NoMcf
)<P.gd
SAr0yp5
LQ=f^m
FSlc+}K
$mq71i*3
0|0dg($t#,o8
R)nc)LnX
9p.n8uxl?rxm.
V)nc(x
'9V0=z
-:p.YKx
A#0u{m
B*g4$"
h'0u=[Hfl
C"9jk4
/6jo+<8
S;jk1,
r5uVtTn]
|+e2qQH:
vybj1"ux7*,p;o
dT6z1cgy"xgf4.*
8x<Mo[u)
'-"VL>f$
=f4&hP
|,e2tQR:
|1um}H
tQQb*ncj
O~ybnW
f2uy#t/=jd+7/q8
v~lc+9.
Bkq/e~
*je4&-
Q-<p.f
Gcgy"xgf4.*
1qn9u{l?r
nb+9jX
v4jo+<8
<`/Zou
*d(e20
Cb_~Y)Lf#
&0uyb+nc+9jkp/e20ip5um8p./
msvcrt.dll
strlen
malloc
memset
getenv
sprintf
printf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
kernel32.dll
GetModuleFileNameA
CreateProcessA
CloseHandle
SetUnhandledExceptionFilter
ntdll.dll
NtAllocateVirtualMemory
NtWriteVirtualMemory
NtCreateThreadEx
>=@95p
SUVWATAUAVAWH
XA_A^A]A\_^][
SUVWATAUAVAWH
A_A^A]A\_^][
_WQVPR
ZX^Y_APAQQRPARASH
A[AZXZYAYAX
vNHz/h
l}@m5M
bbtj*`K
i"RM4h@
H/Q )f7
OOHL1z
V+~b=]
Q@"Z6&{-
C*Y^h2
A}adX]
gQp%"7
1 EPx]
!7)&"S
*\Zv$'^
KE`*fZ~Mp
TCcAmm/
i$j[pd
["<&cM
'O)G2{
<;:R"?
'Q/V0~
f4ou-9
E*F=~U
Q{.LtUp
2LS@LY
v$UKd=
z8fO?/
\6."17
it.%qQ1|
%t`EB^=
#xRr&x~:
n,'_r"
>M}f7pa
{|iEJI
ldK=j&h
~|%v^e&m
fc_N$I
E7@GYOr^
,e+TP2
&@wMx;T
ETBMv=
b:F`B'&8
!Sh(!>T
TL&qdm
9T1$m$
..;Js
,l'u_Oa'9
_&rI^$OI1
J4'^>wA
+_!U^sn
>x.40
^*nhQ#
L6?r]'=
f.+1"'
kP|q?\
{EJ!]o
4x%8C"
2mBs!S
t<t+jJ
LBs{K`
e&4%?DS
M42;'
DG;z1S
J7e=rL
R0m&75B
;_5h|
<[gAGOhl}
cS?4z2
dW{EERcwY
r@>'?#2K
?[5yi
Z*bv1S^1
iWfxpe
rrM-O+
[,JO>8
C(}?2S
e##>?U
qPl"J
k[LUNM
jOa]1G
Dz17Vj_
%G"'bi7?
kFS`n&
7/ARy)i
=>!BhR
echXq/
xtSdLt
3eJO.0
iEJGS|Z
Ux;"y5
zD{b{-
tOng$f
^YGp v
cbe5(.
]^f*@[[
E#w$JI
,TCf+E
h>.gCZ
79JgAJ
5uzskn
R]Lk>.
dWrrsvz
*Qg>mf
Y[Q+,M
>[qNT@
5c$Y{A
T=&x\u
qK\hc.
j}My*h
=yL]5?
8(b<X^
39"a1`
IY<8,0
HO lACi
]k-3eS
.z8yb|
JV`r.0
|Yfg7P
B?Lm>O
0d~:`T
\4PI8(
7g 28q
\(aX3m
A7Q+Bcz
]xy`\#
mtR;k4\,
yw`u9\LS
^{iT@?
F;J4fu3
[pwu*^
`VDio
}oHL::^u
_E-6yP
52pe1k
{)szAl_
[X?V=-I
H0DQyo
ZQ'l%fHP
SG>H^V3x
$VLsL4
Z"+pQ{
:kV4~G
|^a|W.
z-?=_h2(B
y$[%?g
M"_mgQY
]AE3,5O
B|dwF:g
jWOqr?c}
FH>?|
Tt*'GU
Yx:3=b
nI|O&L
l|B6i>F"+*(
4F5Z:yB
I_j|#`
@ZnlF*
$,p W-o
P|h1:;
dq{d)v
ud5V9Y
&WCQnQ!+
~--/mK
.X/,]yt
ZXQ6~EI
ApQuK7
i<|:QW
0VgBq@P
WzpC?
hO9[P#
Y~nw>d|y%
N40ZJ^
keT+f
!U e+QQ
;<'^7v
[GPq8QG
_c1(R!YF
6v`}7[
ZfV4}K
/Rw2U(?S}h
s~H}]
tGGL]H@
[%.CXN
8rg"O:
l7e-7[j#O
-Due6
V11h&D
)Die`6
ir>/i'4
f1~#F;
!_:v3#N
$mL}P~V
W\mf_B
%f7`x4
TKOJ4x
/YM0&bs
sy\32H
"<Z$d6
(rGXxR
qRc{dj
s:ym+O
0&=y"q*
1X)1XP
YCx:ax~
7(4L6r
>s*^Zu
dvVT&3
a9&-Ql
S/G2lz
%'S[h9JT
H*l]51X@
Fn<>h)
xU"/hK
~5E"`
W*w8J)%
0tXNnc
Utx$u!3
Q!o[#(k
v15s<V
[b:N`7
}LgGjD
7U#9T@
g|Ep;\
(/z?kR
0@o7 X
tc{):^
V']lFF
+K6w n
vz1!n[
ry6!wpB
EH[iHNb
^Fd+L01
J_'RF.
~UR>XA
fN&RPt
cfp\FUM
\s9HmdK
EO-66+
T~ BC
`F2AG"
g>!=^
XE)&L4T
7??cp.n
'eX&~/>
I5~BN<
O1]_0\
kEe-[3
J`h@/!
O*mjbQ
{r$}r4
z:'it6
w)GWtk
=7M(LY}
2{,D!Q
f(~lnl
fQ/y1F
=v`X.u
v.NT^2
}\z5rrl(
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
181024210736Z
200110210736Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1&0$
Thales TSS ESN:AE2C-E32B-1AFC1%0#
Microsoft Time-Stamp Service0
Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
<http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
190502212032Z
200502212032Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
P#4r5L
E0C1)0'
Microsoft Operations Puerto Rico1
229803+4541050
Qhttp://crl.microsoft.com/pki/crl/products/Microsoft%20Code%20Signing%20PCA(2).crl0f
Jhttp://www.microsoft.com/pki/certs/Microsoft%20Code%20Signing%20PCA(2).crt0
microsoft1-0+
$Microsoft Root Certificate Authority0
180920174200Z
210509232813Z0y1
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
[*{ol~
microsoft1-0+
$Microsoft Root Certificate Authority0
070403125309Z
210403130309Z0w1
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
microsoft1-0+
$Microsoft Root Certificate Authority
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
1Jv1=+r
L&*H$_Z
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA
http://www.microsoft.com0
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA
190725141838Z0#
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
190502213746Z
200502213746Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
E0C1)0'
Microsoft Operations Puerto Rico1
230012+4541350
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
21}a~M
|J(00I
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20110
110708205909Z
260708210909Z0~1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
*?*kXIc
QEX82q'
WqVNHE
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 2011
9HdH|#
http://www.microsoft.com0
20190725141839.508Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
180823202652Z
191123202652Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service0
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
XP/aJQ5
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
$`2X`F
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
oK0D$"<
r~akow
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20190725210317Z
20190726210317Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
KEMax
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
181024210736Z
200110210736Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1&0$
Thales TSS ESN:AE2C-E32B-1AFC1%0#
Microsoft Time-Stamp Service0
Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
<http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
190502212032Z
200502212032Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
P#4r5L
E0C1)0'
Microsoft Operations Puerto Rico1
229803+4541050
Qhttp://crl.microsoft.com/pki/crl/products/Microsoft%20Code%20Signing%20PCA(2).crl0f
Jhttp://www.microsoft.com/pki/certs/Microsoft%20Code%20Signing%20PCA(2).crt0
microsoft1-0+
$Microsoft Root Certificate Authority0
180920174200Z
210509232813Z0y1
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
[*{ol~
microsoft1-0+
$Microsoft Root Certificate Authority0
070403125309Z
210403130309Z0w1
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
microsoft1-0+
$Microsoft Root Certificate Authority
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
1Jv1=+r
L&*H$_Z
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA
http://www.microsoft.com0
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA
190725141838Z0#
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
190502213746Z
200502213746Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
E0C1)0'
Microsoft Operations Puerto Rico1
230012+4541350
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
21}a~M
|J(00I
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20110
110708205909Z
260708210909Z0~1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
*?*kXIc
QEX82q'
WqVNHE
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 2011
9HdH|#
http://www.microsoft.com0
20190725141839.508Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
180823202652Z
191123202652Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service0
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
XP/aJQ5
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
$`2X`F
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
oK0D$"<
r~akow
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20190725210317Z
20190726210317Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
KEMax
MAINICON
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
DAMN NFO Viewer Setup
FileTitle
FileDescription
DAMN NFO Viewer Setup
FileVersion
1,00,0,0
LegalCopyright
Copyright (C) 2001 Ivanopulo / DAMN
LegalTrademark
ProductName
ProductVersion
1,00,0,0
VarFileInfo
Translation
DMicrosoft .NET Framework 4.8 Setu
Legal_policy_statement
DMicrosoft .NET Framework 4.8 Setu
Legal_Policy_Statement
DMicrosoft .NET Framework 4.8 Setu
Legal_policy_statement
DMicrosoft .NET Framework 4.8 Setu
Legal_Policy_Statement
No antivirus signatures available.
No IRMA results available.