Static | ZeroBOX

PE Compile Time

2023-05-19 00:47:26

PE Imphash

ef98bcf16f97cf526bada512d7dd8302

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000284be 0x00028600 7.31519399502
.data 0x0002a000 0x0038b548 0x00004800 1.15973760641
.rsrc 0x003b6000 0x00004f20 0x00005000 4.43125260883

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x003b9070 0x000010a8 LANG_SAAMI SUBLANG_DEFAULT data
RT_ICON 0x003b9070 0x000010a8 LANG_SAAMI SUBLANG_DEFAULT data
RT_ICON 0x003b9070 0x000010a8 LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bac60 0x000002ba LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bac60 0x000002ba LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bac60 0x000002ba LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bac60 0x000002ba LANG_SAAMI SUBLANG_DEFAULT data
RT_GROUP_ICON 0x003ba118 0x00000030 LANG_SAAMI SUBLANG_DEFAULT data
RT_VERSION 0x003ba148 0x00000240 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x401010 FindFirstFileW
0x401014 SetThreadContext
0x401028 WriteConsoleInputA
0x401030 _lclose
0x401038 GetModuleHandleW
0x40103c LocalFlags
0x401044 ReadConsoleW
0x401050 SetCommState
0x401054 ActivateActCtx
0x401058 GlobalAlloc
0x40105c LoadLibraryW
0x401060 ReadConsoleInputA
0x401064 SetConsoleCP
0x40106c GlobalFlags
0x401070 GetConsoleAliasW
0x401074 SetSystemPowerState
0x401078 TerminateProcess
0x401080 CreateFileA
0x401084 ReplaceFileA
0x401088 DisconnectNamedPipe
0x40108c GetTempPathW
0x401094 GlobalUnfix
0x40109c GetProcAddress
0x4010a0 GlobalGetAtomNameA
0x4010a4 OpenWaitableTimerW
0x4010ac GetFileType
0x4010b4 AddAtomW
0x4010b8 RemoveDirectoryW
0x4010c0 FoldStringA
0x4010c8 WriteProfileStringW
0x4010cc VirtualProtect
0x4010dc AddConsoleAliasA
0x4010e4 CloseHandle
0x4010e8 WriteConsoleW
0x4010ec SetStdHandle
0x4010f0 FlushFileBuffers
0x4010f4 GetCommandLineW
0x4010fc CreateActCtxA
0x401104 EncodePointer
0x401108 DecodePointer
0x40110c Sleep
0x401120 GetLastError
0x401124 WideCharToMultiByte
0x401128 HeapFree
0x40112c HeapAlloc
0x401130 ExitProcess
0x401134 HeapSetInformation
0x401138 GetStartupInfoW
0x40113c RaiseException
0x401140 RtlUnwind
0x401144 LCMapStringW
0x401148 MultiByteToWideChar
0x40114c GetCPInfo
0x401154 GetACP
0x401158 GetOEMCP
0x40115c IsValidCodePage
0x401160 TlsAlloc
0x401164 TlsGetValue
0x401168 TlsSetValue
0x40116c TlsFree
0x401170 SetLastError
0x401174 GetCurrentThreadId
0x401180 IsDebuggerPresent
0x401184 GetCurrentProcess
0x401188 HeapCreate
0x40118c SetHandleCount
0x401190 GetStdHandle
0x401198 WriteFile
0x40119c GetModuleFileNameW
0x4011a0 HeapSize
0x4011a4 GetLocaleInfoW
0x4011b4 GetTickCount
0x4011b8 GetCurrentProcessId
0x4011c0 GetUserDefaultLCID
0x4011c4 GetLocaleInfoA
0x4011c8 EnumSystemLocalesA
0x4011cc IsValidLocale
0x4011d0 GetStringTypeW
0x4011d4 HeapReAlloc
0x4011d8 SetFilePointer
0x4011dc GetConsoleCP
0x4011e0 GetConsoleMode
0x4011e4 CreateFileW
Library USER32.dll:
0x4011ec CharUpperA
0x4011f0 RegisterClassW
0x4011f4 CharToOemBuffA
Library GDI32.dll:
0x401008 GetCharWidthFloatA
Library ADVAPI32.dll:
0x401000 ClearEventLogW

!This program cannot be run in DOS mode.
`.data
generic
iostream
system
string too long
invalid string position
iostream stream error
Unknown exception
CorExitProcess
bad allocation
Visual C++ CRT: Not enough memory to complete call to strerror.
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
bad exception
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
fuxogavaligiw finoneca yemadetinumahados rowivelocuwekorox
misedewojazih
zufodayu
bad cast
F@9n8u
QQSVWd
.t|PVj@
t"SS9] u
F\=(+@
j@j ^V
^SSSSS
QQSVWh
t=MOC
HtHu4j
t*=RCC
;7|G;p
tR99u2
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
PPPPPPPP
Wj@h84@
PPPPPPPP
URPQQh
t VV9u
;t$,v-
UQPXY]Y[
xa^>6j
!o!{A
G'@e&}
jD|]`?^M)db
r#2}IU
*N1}`.
]6\Li}
F9cR[Y
&k{zaCpo
-<& E]
#s 0pp
Sqb/E2
J:-9fws
EY0:2O
aKlZ-}
*hkh(a
Vv3!#D
v<4MRA1
\=+(&\*l
DKF\;nL
(Uq4<J
m<D4#*
UB/:k/!
0[59D.
Wpo5dE
@Yy]=<
)"?oBJ
7]Q+|u
OXIA:M
j?&_*
Y}%r50
`Zh%,z
FElwnK
UkII+V)
CaG!Ze
QT*+Jj
d4|".i
K_gV)o
t%hy*o
QJl\*.`
yl\*.`
dd;SI(_l\*.`
DE4vt34
YW~RF9
(kk-^g<Y3
#c4[GQ
=lJ~/,
Qix:CDM
Yl1NT~|
Yq(8|O
:v{"{q5M
W`'~NN
nsPK.h
1| I8S
@zjn~:((l
x&]@{LT
Wi$#/2
N?C{p&g
v}ictW7
i[E]45
xsUXQ2
38P-x_
(24[wy
bDT?#O
IN`&DO
NqY$/b
~s~O\oR[
Wu,*as
uSYhj~0
M$bmpuXs
/bI%"E
Ll6V;@
8*3|F@
9>B'A($
n"-LI5W
MMj7F\
lLEw&O
%;`s"0<
r>(No
ty$m':
6Sy":
53~Mft
A[LRd-/
0,^f;*
^?{;UP
4a,'3T
~YauH0
jN95t
vj}8/P
_5 g;l
k'}1gA
_G)oFR
$Qv+|%
T!$7+A<-D
pX<mP~
+p([gS#A
j<C',_
=pyOzST%
mo$gGIy
.)8F.s
'y8Jpx
2n[veITJ
rivLH]
f6Vn8c&*
UlY$G<k:R
o(XpYW
xn;5KPs
~?cx/A
Ko8qTNr|
~RWJ{6
v$a+V
jmF6L!
`uGFf7
x\<<j.~0?
(ztjXX
IN|&,u
y!#TD #
K#Np8EDQ8s
tbE+,pQ
AS&oA\
MDXPlIG
@W9{*Y
^).(-.
:[4X{u
!Bv8;D=
I/#J(,/
b&6HT#
L6g))me
@hk-gf|j
)/Kq8[
:w-dwn
:;S*V0
9ZW9?Y:
kh[(E^0|
a]&vq%
iw+-T
D$$)D$
T$<RWWW
D$$1D$
D$ )D$
D$@Ph,?@
D$HPUUU
D$()D$
T$LRUUU
D$(1D$
D$$)D$
D$PPh,?@
D$Dk'Z#
D$(hRjT
D$lmsX?
GetVolumeNameForVolumeMountPointA
GetCommandLineW
SetProcessAffinityMask
CreateFileA
FindFirstFileW
SetThreadContext
WriteConsoleOutputCharacterA
InterlockedIncrement
InterlockedDecrement
GetSystemWindowsDirectoryW
WriteConsoleInputA
GetFileAttributesExA
_lclose
MoveFileWithProgressA
GetModuleHandleW
LocalFlags
GetPrivateProfileStringW
ReadConsoleW
GetWindowsDirectoryA
GetCompressedFileSizeW
SetCommState
ActivateActCtx
GlobalAlloc
LoadLibraryW
ReadConsoleInputA
SetConsoleCP
DeleteVolumeMountPointW
GlobalFlags
GetConsoleAliasW
SetSystemPowerState
TerminateProcess
GetTimeZoneInformation
CreateActCtxA
ReplaceFileA
DisconnectNamedPipe
GetTempPathW
GetNamedPipeHandleStateW
GlobalUnfix
ReadConsoleOutputCharacterA
GetProcAddress
GlobalGetAtomNameA
OpenWaitableTimerW
GetConsoleScreenBufferInfo
GetFileType
BuildCommDCBAndTimeoutsW
AddAtomW
RemoveDirectoryW
GetCurrentConsoleFont
FoldStringA
GetProcessShutdownParameters
WriteProfileStringW
VirtualProtect
SetThreadAffinityMask
SetProcessShutdownParameters
GetWindowsDirectoryW
AddConsoleAliasA
GetVolumeInformationW
KERNEL32.dll
RegisterClassW
CharUpperA
CharToOemBuffA
USER32.dll
GetCharWidthFloatA
GDI32.dll
ClearEventLogW
ADVAPI32.dll
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
WideCharToMultiByte
HeapFree
HeapAlloc
ExitProcess
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
WriteFile
GetModuleFileNameW
HeapSize
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
CloseHandle
CreateFileW
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
8888888888888888888888888888888888
-888888888
g888888888-
888888888$!
b888888888$
3888888888
888888888
888888888$!
888888888-
888888888-
888888888-q
888888888
88888888\
888888888*q
888888888
F888888888-Q
88888888[
888888888$P7
888888888
88888888\
J88888888$5
88888888B9
8888888[
888888$!T@
88888$
88888\
888888\
88888s
s8888888
8888888
888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888888
||z~{{
}|||}~
~~z~{z
~}~{}|
{{{{}}
~{}{{|}
|}~}|}~}
~{}z{}
y}~|{~
{||z~|
~~|}{|
{~~z{|
|{|}y}
|~{z~~{
~{z{}{
y||{{|
|}}|{}{{~
}yz~|~{
}y{z||
}~{y~}|~
||}~}{|
}}~{|{~
mscoree.dll
((((( H
h(((( H
H
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
nKERNEL32.DLL
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
@Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
WUSER32.DLL
@CONOUT$
xefadusasonavuyat
xisivu
kajalokoxotofejumewehuv
yobomeze
zukajozotazilo
boyowanasogiwofow
xolitiyutewofayeratabok
socazinuvemi
kicowigutaxehutuyen
tarabayexisuvin
@jjjjjjj
@jjjjjj
jjjjjjjj
jjjjjj
VS_VERSION_INFO
StringFileInfo
037163B1
FileDescriptions
Buttis
InternalName
BloombersAction.exe
LegalTrademark1
Pascal
OriginalFilename
Blamer.exe
ProductName
Jadecky
ProductVersion
92.19.49.4
VarFileInfo
Translation
#Konodijufam puzag devijisof xelarep
hGabevibob daca podotudowad fefavomesumo fuwufalivivop fahadide boc nuzatobo malitenisuyo wesovemeyokaxew
cNinopunesewuhig jupecofa pav jucinabu nevutuxajihako fozemoresoyuge napabacajezaci xukuxugimiju gay
Niho hevape weboludadugofih"Warutato papo wubotarit fuzufehoyu
OWekinusexe liruverey giy jogifew jubuhov ribapalamo vobimevukivuke kehuvohexuje
QTuhovicunor nace racofoxasutefih texokifaga modojovip pebixuzuxawo yodik cupaxuce
_Fozokuwofewoha rulitetunahagel wulahafupozif put neheyujutot konopugeviv vuciyuwiyojah tevimeni_Jenunezoribixux kixoyisudo kuyuhutitiwaf dof zofopey rol lidamex tuvorinokaraxe suxirelufabegud
Roxubalepuge temahirazakupew$Mavoxekufoj neyujori hobujav yayecunCPizopav lumis cuvug tukogo nusu norefeyob ficuwileho xoyemicidaxeri!Cucibuhu sulutecuxiva taxuwawemedDBafu movuvawobocorez sudu vayaperetanosu ridawesepafivob voxogajusap
sKuguvicofun jazevacesedar rocubiyodemin ruruzewejinun wekososum dofede fokizudujetevag mejoxufariha sogiraremumupen
Bogapofumowi luwimemulola
Sijuh hotoragupu yemunujobupuboh
Yehi pefitudu cozexewafiwido
GasogewYCuramujuhupud rapiloriruj yosohade zoyafibefes ropayotufeniv zosimif muxapafoyabize wenibgGelazuso wudadaxoviyij vewahobiyupatun puxageromibim buwimuzazomener leban fuyef lumevavutasadun yofoxo
Ziho geyiwakudufawel
Yoziponof<Zocorehajuye bakiteray xejufo fagabituputohir libixatasiwube-Humucu heru cikujecutafu demacoce horebecetib
No antivirus signatures available.
No IRMA results available.