Static | ZeroBOX

PE Compile Time

2023-03-19 22:23:10

PE Imphash

ac9b735a86914608dcd7bdd7ddcf7451

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0002a672 0x0002a800 7.36445248078
.data 0x0002c000 0x0038b548 0x00004800 1.16046349302
.rsrc 0x003b8000 0x00004d48 0x00004e00 4.41412386911

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x003bb070 0x000010a8 LANG_SAAMI SUBLANG_DEFAULT data
RT_ICON 0x003bb070 0x000010a8 LANG_SAAMI SUBLANG_DEFAULT data
RT_ICON 0x003bb070 0x000010a8 LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bcb30 0x00000212 LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bcb30 0x00000212 LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bcb30 0x00000212 LANG_SAAMI SUBLANG_DEFAULT data
RT_STRING 0x003bcb30 0x00000212 LANG_SAAMI SUBLANG_DEFAULT data
RT_GROUP_ICON 0x003bc118 0x00000030 LANG_SAAMI SUBLANG_DEFAULT data
RT_VERSION 0x003bc148 0x00000210 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x401010 SetThreadContext
0x401024 WriteConsoleInputA
0x40102c _lclose
0x401034 GetModuleHandleW
0x401038 LocalFlags
0x401040 ReadConsoleW
0x401048 SetCommState
0x40104c ActivateActCtx
0x401050 GlobalAlloc
0x401054 LoadLibraryW
0x401058 ReadConsoleInputA
0x40105c SetConsoleCP
0x401064 GlobalFlags
0x401068 GetConsoleAliasW
0x401070 SetSystemPowerState
0x401074 TerminateProcess
0x401078 CreateFileW
0x40107c FindFirstFileW
0x401080 ReplaceFileA
0x401084 DisconnectNamedPipe
0x401088 GetTempPathW
0x401090 GlobalUnfix
0x401098 GetProcAddress
0x40109c GlobalGetAtomNameA
0x4010a0 OpenWaitableTimerW
0x4010a4 GetFileType
0x4010ac AddAtomW
0x4010b0 RemoveDirectoryW
0x4010b4 FoldStringA
0x4010bc WriteProfileStringW
0x4010c0 VirtualProtect
0x4010dc WriteConsoleW
0x4010e0 SetStdHandle
0x4010e4 FlushFileBuffers
0x4010e8 GetConsoleMode
0x4010ec GetCommandLineW
0x4010f4 CreateActCtxA
0x4010fc EncodePointer
0x401100 DecodePointer
0x401104 Sleep
0x401118 GetLastError
0x40111c WideCharToMultiByte
0x401120 HeapFree
0x401124 HeapAlloc
0x401128 ExitProcess
0x40112c HeapSetInformation
0x401130 GetStartupInfoW
0x401134 RaiseException
0x401138 RtlUnwind
0x40113c LCMapStringW
0x401140 MultiByteToWideChar
0x401144 GetCPInfo
0x40114c GetACP
0x401150 GetOEMCP
0x401154 IsValidCodePage
0x401158 TlsAlloc
0x40115c TlsGetValue
0x401160 TlsSetValue
0x401164 TlsFree
0x401168 SetLastError
0x40116c GetCurrentThreadId
0x401178 IsDebuggerPresent
0x40117c GetCurrentProcess
0x401180 HeapCreate
0x401184 SetHandleCount
0x401188 GetStdHandle
0x401190 WriteFile
0x401194 GetModuleFileNameW
0x401198 HeapSize
0x40119c GetLocaleInfoW
0x4011ac GetTickCount
0x4011b0 GetCurrentProcessId
0x4011b8 GetUserDefaultLCID
0x4011bc GetLocaleInfoA
0x4011c0 EnumSystemLocalesA
0x4011c4 IsValidLocale
0x4011c8 GetStringTypeW
0x4011cc HeapReAlloc
0x4011d0 SetFilePointer
0x4011d4 GetConsoleCP
0x4011d8 CloseHandle
Library USER32.dll:
0x4011e0 CharUpperA
0x4011e4 RegisterClassW
0x4011e8 CharToOemBuffA
Library GDI32.dll:
0x401008 GetCharWidthFloatA
Library ADVAPI32.dll:
0x401000 ClearEventLogW

!This program cannot be run in DOS mode.
`.data
generic
iostream
system
string too long
invalid string position
iostream stream error
Unknown exception
CorExitProcess
bad allocation
Visual C++ CRT: Not enough memory to complete call to strerror.
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
bad exception
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
fuxogavaligiw finoneca yemadetinumahados rowivelocuwekorox
misedewojazih
zufodayu
bad cast
F@9n8u
QQSVWd
.t|PVj@
t"SS9] u
F\=(+@
j@j ^V
^SSSSS
QQSVWh
t=MOC
HtHu4j
t*=RCC
;7|G;p
tR99u2
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
PPPPPPPP
Wj@h84@
PPPPPPPP
URPQQh
t VV9u
;t$,v-
UQPXY]Y[
]_dtLn
-3JK8s
]_dtL)
^J\`k<
`W^6M\y
GBu"n'
ZWM)o$
2Hs`",
2b994qN
i&=gbs
E\f~a^
H5QTtn
'r@ORw
KHk<a-
eJUkVg
+.ZD);
e1oC|]
o"_YS1
aH4U:=
LYJORE_
;)7l4.
~+j4_8;
jGXAXE
5.VTZ3w
-orxi
~4l(:$
(5o%k5
.[`F7s
_?9R%~
m'I&qV3
$[saev
XYTzR:Z's
LD#Duz
X1>vB`
'Ytw~2
"0ILkb
B%%BJW
_*ZbR]
FC;GE]
;."qNn
{RWJjF
qlJ5 Y
G2KNC-
8EchWh
urz2tz
@~D;'6#
,cuO.D9
m[O";^
5fyZOO
qj[*P
96IIq-5K02
|e7/U1
8$(C[C
BFlOBf
l-2kna
:~oU/U
url0>n
[&$|c_`S
Z:ljRU>9l
;*)@|aR}
AP8m[LL
Gjx} u)
lq~[f`!
a46HXT
{:N9XF
goV;~16
ia|Av/
5nF-I*
iqp208
wXZT:r
!M-YA)
xQ)l'Y
s@3HoZ.
;R&WJJ
AJ8)/Y'
:-FA)\
&.cR+*
5`|<6X
P_vn5hL
.M8}(
2,C"+,UsT
sZ=gzU
NI(0Rp-
^m*xP7T3K
|;/e(1>5;V
eHU1V
WG;i!Z
Uk&[$<
?^jF6o|<$
ASm?-`
3Zv Uv
k4*;*[nd(
(8q88nd
xDm~G$
f`vC>P
D\1l,9
H1u&GS9!
w?ztq~
^e''*l
C?\2AX
w74Yjus
/+m/H7O
$i_G__
X};Kn|
c(3)+xk`
$Dgw*IV
AZ5@[HO2X
EGo'/<i8c
/3XS.Jk
mKwta)
y)J@iL
n$ZKlE^pn
wS5SYi
vC1VA@c
z""0ds
kH>]lQ
~zS3Wbk
K\;Uq
2feF |
6jQvaGr
loO~b(!
e!uSs
#|^PO% ;
OfiY&i5%
m$!dL
D$ )D$
L$<QSSS
D$ 1D$
D$@Ph,?@
D$@PWWW
D$ )D$
D$ 1D$
L$HQh,?@
D$Dk'Z#
D$(hRjT
D$lmsX?
GetVolumeNameForVolumeMountPointA
GetCommandLineW
SetProcessAffinityMask
FindFirstFileW
SetThreadContext
WriteConsoleOutputCharacterA
InterlockedIncrement
InterlockedDecrement
GetSystemWindowsDirectoryW
WriteConsoleInputA
GetFileAttributesExA
_lclose
MoveFileWithProgressA
GetModuleHandleW
LocalFlags
GetPrivateProfileStringW
ReadConsoleW
GetCompressedFileSizeW
SetCommState
ActivateActCtx
GlobalAlloc
LoadLibraryW
ReadConsoleInputA
SetConsoleCP
DeleteVolumeMountPointW
GlobalFlags
GetConsoleAliasW
SetTimeZoneInformation
SetSystemPowerState
TerminateProcess
CreateFileW
CreateActCtxA
ReplaceFileA
DisconnectNamedPipe
GetTempPathW
GetNamedPipeHandleStateW
GlobalUnfix
ReadConsoleOutputCharacterA
GetProcAddress
GlobalGetAtomNameA
OpenWaitableTimerW
GetFileType
BuildCommDCBAndTimeoutsW
AddAtomW
RemoveDirectoryW
FoldStringA
GetProcessShutdownParameters
WriteProfileStringW
VirtualProtect
GetConsoleCursorInfo
SetThreadAffinityMask
SetProcessShutdownParameters
GetWindowsDirectoryW
GetConsoleProcessList
GetVolumeInformationW
KERNEL32.dll
RegisterClassW
CharUpperA
CharToOemBuffA
USER32.dll
GetCharWidthFloatA
GDI32.dll
ClearEventLogW
ADVAPI32.dll
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
WideCharToMultiByte
HeapFree
HeapAlloc
ExitProcess
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
WriteFile
GetModuleFileNameW
HeapSize
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
CloseHandle
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
z~}z|z
|{|~~~z~
}{{~|y
{z}}{|
}|~{~~y|
|~}y}~
|}}z{{z
{}y||{}
~|~}z|~
|~~~~~
{~|{~|||
|~{|~}z}
|z}z{z
|{~}z{|
{|~}yz
{z~}||~
}~}|~y
|}~~{~
z~~}z~
}z}|{}
~z|~z|
|~}}{}|
~z|{z{
{|~zz}|
~y{z}||||
zz{z}{
z~zz~~
|z}|~~z
{{|{{|~
~{{}{z
|~~||}{{
z}z{|~{}|~
}~|y{}z
{|{}}}
mscoree.dll
((((( H
h(((( H
H
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
nKERNEL32.DLL
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
@Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
WUSER32.DLL
@CONOUT$
xefadusasonavuyat
xisivu
kajalokoxotofejumewehuv
yobomeze
zukajozotazilo
boyowanasogiwofow
xolitiyutewofayeratabok
socazinuvemi
kicowigutaxehutuyen
tarabayexisuvin
@jjjjjjj
@jjjjjj
jjjjjjjj
jjjjjj
VS_VERSION_INFO
StringFileInfo
037163B1
FileDescriptions
Buttis
InternalName
BloombersAction.exe
LegalTrademark1
Pascal
OriginalFilename
Blamer.exe
ProductVersion
92.19.49.4
VarFileInfo
Translation
#Konodijufam puzag devijisof xelarep
hGabevibob daca podotudowad fefavomesumo fuwufalivivop fahadide boc nuzatobo malitenisuyo wesovemeyokaxew
hBejop lelapezepoyim fukil voziduculidapac zatelexegenalel xujitemawison yexidiyagi kusimuretewi nocebusu`Gerejofu hojutesamig hegufefopuv yeholuvuc surefunijeyoga fexirajikise higas zohe jirinabazokoka
Xulawujerodagup xiwi
TGiwolulapuzexu dirun kaga texolipufacetuj tuhoco dekusoyofi tugalevid zawixifebuguxu
ZCozigex yeduwanoyur kemilamujeku zinehugofawofas cesoh xizihuloli suxu sizace harajunadunu
GNowagi relehovuguze bow huhirafenaxarab huluv mojemegabayo bubodozejado
Vayik lozepulukezab segiweho
9Yuzovorex hekemasimiy yuhamufizi diyuhirelen mekarat veva
Lokugice
Vubehufuzu fobujivipid-Kecocimewihisav sesupolirutapi zinotace conav
Fobokotib kekodi xomu zosajivi
"Mut gayuli nakolameleyi gavuxi vax
Muzisusive xabu
>Tekabuheziyanu zewuzamovoc zituvurutujoyi vawukawafoz cujogupe
-Sobaxoputeput jehok pemuvuxivi guruhopazumevo
Juxofoxomoniz rofuferojalofi xoz
Tegexap8Panuwo jukimebav kakehuya ketu hovabuluwiw fibucuteb xowDZeverahexux suwuteyudivo yudev rimoca lapohucumobake gajohijaravubev
VRihulewaxawaka xipo duwufixasi zinimomenadunu jufiditusiga dututanegijan dilisiputecay
No antivirus signatures available.
No IRMA results available.