popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2023-02-15 23:54:16

PE Imphash

e569e6f445d32ba23766ad67d1e3787f

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000b39e4 0x000b3a00 6.35763504999
.itext 0x000b5000 0x00001688 0x00001800 5.97142542844
.data 0x000b7000 0x000037a4 0x00003800 5.04864859437
.bss 0x000bb000 0x00006de8 0x00000000 0.0
.idata 0x000c2000 0x00000fdc 0x00001000 5.0290874811
.didata 0x000c3000 0x000001a4 0x00000200 2.7509822286
.edata 0x000c4000 0x0000009a 0x00000200 1.8771629545
.tls 0x000c5000 0x00000018 0x00000000 0.0
.rdata 0x000c6000 0x0000005d 0x00000200 1.38389437522
.rsrc 0x000c7000 0x00012c68 0x00012e00 4.59376133158

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000d6710 0x00000568 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000d6710 0x00000568 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000d6710 0x00000568 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000d6710 0x00000568 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000d6710 0x00000568 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000d6710 0x00000568 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x000d893c 0x000002a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_RCDATA 0x000d8eb4 0x0000002c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_RCDATA 0x000d8eb4 0x0000002c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_RCDATA 0x000d8eb4 0x0000002c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000d8ee0 0x0000005a LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000d8f3c 0x00000584 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x000d94c0 0x000007a8 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library kernel32.dll:
• 0x4c22f4 GetACP
• 0x4c22f8 GetExitCodeProcess
• 0x4c22fc LocalFree
• 0x4c2300 CloseHandle
• 0x4c2304 SizeofResource
• 0x4c2308 VirtualProtect
• 0x4c230c VirtualFree
• 0x4c2310 GetFullPathNameW
• 0x4c2314 ExitProcess
• 0x4c2318 HeapAlloc
• 0x4c231c GetCPInfoExW
• 0x4c2320 RtlUnwind
• 0x4c2324 GetCPInfo
• 0x4c2328 GetStdHandle
• 0x4c232c GetModuleHandleW
• 0x4c2330 FreeLibrary
• 0x4c2334 HeapDestroy
• 0x4c2338 ReadFile
• 0x4c233c CreateProcessW
• 0x4c2340 GetLastError
• 0x4c2344 GetModuleFileNameW
• 0x4c2348 SetLastError
• 0x4c234c FindResourceW
• 0x4c2350 CreateThread
• 0x4c2354 CompareStringW
• 0x4c2358 LoadLibraryA
• 0x4c235c ResetEvent
• 0x4c2360 GetVersion
• 0x4c2364 RaiseException
• 0x4c2368 FormatMessageW
• 0x4c236c SwitchToThread
• 0x4c2370 GetExitCodeThread
• 0x4c2374 GetCurrentThread
• 0x4c2378 LoadLibraryExW
• 0x4c237c LockResource
• 0x4c2380 GetCurrentThreadId
• 0x4c2388 VirtualQuery
• 0x4c238c VirtualQueryEx
• 0x4c2390 Sleep
• 0x4c2398 SetFilePointer
• 0x4c239c LoadResource
• 0x4c23a0 SuspendThread
• 0x4c23a4 GetTickCount
• 0x4c23a8 GetFileSize
• 0x4c23ac GetStartupInfoW
• 0x4c23b0 GetFileAttributesW
• 0x4c23bc GetThreadPriority
• 0x4c23c0 SetThreadPriority
• 0x4c23c4 GetCurrentProcess
• 0x4c23c8 VirtualAlloc
• 0x4c23cc GetSystemInfo
• 0x4c23d0 GetCommandLineW
• 0x4c23d8 GetProcAddress
• 0x4c23dc ResumeThread
• 0x4c23e0 GetVersionExW
• 0x4c23e4 VerifyVersionInfoW
• 0x4c23e8 HeapCreate
• 0x4c23f0 VerSetConditionMask
• 0x4c23f4 GetDiskFreeSpaceW
• 0x4c23f8 FindFirstFileW
• 0x4c2400 lstrlenW
• 0x4c2408 SetEndOfFile
• 0x4c240c HeapFree
• 0x4c2410 WideCharToMultiByte
• 0x4c2414 FindClose
• 0x4c2418 MultiByteToWideChar
• 0x4c241c LoadLibraryW
• 0x4c2420 SetEvent
• 0x4c2424 CreateFileW
• 0x4c2428 GetLocaleInfoW
• 0x4c242c GetSystemDirectoryW
• 0x4c2430 DeleteFileW
• 0x4c2434 GetLocalTime
• 0x4c243c WaitForSingleObject
• 0x4c2440 WriteFile
• 0x4c2444 ExitThread
• 0x4c244c TlsGetValue
• 0x4c2450 GetDateFormatW
• 0x4c2454 SetErrorMode
• 0x4c2458 IsValidLocale
• 0x4c245c TlsSetValue
• 0x4c2460 CreateDirectoryW
• 0x4c2468 EnumCalendarInfoW
• 0x4c246c LocalAlloc
• 0x4c2474 RemoveDirectoryW
• 0x4c2478 CreateEventW
• 0x4c247c SetThreadLocale
• 0x4c2480 GetThreadLocale
Library comctl32.dll:
• 0x4c2488 InitCommonControls
Library version.dll:
• 0x4c2494 VerQueryValueW
• 0x4c2498 GetFileVersionInfoW
Library user32.dll:
• 0x4c24a0 CreateWindowExW
• 0x4c24a4 TranslateMessage
• 0x4c24a8 CharLowerBuffW
• 0x4c24ac CallWindowProcW
• 0x4c24b0 CharUpperW
• 0x4c24b4 PeekMessageW
• 0x4c24b8 GetSystemMetrics
• 0x4c24bc SetWindowLongW
• 0x4c24c0 MessageBoxW
• 0x4c24c4 DestroyWindow
• 0x4c24c8 CharUpperBuffW
• 0x4c24cc CharNextW
• 0x4c24d4 LoadStringW
• 0x4c24d8 ExitWindowsEx
• 0x4c24dc DispatchMessageW
Library oleaut32.dll:
• 0x4c24e4 SysAllocStringLen
• 0x4c24e8 SafeArrayPtrOfIndex
• 0x4c24ec VariantCopy
• 0x4c24f0 SafeArrayGetLBound
• 0x4c24f4 SafeArrayGetUBound
• 0x4c24f8 VariantInit
• 0x4c24fc VariantClear
• 0x4c2500 SysFreeString
• 0x4c2504 SysReAllocStringLen
• 0x4c2508 VariantChangeType
• 0x4c250c SafeArrayCreate
Library netapi32.dll:
• 0x4c2514 NetWkstaGetInfo
• 0x4c2518 NetApiBufferFree
Library advapi32.dll:
• 0x4c2524 RegQueryValueExW
• 0x4c252c GetTokenInformation
• 0x4c2538 RegCloseKey
• 0x4c253c OpenProcessToken
• 0x4c2540 RegOpenKeyExW

Exports

Ordinal Address Name
3 0x4541a8 TMethodImplementationIntercept
2 0x40d0a0 __dbk_fcall_wrapper
1 0x4be63c dbkFCallWrapperAddr
No antivirus signatures available.
No IRMA results available.