Static | ZeroBOX

PE Compile Time

1992-06-20 07:22:17

PE Imphash

f2a99bb1368a40615d9bd5fe0d2b496d

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text\x00\x13 0x00001000 0x00049000 0x00000000 0.0
.rdata 0x0004a000 0x00025000 0x00024a00 7.9964838098
.data\x00\x13 0x0006f000 0x00002000 0x00001a00 4.5012068198
.rsrc\x00\x13 0x00071000 0x00000827 0x00000a00 4.82575162164

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0006f19c 0x00000ea8 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data
RT_RCDATA 0x0006a040 0x0000072c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00070048 0x00000014 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data
RT_VERSION 0x00070060 0x00000348 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data
RT_MANIFEST 0x000703ac 0x00000245 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.DLL:
0x4706bc LoadLibraryA
0x4706c0 GetProcAddress
0x4706c4 VirtualProtect
0x4706c8 VirtualAlloc
0x4706cc VirtualFree
0x4706d0 ExitProcess
Library advapi32.dll:
0x4706d8 RegCloseKey
Library comctl32.dll:
0x4706e0 ImageList_Add
Library comdlg32.dll:
0x4706e8 GetSaveFileNameA
Library gdi32.dll:
0x4706f0 SaveDC
Library oleaut32.dll:
0x4706f8 VariantCopy
Library shell32.dll:
0x470700 DragFinish
Library user32.dll:
0x470708 GetDC
Library version.dll:
0x470710 VerQueryValueA

This program must be run under Win32
.rdata
(.Zm[q
ky"Ktn
E<Ta!U
QDfe2
+eG4Q@4D&
KQ%D=[
A!O.#z
o4qJ*/
5^+;)
\UAcc6X
1&LKU4
Xgvie9
R+!TT<
f'ov?M
i`pg92
yJA?I<
>m#>.U
:\B:Ai
~xTwm}T
u04gbO[R
-Mk}yC
H&dT5=>
1HG*Yr
|2'C;yL
f6^qDt
#KYQt3
5bJnw7
PEzB_Eb
^]c<V}
7gxz/j
m4:4DY
s>S:>6fJ
NyL[E>b
,3gW#1
<F>`ZL
\:gObxj
[n4?,'
Q29a?lt
-;|:zv
;9+G5]Bv
!>{>o(
?USf{G
wTc2u
,#.Aq&
w}<N 7Tb
vI)J-n}
zO#V^]l-v
ydn:5
ZVRQ1o
sTdQL47
]6e4su
~!!Z%nf
`XG =7Ry5
Jv=;k\
J2!e4H
7a?9$*R*b
Ee0%by
{N3@h=
'w:r0
16\6Vi
%$"y:A
p#,ly^
Dx7/?.9
;v!RJ
YSsSa$
Kumx"3
]lbIUn
kW~bXd.i\1
e=$m*u
XykY)>
BkFZr&
/m"qq
`yL36[
Spzlsa:HaW
E`@QA$
;zXd{w
A>_tUH
c5Lef%
CCSf_r]
Ql$knS
*hg!:C
!<lo)MA
Ab8v@
{1h-^U
)AOew} Q
H7tOsdn"
"QJ6Afw
LlPw<KdN$
49e.TUc
6b&$D8
j1l`<dl#
<-Gl[?/d
wy86Uk
yI2|^GXs
/N}Jyh
l&r41q
wTn|t=
J CcN'
Lu",u/
SrM;)G
q.a^9a
;ww:5A
i-H>pj}3@S
5+mbr'
I~J9{k,
=]} iOy
E''a"d
x^SE'\
,$32lQeZ
STf8+X
V.B84?
Lasmk\
os@G*m
\jDDO>>
WsKU],
"#\@G]
-QeLS
y:Je>\+
Z7rmC`{
vo2d+L&
KKwXK.
Fjf7-c
n|N{uV
3|A(?rB>i
*R9@01
OU$V[k
l/{aE:
/73v"8W
BA,!58Y
"wk3D~+
yo-oE}@(p
a=>V`D
VQ i(d
1h~(}b
$hK"*W|
r|"qt;x
,3ca/Ww
^HP4FH
X#1,~k
[+\2=J
u(?z[myI
GJ`76>
L+/VWU
47}Ru5z
DR~_n*
Vy?/.f
csw5E
{Z|ZeQ!
)ES1zL
xGMcfj
IgX@xP
^Aoh}o
1d'>Y(
,A0lC"
132>@=E
]7tX|R
F3d\g{
~c0e}r1
{R(mor
UVGI7@
@Bk9WI
;ufsBM
#0t%q;Ad
g.oZHu
7/ct;ew
Cwp8_D
z94\k+
jJhw`Y
'I_WA
c7~aI`imWKj
B]U(jqa
Hp+x7}
LGEHg-
GC]#-eF
HE2K
%.CR$0
#&"dQ!
>[E70}
vI<:(VX
<w?1_+
VzVhA;
|Z lOi
oq|<&.
PVt9TS
daM*P#
Ll(MPf$
20_jv+%
]r3E'|
qydY$
{)MA_gA
H&Zj3'
D``1SX
pn:e].
b+J Dm
bl2#*_
ADHkO_
>eCKr_s'
tm@9>d
6'h+D
RCLS-t
im+OvKb
id-C>;
kSo6*]
qO1}NgN
S[V,Y!
S4#crg*A
QtV?0[gQ
<$h7E-
zFC0\E
d|<"s%
qFa_!3
!t:r?xcj
J H8UfO
TZ-clJt
LQWr`7|u$!
(_dl"t
7sG;,z
E'yLC0
a*~wh^ULFl
2_H(/d
q]y! qom
Aq\Gb2rq_(U
B)tna&
Z+!:#0
:G5BY(
4~EDBok
D;Qg0![
Z>SrC>
JQKCj~
^hIQb5
bg_STwyU
q(WZE\`@
Q(R[RL
65cRon
?!Z4_j
'*>sRu_
qC;O_
vV:U#A
=uSUa^
:d'{I?
@A^~N,
>8KJu}
<6b @
<RApFEg
W^&hD4
&cE~KC
qEk,0JDfr
t}Ma;5
[!!@}-
t$t#t$l
D$t#D$h
D$t+D$\
.)D$H)
s`)L$4
D$t+D$\
)D$H)
9l$\w_
XPTPSW
.(((E677
C.*((*v,
SI49+EHU,jjU
GT(*A4A
k?_<QA])9
Uc08./gC
oWMBrx8E)/Ab:
sf)F2y
=px4QrQf?U
--ua)C@2YLc
:=XM?kll
Ag)Vd5
bGD9(*(/+*T
754(((((((()++R]H7
77=-33
:0I4((((((((((((/+E26
T.)((((
*(*/(((()+/
PSh)(((((P(*92.)(((()(@4
>@8v2g)(((()Q
6/(((((+B
8.2e((((((
{)((((((*
4(((/*()
B)(;P2)((((()4
18.**(C(9()+(((/)(((((()EK
V((((((((((((((((6
e)((((((((((((((((6
0P.*)S
()(((((((((((((((.6
9*((((((((((((((*E0
-@.(*9h)*(((((((((((((()fK
we);V(((((()/*((()R
Q84)((((i4_.)((+83
NC)((()
\2)((()}:
hF(((((*)/((()
8+(((((((((((+]>
S/((((((((((
9((((((((((F
2++)(((((((*+9A
Uy5R(V)*()++*8r
1yz8D()D
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
type="win32"
name="DelphiApplication"
version="1.0.0.0"
processorArchitecture="*"/>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
language="*"
processorArchitecture="*"/>
</dependentAssembly>
</dependency>
</assembly>
KERNEL32.DLL
advapi32.dll
comctl32.dll
comdlg32.dll
gdi32.dll
oleaut32.dll
shell32.dll
user32.dll
version.dll
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
RegCloseKey
ImageList_Add
GetSaveFileNameA
SaveDC
VariantCopy
DragFinish
VerQueryValueA
QSQVWh
X_^Y[X
TFORM1
MAINICON
VS_VERSION_INFO
StringFileInfo
080404B0
Comments
CompanyName
FileDescription
riptio
LegalCopyright
2005-2008
LegalTrademarks
demark
ProductName
FileVersion
ProductVersion
InternalName
IconCutter
OriginalFilename
IconCutter.exe
VarFileInfo
Translation
No antivirus signatures available.
No IRMA results available.